CVE-2013-5220
Published Dec 30, 2013goform/login on the HOT HOTBOX router with software 2.1.11 allows remote attackers to cause a denial of service (device crash) via crafted HTTP POST data.
Vendor/product archive
hot / hotbox_router CVEs
Beta · best-effort6 CVEs tagged to hot / hotbox_router — 0 Critical, 0 High, 3 Medium, 3 Low, 0 Unrated.
CVE-2013-5219
Published Dec 30, 2013Directory traversal vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to read arbitrary files via a .. (dot dot) in a URI, as demonstrated by a r…
CVE-2013-5218
Published Dec 30, 2013Cross-site scripting (XSS) vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to inject arbitrary web script or HTML via a crafted DHCP Host Name…
CVE-2013-5039
Published Dec 30, 2013Cross-site request forgery (CSRF) vulnerability in goform/wlanBasicSecurity on the HOT HOTBOX router with software 2.1.11 allows remote attackers to hijack the authentication of a…
CVE-2013-5038
Published Dec 30, 2013The HOT HOTBOX router with software 2.1.11 allows remote attackers to bypass authentication by configuring a source IP address that had previously been used for an authenticated s…
CVE-2013-5037
Published Dec 30, 2013The HOT HOTBOX router with software 2.1.11 has a default WPS PIN of 12345670, which makes it easier for remote attackers to obtain the WPA or WPA2 pre-shared key via EAP messages.
Showing 1-6 of 6 CVEsPage 1 of 1