Routerpwn 1.5.146

2Wire

3Com

Arris

Asmax

Belkin

Cisco

Comtrend

DD-Wrt

DLink

Fibrehome

Huawei

MiFi

Motorola

Netgear

Siemens

Thomson

TRENDnet

Ubiquiti

UTStarcom

Xavi

ZyXEL

MAC to Vendor Lookup and Search (mac_find)

Default Password List (phenoelit)

Computer Search Engine (shodan)

ZynOS (Huawei) Configuration Decompressor

Huawei HG5XX Mac2wepkey Default Wireless Key Generator

Thomson SpeedTouch STKeys Default Wireless Key Generator

Backdoor password in Accton-based switches (3com, Dell, SMC, Foundry and EdgeCore)

Arris Password of The Day Generator

2Wire

1700HG, 1701HG, 1800HW, 2071HG, 2700HG, 2701HG-T, 2701HGV-E, 2700HGV-2, 3800HGV-B

03/02/12

2701HG remote administration password disclosure

11/01/11

2701HGV-E 2700HGV-2 2700HG singtel default mdc password DoS

07/14/11

20x 27x authentication bypass (xss + info disclosure)

10/29/09

17x 18x 20x 27x CRLF denial of service remote MDC

10/29/09

17x 18x 20x 27x CRLF denial of service

08/18/09

17x 18x 20x 27x password_required.html authentication bypass

08/11/09

17x 18x 20x 27x CD35_SETUP_01 authentication bypass

08/11/09

17x 18x 20x 27x CD35_SETUP_01 password reset

04/13/08

17x 18x 20x 27x DSL denial of service

08/07/08

17x 18x 20x 27x mgmt_data configuration disclosure

01/30/08

17x 18x 20x 27x H04 authentication bypass

08/14/07

17x 18x 20x 27x 38x Add domain to hosts table CSRF

3Com

OfficeConnect Wireless 11g Cable/DSL Gateway, AP 8760 3CRWE876075, 812, 3CRWE454G72, 3cradsl72

09/02/10

Backdoor password in Accton-based switches (3com, Dell, SMC, Foundry and EdgeCore)

05/21/10

iMC Intelligent Management Center configuration disclosure

05/21/10

iMC Intelligent Management Center traversal

10/19/09

OfficeConnect command execution

11/14/08

AP 8760 auhentication bypass

06/16/08

OfficeConnect configuration disclosure

06/01/05

OfficeConnect 3CRWE454G72 configuration disclosure

04/16/05

3cradsl72 configuration disclosure

10/13/04

3cradsl72 information disclosure & authenication bypass

00/00/01

812 denial of service

00/00/01

812 denial of service 2

Arris

WTM652, TM602A

00/00/0?

Arris Password of The Day Generator (list.txt)

00/00/0?

Arris password of the day web interface

Asmax

AR-804gu

05/15/09

AR-804gu command execution

05/15/09

AR-804gu file disclosure

05/15/09

AR-804gu directory listing

Belkin

Belkin Wireless G router F5D7234-4, F5D7230-4, MIMO F5D9230??4

05/30/11

F5D7234-4 v5 admin password md5

08/25/08

F5D8233-4 v3 configuration disclosure

08/25/08

F5D8233-4 v3 router reboot

08/25/08

F5D7230-4 factory reset

02/03/08

F5D7230-4 change dns servers

01/20/08

MIMO F5D9230??4 configuration disclosure

Cisco

Linksys WRT54G, WAG120N

02/26/11

WAG120N Change admin password

02/26/11

WAG120N Add admin user

05/26/10

WAP54Gv3 debug interface (Gemtek:gemtekswd)

02/26/08

WRT54G enable remote interface

02/26/08

WRT54G config disclosure

02/26/08

WRT54G restore factory defaults

01/21/08

WRT54G last password in plain text

06/05/06

WRT54G disable wifi encription

06/05/06

WRT54G change admin password

DD-WRT

DD-WRT

12/27/10

DD-WRT information disclosure

07/20/09

DD-WRT remote comand execution

D-Link

D-Link DAP 1150, DWL 2100AP, 704P, DIR-615, DSL-500T, DSL-502T, DSL-504T, DSL-562T, DSL-G604T, DWL-7000AP, DWL-7100AP, DNS-320, DNS-325

02/19/12

DSL-2640B change admin password CSRF

02/08/12

DNS-320 DNS-325 command execution

02/08/12

DNS-320 DNS-325 information disclosure

02/08/12

DNS-320 DNS-325 information disclosure

02/10/12

DAP-1150 save configuration CSRF

02/10/12

DAP-1150 denial of service

12/17/11

DSL-500T reset password CSRF

12/22/10

WBR-1310 Authentication Bypass set new password

11/09/10

DIR-615, DIR-320, DIR-300 Authentication Bypass

08/24/10

DSL-500T Directory Traversal (post auth)

08/24/10

DSL-500T old "firmwarecfg" Authentication Bypass

06/29/10

DAP-1160 Authentication Bypass

12/15/09

DIR-615 change password & enable remote admin

02/05/08

DSL-G604T change DNS servers

08/25/08

DIR-615 configuration disclosure

00/00/0?

704P denial of service

10/20/06

DSL-G624T DSL-G604T directory traversal

06/06/06

DWL-7x00AP configuration disclosure

05/20/05

DSL-502T DSL-504T DSL-562T DSL-G604T "firmwarecfg" Authentication Bypass

Comtrend

Comtrend CT-507IT, CT-5367, CT-536, HG-536+, CT-5624, CT-5363, CT-5372/E, CT-5611T, CT-5621T, CT-6382, CT-5071, CT-5365, VR-3025, NexusLink 5631, NexusLink 5631E

01/08/12

CT-53XX CT-5071 CT-56XX Put a local IP in DMZ

01/08/12

CT-53XX CT-5071 CT-56XX Enable remote admin

11/09/11

CT-5624 Change passwords

03/04/11

CT-5367 Change passwords

03/04/11

CT-5367 CT-5624 Information Disclosure

01/23/10

CT-507IT Cross site scripting

03/04/08

CT-536 HG-536+ Information Disclosure

03/04/08

CT-536 HG-536+ Configuration Disclosure

Fibrehome

Fibrehome HG-110

08/04/11

HG-110 Local File Include and Directory/Path Traversal

08/04/11

HG-110 Cross site scripting

Huawei

EchoLife HG510, HG520b, EchoLife HG520c, EchoLife HG530, SmartAX MT880

01/25/12

HG5XX remote ppp password disclosure

01/11/11

HG5XX mac2wepkey default wireless key generator

0?/0?/10

HG520 rpADSLMode_1 denial of service

10/03/10

HG520 HTTP auth denial of service

05/30/10

HG520 rpEthernet_1 denial of service

05/29/10

HG520c HG530 enable remote management CSRF

05/16/10

HG520c HG530 Listadeparametros.html information disclosure

03/28/10

HG520c HG530 AutoRestart.html denial of service & factory reset

03/28/10

HG520 LocalDevicejump.html denial of service

02/17/10

HG510 rebootinfo.cgi denial of service

08/24/09

SmartAX MT880 default password

08/24/09

SmartAX MT880 add administrator account

08/24/09

SmartAX MT880 disable firewall/anti-dos w/default pass

00/00/0?

ZyNOS configuration disclosure

MiFi

2200 Sprint Verizon, 2352 Vodafone

01/16/10

2200 Sprint Verizon configuration disclosure

01/16/10

2352 Vodafone configuration disclosure

Motorola

SBG900

07/22/11

SBG900 change admin password

07/22/11

SBG900 turn off firewall

07/22/11

SBG900 enable remote access

07/22/11

SBG900 disable DHCP & add custom DNS server

Netgear

FVS318, DG632, SSL312 VPN, WNR2000, WNDAP350, WNAP210, WG602, WGR614v9, CG3100D, RP614v4

04/05/11

WNAP210 authentication bypass

07/22/11

WNDAP350, WNAP210 BackupConfig.php config disclosure

08/14/10

CG3100D privilege escalation

03/24/10

RP614v4 config disclosure

08/24/09

WNR2000 information disclosure

08/24/09

WNR2000 information disclosure

08/20/09

WNR2000 config disclosure

06/15/09

DG632 auth bypass (config disclosure)

06/15/09

DG632 auth bypass

06/15/09

DG632 'firmwarecfg' denial of service

11/13/08

WGR614v9 denial of service

02/27/08

SSL312 VPN denial of service

01/24/05

FVS318 content filtering bypass

01/24/05

FVS318 log file arbitrary content injection

08/12/04

DG834G enable telnet root shell

08/12/04

WG602 undocumented admin account (superman)

08/12/04

WG602 undocumented admin account (super)

Siemens

SpeedStream 5200, Gigaset SE461 WiMAX, NOKIA Siemens FlexiISN

03/30/09

FlexiISN auth bypass AAA Configuration

03/30/09

FlexiISN auth bypass Aggregation Class Configuration

03/30/09

FlexiISN auth bypass GGSN general Configuration

03/30/09

FlexiISN auth bypass Network Access & services

06/16/08

5200 Default administrator account

06/16/08

5200 Host authentication bypass

06/16/08

5200 Configuration disclosure /.cfg

08/02/08

SE461 denial of service

Thomson

SpeedTouch ST585, TG585n, 7G (bthomehub)

02/01/12

Thomson SpeedTouch STKeys Default Wireless Key Generator

04/02/11

ST585 Cross site scripting

12/09/09

ST585, TG585n user.ini arbitrary download vulnerability

06/10/08

ST585 Redirect domain CSRF

06/10/08

ST585 Add administrator account CSRF

02/14/08

bthomehub call number (voice-jacking) auth bypass

11/08/07

bthomehub authentication bypass

11/08/07

bthomehub enable remote access and change tech password

11/08/07

bthomehub disable wifi

TRENDnet

TEW-633GR, TV-IP

01/10/12

TV-IP Cameras authentication bypass

02/26/08

TEW-633GR A-to-C authentication bypass

02/26/08

TEW-633GR unauthorized factory reset

Ubiquiti

AirOS v3.6.1, v4.0, v5.x

12/19/11

AirOS v3.6.1 v4.0 v5.x command execution

06/30/10

AirOS command execution

UTStarcom

DNA-A-211, UT300R2U

09/03/08

DNA-A-211, UT300R2U information disclosure

Xavi

X7968

01/02/12

X7968 cross site scripting

01/02/12

X7968 persistent cross site scripting

01/02/12

X7968 open port for ip CSRF

01/02/12

X7968 denial of service