Vulnerabilidades

A vulnerability exists in iControl REST and the TMOS Shell (tmsh) where a highly privileged, authenticated attacker with at least the Manager role can create configuration objects that allow running arbitrary commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

When a BIG-IP is configured with DNS caching (Such as a DNS profile with caching enabled, SSL Orchestrator, Advanced WAF DoS protection), undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

When the BIG-IP Configuration utility is configured to use Lightweight Directory Access Protocol (LDAP) authentication, undisclosed traffic can cause the httpd process to exhaust the available file descriptors. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

An authenticated iControl SOAP user may be able to obtain information of other accounts. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

When running in Appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

When Bidirectional Forwarding Detection (BFD) is configured in Static and Dynamic routing protocols, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to stop processing BFD packets and cause the configured routing protocol to fail over. Note: Software versions which have reached End of Technical…

A vulnerability exists in BIG-IP scripted monitors that may allow an authenticated attacker with the Resource Administrator or Administrator role to execute arbitrary system commands with higher privileges. In appliance mode deployments, a successful exploit can allow the attacker to cross a security boundary. Note:…

A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configuration objects that allow running arbitrary commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator role privileges to cross a security boundary and delete files. Note: Software versions which have reached End of Technical Support (EoTS) are…

A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210. This affects the function portForward. Performing a manipulation of the argument ip_address results in command injection. The attack can be initiated remotely. The exploit is now public and may be used.

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this issue is the function sub_445E7C of the file /goform/singlePortForward. Such manipulation of the argument ip_address leads to command injection. It is possible to launch the attack remotely. The exploit has been…

A weakness has been identified in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this vulnerability is the function sub_445E7C of the file /goform/formDMZ.cgi. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be…

Link Preview JS extracts web links information. Prior to 4.0.1, the library did not check for IPv6 loopback attacks. There was also a DNS attack, where an address could be resolved into an internal IP. This could cause internal data leaks. This vulnerability is fixed in 4.0.1.

D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub_42EF14 of the file /bin/alphapd. The manipulation of the argument LightSensorControl leads to command injection.

A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes os command injection. It is possible to initiate the attack remotely.

A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function delete/rename/copy/move/chmod/chown of the file /cgi-bin/webfile_mgr.cgi. The manipulation results in os command injection. The attack may be performed from remote. The exploit has been released to the public and may be used for…

A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the function cgi_speed/cgi_dhcpd_lease/cgi_ddns/cgi_set_ip/cgi_upnp_del/cgi_dhcpd/cgi_upnp_add/cgi_upnp_edit of the file /cgi-bin/network_mgr.cgi. The manipulation leads to os command injection. The attack is possible to be carried out…

Una vulnerabilidad fue encontrada en D-Link DCS-935L hasta 1.10.01. El elemento impactado es la función SetDeviceSettings del archivo /web/cgi-bin/hnap/hnap_service del componente HNAP Service. La manipulación del argumento AdminPassword resulta en desbordamiento de búfer. El ataque puede ser ejecutado remotamente. El…

Se ha encontrado un fallo en Wavlink NU516U1 240425. El elemento afectado es la función sys_login1 del archivo /cgi-bin/login.cgi. La ejecución de una manipulación del argumento ipaddr puede llevar a una inyección de comandos del SO. El ataque puede ejecutarse de forma remota. El exploit ha sido publicado y puede ser…

Una vulnerabilidad fue detectada en Wavlink NU516U1 240425. El elemento afectado es la función WifiBasic del archivo /cgi-bin/wireless.cgi. Realizar una manipulación del argumento AuthMethod/EncrypType resulta en inyección de comandos del sistema operativo. La explotación remota del ataque es posible. El exploit es…

Se ha detectado una vulnerabilidad de seguridad en Wavlink NU516U1 240425. Afectada está la función advance del archivo /cgi-bin/wireless.cgi. Tal manipulación del argumento wlan_conf/Channel/skiplist/ieee_80211h conduce a inyección de comandos de SO. El ataque puede lanzarse remotamente. El exploit ha sido divulgado…

Se ha identificado una debilidad en Wavlink NU516U1 240425. Este problema afecta a la función wzdapMesh del archivo /cgi-bin/adm.cgi. Esta manipulación causa inyección de comandos del sistema operativo. El ataque puede iniciarse de forma remota. El exploit se ha hecho público y podría usarse para ataques. Se contactó…

Se ha descubierto una falla de seguridad en Wavlink NU516U1 M16U1_V240425. Esta vulnerabilidad afecta la función wzdap del archivo /cgi-bin/adm.cgi. Realizar una manipulación del argumento EncrypType/wl_Pass, que es pasado directamente por el atacante/por lo que podemos controlar el EncrypType/wl_Pass, resulta en…

Una vulnerabilidad fue identificada en Wavlink NU516U1 M16U1_V240425. Esto afecta la función wifi_region del archivo /cgi-bin/adm.cgi. Dicha manipulación del argumento skiplist1/skiplist2 conduce a inyección de comandos del sistema operativo. El ataque puede ser lanzado de forma remota. El exploit está disponible…

Se determinó una vulnerabilidad en Wavlink NU516U1 M16U1_V240425. Afectada por este problema es la función wan del archivo /cgi-bin/adm.cgi. Esta manipulación del argumento ppp_username/ppp_passwd/rwan_ip/rwan_mask/rwan_gateway es directamente pasada por el atacante/por lo que podemos controlar el…