CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 87683 | CVE-2016-10175 | Candidate | The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers to the password-recovery questions. | Assigned (20170129) | None (candidate not yet proposed) | View | |
| 87684 | CVE-2016-10176 | Candidate | The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the embedded web server (uhttpd) and processed accordingly. The web server also contains another URL, apply_noauth.cgi, that allows an unauthenticated user to perform sensitive actions on the device. This functionality can be exploited to change the router settings (such as the answers to the password-recovery questions) and achieve remote code execution. | Assigned (20170129) | None (candidate not yet proposed) | View | |
| 87685 | CVE-2016-10177 | Candidate | An issue was discovered on the D-Link DWR-932B router. Undocumented TELNET and SSH services provide logins to admin with the password admin and root with the password 1234. | Assigned (20170129) | None (candidate not yet proposed) | View | |
| 87686 | CVE-2016-10178 | Candidate | An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 (UDP) launches the "/sbin/telnetd -l /bin/sh" command. | Assigned (20170129) | None (candidate not yet proposed) | View | |
| 87687 | CVE-2016-10179 | Candidate | An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607. | Assigned (20170129) | None (candidate not yet proposed) | View |
Page 19868 of 20943, showing 5 records out of 104715 total, starting on record 99336, ending on 99340
