Vulnerabilities
13 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2017-10852 | Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary code via unspecified vectors. Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary code via unspecified vectors. NVD description · AI analysis pending | 8.8 | <1% |
| — | ||
| CVE-2017-10814 +1 in the same advisory: …10813 | Buffer overflow in CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary code via unspecified vectors. Buffer overflow in CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary code via unspecified vectors. NVD description · AI analysis pending | 6.8 | <1% |
| — | ||
| CVE-2016-7809 | Cross-site request forgery (CSRF) vulnerability in Corega CG-WLR300NX firmware Ver. Cross-site request forgery (CSRF) vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows remote attackers to hijack the authentication of logged in user to conduct unintended operations via unspecified vectors. NVD description · AI analysis pending | 8.8 group max | <1% |
| — | ||
| CVE-2016-7808 | Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NVD description · AI analysis pending | 6.1 | 1% |
| — | ||
| CVE-2016-4824 | The Wi-Fi Protected Setup (WPS) implementation on Corega CG-WLR300GNV and CG-WLR300GNV-W devices does not restrict the number of PIN authentication attempts, wh The Wi-Fi Protected Setup (WPS) implementation on Corega CG-WLR300GNV and CG-WLR300GNV-W devices does not restrict the number of PIN authentication attempts, which makes it easier for remote attackers to obtain network access via a brute-force attack. NVD description · AI analysis pending | 5.3 | 1% |
| — | ||
| CVE-2016-4823 | Corega CG-WLBARAGM devices allow remote attackers to cause a denial of service (reboot) via unspecified vectors. Corega CG-WLBARAGM devices allow remote attackers to cause a denial of service (reboot) via unspecified vectors. NVD description · AI analysis pending | 7.5 | 2% |
| — | ||
| CVE-2016-4822 | Corega CG-WLBARGL devices allow remote authenticated users to execute arbitrary commands via unspecified vectors. Corega CG-WLBARGL devices allow remote authenticated users to execute arbitrary commands via unspecified vectors. NVD description · AI analysis pending | 8.0 | 1% |
| — | ||
| CVE-2016-1158 | Cross-site request forgery (CSRF) vulnerability on Corega CG-WLBARGMH and CG-WLBARGNL devices allows remote attackers to hijack the authentication of administra Cross-site request forgery (CSRF) vulnerability on Corega CG-WLBARGMH and CG-WLBARGNL devices allows remote attackers to hijack the authentication of administrators for requests that perform administrative functions. NVD description · AI analysis pending | 8.8 | <1% |
| — |