Skip to content
~/pwn.watch_

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Router

Security incidents tagged Router. Newest first.

0 Router incidents in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
5
Live
0
Patched
2
Days without an incident
752
Longest quiet run: 752 days (Oct 1–Oct 22)
RSS JSON llms.txtAll tags →
Show 5 older incidents

September 2024 3

  • CriticalD-Link DIR-820 Router OS Command Injection

    D-Link DIR-820 Router No patch yet

    D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp. Added to the CISA KEV catalog on 2024-09-30. CVE-2023-25280 was assigned before 2024; the KEV listing came in 2024.

    Open incident →CVE-2023-25280
  • CriticalDrayTek Multiple Vigor Routers OS Command Injection

    DrayTek Multiple Vigor Routers Patched

    DrayTek Vigor3900, Vigor2960, and Vigor300B devices contain an OS command injection vulnerability in cgi-bin/mainfunction.cgi/cvmcfgupload that allows for remote code execution via shell metacharacters in a filename when the text/x-python-script content type is used. Added to the CISA KEV catalog on 2024-09-30. CVE-2020-15415 was assigned before 2024; the KEV listing came in 2024.

    Open incident →CVE-2020-15415
  • HighDrayTek VigorConnect: 2 actively exploited vulnerabilities

    DrayTek VigorConnect Patched

    CVE-2021-20123: Draytek VigorConnect contains a path traversal vulnerability in the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges. CVE-2021-20124: Draytek VigorConnect contains a path traversal vulnerability in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges. Added to the CISA KEV catalog on 2024-09-03. CVE-2021-20123, CVE-2021-20124 were assigned before 2024; the KEV listing came in 2024.

    Open incident →CVE-2021-20123 · CVE-2021-20124

May 2024 2

  • HighD-Link DIR-600 Router Cross-Site Request Forgery (CSRF)

    D-Link DIR-600 Router No patch yet

    D-Link DIR-600 routers contain a cross-site request forgery (CSRF) vulnerability that allows an attacker to change router configurations by hijacking an existing administrator session. Added to the CISA KEV catalog on 2024-05-16. CVE-2014-100005 was assigned before 2024; the KEV listing came in 2024.

    Open incident →CVE-2014-100005
  • HighD-Link DIR-605 Router Information Disclosure

    D-Link DIR-605 Router No patch yet

    D-Link DIR-605 routers contain an information disclosure vulnerability that allows attackers to obtain a username and password by forging a post request to the /getcfg.php page. Added to the CISA KEV catalog on 2024-05-16. CVE-2021-40655 was assigned before 2024; the KEV listing came in 2024.

    Open incident →CVE-2021-40655

Sponsored

Buy sponsor slot · $149/mo