Skip to content
Noroxi

corega records

16 published records for vendor corega.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

16 records
  • CVE-2015-7792
    40Plan

    Corega CG-WLBARGS devices allow remote attackers to perform administrative operations via unspecified vectors.

    CriticalCVSS 9.8No exploitEPSS 3%

    corega · cg-wlbargs firmwareDec 30, 2015

  • CVE-2016-7809
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in Corega CG-WLR300NX firmware Ver.

    HighCVSS 8.8No exploitEPSS 1%

    corega · cg-wlr300nx firmwareJun 9, 2017

  • CVE-2016-7811
    35Monitor

    Corega CG-WLR300NX firmware Ver.

    HighCVSS 8.8No exploitEPSS 1%

    corega · cg-wlr300nx firmwareJun 9, 2017

  • CVE-2017-10852
    35Monitor

    Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary code via unspecified vectors.

    HighCVSS 8.8No exploitEPSS 1%

    corega · cg-wgr 1200 firmwareMar 9, 2018

  • CVE-2017-10853
    35Monitor

    Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary commands via unspecified vectors.

    HighCVSS 8.8No exploitEPSS 1%

    corega · cg-wgr 1200 firmwareMar 9, 2018

  • CVE-2016-1158
    35Monitor

    Cross-site request forgery (CSRF) vulnerability on Corega CG-WLBARGMH and CG-WLBARGNL devices allows remote attackers to hijack the authenti

    HighCVSS 8.8No exploitEPSS 1%

    corega · cg-wlbargmhMar 3, 2016

  • CVE-2017-10854
    35Monitor

    Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to bypass authentication and change the login password via unspecified vector

    HighCVSS 8.8No exploitEPSS 1%

    corega · cg-wgr 1200 firmwareMar 9, 2018

  • CVE-2016-4822
    32Monitor

    Corega CG-WLBARGL devices allow remote authenticated users to execute arbitrary commands via unspecified vectors.

    HighCVSS 8.0No exploitEPSS 1%

    corega · cg-wlbargl firmwareJun 25, 2016

  • CVE-2016-4823
    31Monitor

    Corega CG-WLBARAGM devices allow remote attackers to cause a denial of service (reboot) via unspecified vectors.

    HighCVSS 7.5No exploitEPSS 2%

    corega · cg-wlbargmhJun 25, 2016

  • CVE-2017-10814
    27Monitor

    Buffer overflow in CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary code via unspecified vectors.

    MediumCVSS 6.8No exploitEPSS 1%

    corega · wlr 300 nm firmwareSep 15, 2017

  • CVE-2017-10813
    27Monitor

    CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.

    MediumCVSS 6.8No exploitEPSS 1%

    corega · wlr 300 nm firmwareSep 15, 2017

  • CVE-2016-7808
    24Monitor

    Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary web script or HTML via

    MediumCVSS 6.1No exploitEPSS 1%

    corega · cg-wlbaragm firmwareJun 9, 2017

  • CVE-2015-7794
    23Monitor

    Corega CG-WLNCM4G devices provide an open DNS resolver, which allows remote attackers to cause a denial of service (traffic amplification) v

    MediumCVSS 5.8No exploitEPSS 2%

    corega · cg-wlncm4g firmwareDec 30, 2015

  • CVE-2015-7793
    23Monitor

    Corega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers to trigger outbound network traffic via unspecified

    MediumCVSS 5.8No exploitEPSS 2%

    corega · cg-wlbaragm firmwareDec 30, 2015

  • CVE-2016-4824
    21Monitor

    The Wi-Fi Protected Setup (WPS) implementation on Corega CG-WLR300GNV and CG-WLR300GNV-W devices does not restrict the number of PIN authent

    MediumCVSS 5.3No exploitEPSS 1%

    corega · cg-wlr300gnvJun 25, 2016

  • CVE-2016-7810
    19Monitor

    Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver.

    MediumCVSS 4.8No exploitEPSS 1%

    corega · cg-wlr300nx firmwareJun 9, 2017