Routerpwn 1.11.161

2701HG remote administration password disclosure

11/01/11

2701HGV-E 2700HGV-2 2700HG singtel default mdc password DoS

07/14/11

20x 27x authentication bypass (xss + info disclosure)

10/29/09

17x 18x 20x 27x CRLF denial of service remote MDC

10/29/09

17x 18x 20x 27x CRLF denial of service

08/18/09

17x 18x 20x 27x password_required.html authentication bypass

08/11/09

17x 18x 20x 27x CD35_SETUP_01 authentication bypass

08/11/09

17x 18x 20x 27x CD35_SETUP_01 password reset

04/13/08

17x 18x 20x 27x DSL denial of service

08/07/08

17x 18x 20x 27x mgmt_data configuration disclosure

01/30/08

17x 18x 20x 27x H04 authentication bypass

08/14/07

17x 18x 20x 27x 38x Add domain to hosts table CSRF

3Com

OfficeConnect Wireless 11g Cable/DSL Gateway, AP 8760 3CRWE876075, 812, 3CRWE454G72, 3cradsl72

09/02/10

Backdoor password in Accton-based switches (3com, Dell, SMC, Foundry and EdgeCore)

05/21/10

iMC Intelligent Management Center configuration disclosure

05/21/10

iMC Intelligent Management Center traversal

10/19/09

OfficeConnect command execution

11/14/08

AP 8760 authentication bypass

06/16/08

OfficeConnect configuration disclosure

06/01/05

OfficeConnect 3CRWE454G72 configuration disclosure

04/16/05

3cradsl72 configuration disclosure

10/13/04

3cradsl72 information disclosure & authenication bypass

00/00/01

812 denial of service

00/00/01

812 denial of service 2

Arris

WTM652, TM602A

00/00/0?

Arris Password of The Day Generator (list.txt)

00/00/0?

Arris password of the day web interface

Alpha Networks

ASL-26555

17/08/12

ASL-26555 Remote Administration Password Disclosure

Asmax

AR-804gu

05/15/09

AR-804gu command execution

05/15/09

AR-804gu file disclosure

05/15/09

AR-804gu directory listing

Belkin

F9K1002, Belkin Wireless G router F5D7234-4, F5D7230-4, MIMO F5D9230??4

07/13/12

F9K1002 Authentication Bypass

07/13/12

F9K1002 Web Management Password Exposure

05/30/11

F5D7234-4 v5 admin password md5

08/25/08

F5D8233-4 v3 configuration disclosure

08/25/08

F5D8233-4 v3 router reboot

08/25/08

F5D7230-4 factory reset

02/03/08

F5D7230-4 change dns servers

01/20/08

MIMO F5D9230??4 configuration disclosure

Cisco

Linksys WRT54G, WAG120N

02/26/11

WAG120N Change admin password

02/26/11

WAG120N Add admin user

05/26/10

WAP54Gv3 debug interface (Gemtek:gemtekswd)

02/26/08

WRT54G enable remote interface

02/26/08

WRT54G config disclosure

02/26/08

WRT54G restore factory defaults

01/21/08

WRT54G last password in plain text

06/05/06

WRT54G disable wifi encription

06/05/06

WRT54G change admin password

DD-WRT

12/27/10

DD-WRT information disclosure

07/20/09

DD-WRT remote comand execution

D-Link

D-Link DAP 1150, DWL 2100AP, 704P, DIR-615, DSL-500T, DSL-502T, DSL-504T, DSL-562T, DSL-G604T, DWL-7000AP, DWL-7100AP, DNS-320, DNS-325

02/19/12

DSL-2640B change admin password CSRF

02/08/12

DNS-320 DNS-325 command execution

02/08/12

DNS-320 DNS-325 information disclosure

02/08/12

DNS-320 DNS-325 information disclosure

02/10/12

DAP-1150 save configuration CSRF

02/10/12

DAP-1150 denial of service

12/17/11

DSL-500T reset password CSRF

12/22/10

WBR-1310 Authentication Bypass set new password

11/09/10

DIR-615, DIR-320, DIR-300 Authentication Bypass

08/24/10

DSL-500T Directory Traversal (post auth)

08/24/10

DSL-500T old "firmwarecfg" Authentication Bypass

06/29/10

DAP-1160 Authentication Bypass

12/15/09

DIR-615 change password & enable remote admin

02/05/08

DSL-G604T change DNS servers

08/25/08

DIR-615 configuration disclosure

00/00/0?

704P denial of service

10/20/06

DSL-G624T DSL-G604T directory traversal

06/06/06

DWL-7x00AP configuration disclosure

05/20/05

DSL-502T DSL-504T DSL-562T DSL-G604T "firmwarecfg" Authentication Bypass

Comtrend

Comtrend CT-507IT, CT-5367, CT-536, HG-536+, CT-5624, CT-5363, CT-5372/E, CT-5611T, CT-5621T, CT-6382, CT-5071, CT-5365, VR-3025, NexusLink 5631, NexusLink 5631E

01/08/12

CT-53XX CT-5071 CT-56XX Put a local IP in DMZ

01/08/12

CT-53XX CT-5071 CT-56XX Enable remote admin

11/09/11

CT-5624 Change passwords

03/04/11

CT-5367 Change passwords

03/04/11

CT-5367 CT-5624 Information Disclosure

01/23/10

CT-507IT Cross site scripting

03/04/08

CT-536 HG-536+ Information Disclosure

03/04/08

CT-536 HG-536+ Configuration Disclosure

EasyBox

A 300, A 400, A 401, 402, A 600, A 601, 602, A 800, A801, 802, 803

03/04/12

[+]

EasyBox Standard WPA2 Key Generator

Fibrehome

Fibrehome HG-110

08/04/11

HG-110 Local File Include and Directory/Path Traversal

08/04/11

HG-110 Cross site scripting

Freebox

Freebox V6

01/04/13

V6 Authentication Bypass Reboot

Huawei

HG866, HG510, HG520b, EchoLife HG520c, EchoLife HG530, SmartAX MT880

06/14/12

HG866 Authentication Bypass

06/14/12

HG866 Denial of service

01/25/12

HG5XX remote ppp password disclosure

01/11/11

HG5XX mac2wepkey default wireless key generator

0?/0?/10

HG520 rpADSLMode_1 denial of service

10/03/10

HG520 HTTP auth denial of service

05/30/10

HG520 rpEthernet_1 denial of service

05/29/10

HG520c HG530 enable remote management CSRF

05/16/10

HG520c HG530 Listadeparametros.html information disclosure

03/28/10

HG520c HG530 AutoRestart.html denial of service & factory reset

03/28/10

HG520 LocalDevicejump.html denial of service

02/17/10

HG510 rebootinfo.cgi denial of service

08/24/09

SmartAX MT880 default password

08/24/09

SmartAX MT880 add administrator account

08/24/09

SmartAX MT880 disable firewall/anti-dos w/default pass

00/00/0?

ZyNOS configuration disclosure

MiFi

2200 Sprint Verizon, 2352 Vodafone

01/16/10

2200 Sprint Verizon configuration disclosure

01/16/10

2352 Vodafone configuration disclosure

Motorola

SBG900

07/22/11

SBG900 change admin password

07/22/11

SBG900 turn off firewall

07/22/11

SBG900 enable remote access

07/22/11

SBG900 disable DHCP & add custom DNS server

Netgear

WN2000RPTv2, FVS318, DG632, SSL312 VPN, WNR2000, WNDAP350, WNAP210, WG602, WGR614v9, CG3100D, RP614v4 DGND3300v2, WNR2000v2, DGN1000, N300

12/09/12

WN2000RPTv2 Admin Password Disclosure

28/05/12

DGND3300v2, WNR2000v2, DGN1000, N300 information disclosure

04/05/11

WNAP210 authentication bypass

07/22/11

WNDAP350, WNAP210 BackupConfig.php config disclosure

08/14/10

CG3100D privilege escalation

03/24/10

RP614v4 config disclosure

08/24/09

WNR2000 information disclosure

08/24/09

WNR2000 information disclosure

08/20/09

WNR2000 config disclosure

06/15/09

DG632 auth bypass (config disclosure)

06/15/09

06/15/09

DG632 'firmwarecfg' denial of service

11/13/08

WGR614v9 denial of service

02/27/08

SSL312 VPN denial of service

01/24/05

FVS318 content filtering bypass

01/24/05

FVS318 log file arbitrary content injection

08/12/04

DG834G enable telnet root shell

08/12/04

WG602 undocumented admin account (superman)

08/12/04

WG602 undocumented admin account (super)

Pirelli

PRG EAV4202N, PRGAV4202N, PRG 4202 N, P.RG AV4202N, DRG A225

12/04/11

A1/Telekom Austria PRG EAV4202N Default WPA Key Generator

06/04/09

Discus DRG A225 WiFi router Default WPA2-PSK Key Generator

RugeddCom

Layer 2 switches & servers: RSG2100, RSG2100P, RSG2200, RSG2288, RSG2300, RSG2300P, RS969, RS416, RS416P, M2100, M2200, M969, RS8000, RS8000T, RS8000H, RS8000A, RS1600, RS1600T, RS1600F, RS400, RS401, RMC30. Small Layer 2 switches: RS900, RS900L, RS900W, RS910, RS910L, RS910W, RS920L, RS920W, RS930L, RS930W, RS900M, RS900G, RS900GP, RS940G, i800, i801, i802, I803, RP110

23/04/12

RuggedCom "factory" Backdoor Password Generator

Sagem

F@ST 2604, Fast 3304-V1, 3304-V2, 3464, 3504

02/21/12

Sagem F@ST 2604 CSRF Change Admin Password

08/15/11

Sagem Fast Telnet Root Password Generator

Seagate

BlackArmor NAS 110, BlackArmor NAS 220, BlackArmor NAS 440

05/23/12

BlackArmor NAS Password Reset

Siemens

SpeedStream 5200, Gigaset SE461 WiMAX, NOKIA Siemens FlexiISN

03/30/09

FlexiISN auth bypass AAA Configuration

03/30/09

FlexiISN auth bypass Aggregation Class Configuration

03/30/09

FlexiISN auth bypass GGSN general Configuration

03/30/09

FlexiISN auth bypass Network Access & services

5200 Default administrator account

06/16/08

06/16/08

5200 Host authentication bypass

06/16/08

5200 Configuration disclosure /.cfg

08/02/08

SE461 denial of service

Sitecom

Sitecom DC-227

12/19/11

Sitecom DC-227 Backdoor account

Thomson

SpeedTouch ST585, TG585n, 7G (bthomehub)

05/28/12

Thomson Bbox BBKeys TG787 Default Wireless Key Generator

02/01/12

Thomson SpeedTouch STKeys ST585v6 TG585v6 Default Wireless Key Generator

04/02/11

ST585 Cross site scripting

12/09/09

ST585, TG585n user.ini arbitrary download vulnerability

06/10/08

ST585 Redirect domain CSRF

06/10/08

ST585 Add administrator account CSRF

02/14/08

bthomehub call number (voice-jacking) auth bypass

11/08/07

bthomehub authentication bypass

11/08/07

bthomehub enable remote access and change tech password

11/08/07

bthomehub disable wifi

TRENDnet

TEW-633GR, TV-IP

01/10/12

TV-IP Cameras authentication bypass

02/26/08

TEW-633GR A-to-C authentication bypass

02/26/08

TEW-633GR unauthorized factory reset

Ubiquiti

AirOS v3.6.1, v4.0, v5.x

01/06/13

AirOS login page cross site scripting

12/19/11

AirOS v3.6.1 v4.0 v5.x command execution

06/30/10

AirOS command execution

UTStarcom

DNA-A-211, UT300R2U

09/03/08

DNA-A-211, UT300R2U information disclosure

Xavi

X7968

01/02/12

X7968 cross site scripting

01/02/12

X7968 persistent cross site scripting

01/02/12

X7968 open port for ip CSRF

01/02/12

X7968 denial of service

TP-LINK

WDR740N, WR743ND, WR842ND, WA-901ND, WR941N, WR941ND, WR1043ND, WR2543ND, MR3220, MR3020, WR841N

05/26/12

Webshell backdoor (user: osteam password: 5up)