WDR201A WiFi Extender vulnerabilities
6 known vulnerabilities in WDR201A WiFi Extender from Shenzhen Yipu Commercial and Trading. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.3 High severity
WDR201A WiFi Extender: Stack-based Buffer Overflow
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allows unauthenticated attackers to overwrite the saved return address by sending a POST request w
- 9.3 Critical severity
WDR201A WiFi Extender: Improper Neutralization of Special Elements used in an OS Command
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation. Attackers can inject arbitrary shell commands through vulner
- 9.3 Critical severity
WDR201A WiFi Extender: Improper Neutralization of Special Elements used in an OS Command
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the adm.cgi binary's reboot_time function that allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input int
- 9.3 Critical severity
WDR201A WiFi Extender: Improper Neutralization of Special Elements used in an OS Command
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the makeRequest.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the set_time
- 9.3 Critical severity
WDR201A WiFi Extender: Improper Neutralization of Special Elements used in an OS Command
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the internet.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the gateway POST
- 9.3 Critical severity
WDR201A WiFi Extender: Improper Neutralization of Special Elements used in an OS Command
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the wireless.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the sz11gChannel