CVE Vulnerability Advisory Database

[Affected Scope] Zyxel EMG2926 home routers running firmware version V1.00(AAQT.4)b8

[Impact] An authenticated attacker can execute arbitrary system commands with root privileges by manipulating diagnostic parameters

[Mitigation] Apply the latest firmware updates immediately and restrict external access to the management interface

[Affected Scope] MRLG (Multi-Router Looking Glass) versions prior to 5.5.0

[Impact] Unauthenticated remote attackers can trigger arbitrary memory writes and memory corruption, leading to remote code execution (RCE) or denial of service (DoS)

[Mitigation] Immediately upgrade to MRLG version 5.5.0 or later, and restrict access to the Looking Glass interface using firewalls or web server access controls

[Affected Scope] Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0

[Impact] Unauthenticated remote attackers can retrieve sensitive information from device memory (including private keys and configuration data) by sending crafted IKEv1 negotiation requests

[Mitigation] Upgrade affected device firmware to the latest patched releases, or restrict access to UDP ports 500 and 4500 using infrastructure ACLs to trusted peers only

[Affected Scope] Juniper ScreenOS versions 6.2.0r15 through 6.2.0r18 and 6.3.0r12 through 6.3.0r20

[Impact] Remote attackers can bypass authentication and gain full administrative (root) access to the firewall via SSH or TELNET using a hardcoded master password

[Mitigation] Immediately upgrade ScreenOS to patched versions (6.3.0r21 or the respective 'b' releases) and disable external SSH/TELNET access

[Affected Scope] DNS servers running ISC BIND 9.9.0 through 9.9.7-P1 and 9.10.0 through 9.10.2-P2.

[Impact] Remote attackers can crash the BIND daemon (named) by sending a specially crafted TKEY query, leading to a complete DNS service outage.

[Mitigation] Immediately upgrade to BIND 9.9.7-P2, 9.10.2-P3, or later versions.

[Affected Scope] ProFTPD version 1.3.5 with the mod_copy module enabled.

[Impact] Unauthenticated remote attackers can read or write arbitrary files, leading to sensitive data exposure or full system compromise via RCE.

[Mitigation] Upgrade to ProFTPD 1.3.5a or later, or disable the mod_copy module in the configuration file.

[Affected Scope] Routers and embedded devices utilizing the Realtek SDK with the miniigd UPnP SOAP service enabled

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending crafted SOAP requests, leading to complete device compromise

[Mitigation] Disable the UPnP service, block external access to port 52869/TCP, and apply the latest firmware updates from the device vendor

[Affected Scope] D-Link DIR-600 router (hardware revision Bx) with firmware versions prior to 2.17b02.

[Impact] Remote attackers can hijack administrator sessions to create unauthorized admin accounts, enable remote management, apply malicious configurations, or trigger arbitrary ping requests.

[Mitigation] Upgrade to firmware version 2.17b02 or later, disable remote management, and restrict access to the administration interface.

[Affected Scope] Cisco Adaptive Security Appliance (ASA) Software with WebVPN (SSL VPN) feature enabled

[Impact] Remote attackers can execute arbitrary JavaScript or HTML code in the context of the user's browser session, leading to session hijacking or credential theft

[Mitigation] Apply official Cisco software updates, restrict WebVPN access via ACLs, and monitor HTTP request logs

[Affected Scope] Cisco 871 Integrated Services Routers (ISR) running Cisco IOS 12.4 with the HTTP Administration component enabled.

[Impact] Remote attackers can execute arbitrary commands with privilege level 15 by tricking an authenticated administrator into visiting a malicious link, leading to complete device compromise.

[Mitigation] Disable the HTTP/HTTPS server on the router, restrict access using IP-based Access Control Lists (ACLs), or upgrade to a patched Cisco IOS release.

[Affected Scope] Cisco IOS 12.2(15) and earlier versions

[Impact] Remote attackers can cause a denial of service (refused VTY connections) by exhausting virtual terminal resources using crafted TCP connection requests

[Mitigation] Upgrade to a patched Cisco IOS release, disable Telnet in favor of SSH, and restrict VTY access using Access Control Lists (ACLs)