VARIoT IoT vulnerabilities database

D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function. D-Link DIR-882 is a wireless router made by China D-Link Company. The vulnerability is due to the lack of length verification of the input data in the websRedirect function. Attackers can exploit the vulnerability to cause denial of service or remote code execution

Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameters: starthour, startminute , endhour, and endminute. NETGEAR R7000P is a wireless router made by NETGEAR. No detailed vulnerability details are currently available

D-Link DIR878 1.02B04 and 1.02B05 are vulnerable to Buffer Overflow. D-Link DIR-823G is a wireless router made by China D-Link Company. The vulnerability is caused by the lack of length verification of the input data in the sub_4883F0 function. Attackers can use this vulnerability to cause denial of service or remote code execution

Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via wan_dns1_pri. NETGEAR R7000P is a wireless router made by NETGEAR. There is a security vulnerability in NETGEAR R7000P V1.3.0.8, which is caused by the influence of the wan_dns1_prii parameter. No detailed vulnerability details are currently available

D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow. D-Link DIR-882 is a wireless router made by China D-Link Company. The vulnerability is caused by the sub_46D180 function wan_wan_phy_ifname parameter lacking length verification for input data. Attackers can exploit this vulnerability to cause denial of service or remote code execution

Netgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters: stamode_dns1_pri and stamode_dns1_sec. NETGEAR R7000P is a wireless router made by NETGEAR. This vulnerability stems from the lack of length verification of the input data of the stamode_dns1_pri and stamode_dns1_sec parameters. Attackers can exploit the vulnerability to cause denial of service or remote code execution

Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_server_ip. NETGEAR R7000P is a wireless router made by NETGEAR. The vulnerability stems from the lack of length verification of the data entered in the openvpn_server_ip parameter. Attackers can use this vulnerability to cause denial of service or remote code execution

D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control. D-Link DIR-878 is a wireless router made by China D-Link Company. An attacker could exploit this vulnerability to log in with a blank password

Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameters apmode_dns1_pri and apmode_dns1_sec.

Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_push1. The NETGEAR R7000P is a dual-band router from Netgear's Nighthawk series, optimized for gaming, streaming, and mobile devices. Detailed vulnerability details are not available at this time

A command injection vulnerability has been found on D-Link DIR-823G devices with firmware version 1.02B03 that allows an attacker to execute arbitrary operating system commands through well-designed /HNAP1 requests. Before the HNAP API function can process the request, the system function executes an untrusted command that triggers the vulnerability. D-Link DIR-823G is a wireless router made by China D-Link Company. D-Link DIR-823G firmware version 1.02B03 has a security vulnerability. No detailed vulnerability details were provided at this time

Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameters KEY1 and KEY2. NETGEAR R7000P is a wireless router made by NETGEAR. The vulnerability is due to the lack of length verification of the input data for the KEY1 and KEY2 parameters. Attackers can use this vulnerability to initiate denial of service or remote code execution

Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_pri. NETGEAR R7000P is a wireless router made by NETGEAR. This vulnerability is caused by the lack of length verification of the data input by the wan_dns1_pri parameter in /usr/sbin/httpd. Attackers can exploit the vulnerability to cause denial of service or remote code execution

D-Link DIR823G 1.02B05 is vulnerable to Commad Injection. D-Link DIR-823G is a wireless router made by China D-Link Company. D-Link DIR-823G firmware version 1.02B05 has a command execution vulnerability, which is caused by sub_42383C failing to properly filter special characters, commands, etc. in constructing commands. An attacker could exploit this vulnerability to cause arbitrary command execution

IBM DataPower Gateway 10.0.3.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.9, 2018.4.1.0 through 2018.4.1.22, and 10.5.0.0 through 10.5.0.2 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235527. IBM of IBM DataPower Gateway contains a session expiration vulnerability.Information may be obtained and information may be tampered with

A CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of service of the Ethernet communication of the controller when sending a specific request over SNMP. Affected products: Modicon M340 CPUs(BMXP34* versions prior to V3.40), Modicon M340 X80 Ethernet Communication modules:BMXNOE0100 (H), BMXNOE0110 (H), BMXNOR0200H RTU(BMXNOE* all versions)(BMXNOR* versions prior to v1.7 IR24). Schneider Electric Modicon M340 is a medium-range PLC (programmable logic controller) for industrial processes and infrastructures from Schneider Electric, France. Schneider Electric products have an authorization problem vulnerability. This vulnerability stems from improper authority management

A vulnerability exists in the Intelligent Electronic Device (IED) Connectivity Package (ConnPack) credential storage function in Hitachi Energy’s PCM600 product included in the versions listed below, where IEDs credentials are stored in a cleartext format in the PCM600 database and logs files. An attacker having get access to the exported backup file can exploit the vulnerability and obtain user credentials of the IEDs. Additionally, an attacker with administrator access to the PCM600 host machine can obtain other user credentials by analyzing database log files. The credentials may be used to perform unauthorized modifications such as loading incorrect configurations, reboot the IEDs or cause a denial-of-service on the IEDs. Hitachi Energy PCM600 is a simplified management tool for protection and control relays from Hitachi, Japan. Hitachi Energy PCM600 has an information disclosure vulnerability. The vulnerability stems from the fact that IED credentials are stored in the PCM600 database in clear text

A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior). Schneider Electric Modicon M340 is a medium-range PLC (programmable logic controller) for industrial processes and infrastructures from Schneider Electric, France. Schneider Electric products have a number error vulnerability. The vulnerability is caused by a memory access violation. Attackers can use the vulnerability to launch a denial of service attack

A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote attacker to access the device using an improper pre-configured password if the remote administration feature has been enabled by an authenticated administrator. ZyXEL of lte3301-m209 A vulnerability exists in the firmware regarding the use of hardcoded credentials.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Zyxel LTE3301-M209 is a wireless router made by China Zyxel. There is an access control error vulnerability in Zyxel LTE3301-M209 V1.00(ABLG.6)C0 and earlier versions, which is caused by incorrect access control

There is a buffer overflow vulnerability in ZTE MF286R. Due to lack of input validation on parameters of the wifi interface, an authenticated attacker could use the vulnerability to perform a denial of service attack. ZTE MF286R is a wireless router made by China ZTE Corporation (ZTE)