/ feedNETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution. CISA required action: Apply updates per vendor instructions.
Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise. CISA required action: The impacted product is end-of-life and should be disconnected if st…
A remote code execution vulnerability exists in all series H/W revisions routers via the DDNS function in ncc2 binary file. CISA required action: The impacted product is end-of-life and should be disconnected if still…
Multiple D-Link routers contain an unspecified vulnerability that allows for execution of OS commands. CISA required action: The vendor D-Link published an advisory stating the fix under CVE-2018-20114 properly patche…
TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm. The impacted products could be end-of-life (EoL) and/or end-of-servic…
TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users sh…