VARIoT IoT vulnerabilities database

A vulnerability, which was classified as critical, was found in D-Link DIR-825 2.03. This affects the function do_file of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

MP C3004ex is a color digital multifunction printer. Ricoh (China) Investment Co., Ltd. MP C3004ex has a weak password vulnerability, which can be exploited by attackers to log in to the system and obtain sensitive information.

Logger1000 is a data collection, power control and protocol conversion device used in photovoltaic equipment such as inverters in photovoltaic power stations. Sungrow Power Supply Co., Ltd.'s Logger1000 has an information leakage vulnerability, and attackers can exploit the vulnerability to obtain sensitive information.

Sharp MX-3050V is a multifunctional digital copier. Shanghai Sharp Electric Co., Ltd. Sharp MX-3050V has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.

Neterbit NW-431F is a router developed by Neterbit. Neterbit NW-431F has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.

netcore NBR1005GPEV2 is a router produced by Netcore that supports multiple network functions. Netcore NBR1005GPEV2 of Netcore Technology Co., Ltd. has a command execution vulnerability, and attackers can exploit the vulnerability to execute commands.

Samsung SL-J3560FW is a ‌multi-function inkjet printer‌. Samsung (China) Investment Co., Ltd. Samsung SL-J3560FW has a weak password vulnerability, which can be exploited by attackers to log in to the system and obtain sensitive information.

TOSHIBA e-STUDI03505AC is a color digital multifunction printer. TOSHIBA e-STUDI03505AC of Toshiba (China) Co., Ltd. Shanghai Branch has a weak password vulnerability, which can be exploited by attackers to log in to the system and obtain sensitive information.

HP Color LaserJet Pro M252n is a laser printer under HP (HP). HP Color LaserJet Pro M252n of HP Trading (Shanghai) Co., Ltd. has a weak password vulnerability. Attackers can use the vulnerability to log in to the system and obtain sensitive information.

HP Color LaserJet Pro MFP M477fdn is a color laser multifunction printer launched by HP. HP Color LaserJet MFP M477fdn of HP Trading (Shanghai) Co., Ltd. has a weak password vulnerability, which can be exploited by attackers to log in to the system and obtain sensitive information.

CentreWare Internet Services WorkCentre 3215 is a black and white laser multifunction printer. CentreWare Internet Services WorkCentre 3215 of Fujifilm Business Innovation (China) Co., Ltd. has a weak password vulnerability, which can be exploited by attackers to log in to the system and obtain sensitive information.

Fujifilm Apeos C4571 is a high-speed color multifunction integrated printer. Fujifilm (China) Investment Co., Ltd. Fujifilm Apeos C4571 has a weak password vulnerability, which can be exploited by attackers to log in to the system and obtain sensitive information.

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formTmultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. TOTOLINK X15 is a network wireless extender from China's TOTOLINK Electronics. Remote attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service attack

A vulnerability was found in TOTOLINK A3002R 4.0.0-B20230531.1404. It has been classified as critical. This affects an unknown part of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. TOTOLINK A3002R is a wireless router produced by China's TOTOLINK Electronics. Remote attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service attack

A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. TOTOLINK A3002RU is a wireless router product of China's Jiweng Electronics (TOTOLINK) Company. Remote attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service attack

A vulnerability has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. TOTOLINK EX1200T is a Wi-Fi range extender from China's TOTOLINK Electronics. Remote attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service attack

A vulnerability classified as critical has been found in D-Link DIR-665 1.00. This affects the function sub_AC78 of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. D-Link DIR-665 is a high-performance wireless router and a flagship product of D-Link. Attackers can exploit this vulnerability to cause remote code execution or service crash

A vulnerability, which was classified as critical, has been found in TP-Link TL-WR940N V4. Affected by this issue is some unknown functionality of the file /userRpm/WanSlaacCfgRpm.htm. The manipulation of the argument dnsserver1 leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. TP-LINK Technologies of TL-WR940N Firmware has a classic buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

A vulnerability classified as critical was found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. TOTOLINK X15 is a network wireless extender from China's TOTOLINK Electronics. The vulnerability is caused by the submit-url parameter in the /boafrm/formMultiAP file failing to correctly verify the length of the input data. Remote attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service attack

A vulnerability classified as critical has been found in TOTOLINK A3002R 4.0.0-B20230531.1404. Affected is an unknown function of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. TOTOLINK A3002R is a wireless router from China's TOTOLINK Electronics. The vulnerability is caused by the submit-url parameter in the /boafrm/formSysLog file failing to properly verify the length of the input data. Remote attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service attack