Corega Inc

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Corega Inc records in CISA KEV

No Corega Inc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cg-wgr 1200 Firmware 3 records MEDIUM Cg-wlbaragm Firmware 3 records LOW Cg-wlr300nx Firmware 3 records MEDIUM Cg-wlbargnl Firmware 2 records LOW Wlr 300 Nm Firmware 2 records LOW Cg-wlbargl Firmware 1 record LOW Cg-wlbargmh Firmware 1 record LOW Cg-wlbargs Firmware 1 record MEDIUM

Records

16 records

TI-2015-06471 CVE-2015-7792 · GHSA-rf9j-35wp-v994

Corega CG-WLBARGS devices allow remote attackers to perform administrative operations via unspecified vectors.

MEDIUM 47

Corega CG-WLBARGS devices allow remote attackers to perform administrative operations via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02784 Published 2015-12-30 No fix listed CWE-264

TI-2017-07952 CVE-2017-10852 · GHSA-4g4m-cxv2-r9h9

Memory corruption in Corega Inc CG-WGR1200

MEDIUM 40

Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary code via unspecified vectors.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00838 Published 2018-03-09 No fix listed CWE-119

TI-2016-06563 CVE-2016-7811 · GHSA-wqr8-ffc3-cx2r

Improper access control in Corega Inc CG-WLR300NX

MEDIUM 40

Corega CG-WLR300NX firmware Ver.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00889 Published 2017-06-09 No fix listed CWE-284

TI-2016-06561 CVE-2016-7809 · GHSA-354w-pm9c-w8rh

Cross-site request forgery in Corega Inc CG-WLR300NX

MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in Corega CG-WLR300NX firmware Ver.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00913 Published 2017-06-09 No fix listed CWE-352

TI-2017-07954 CVE-2017-10854 · GHSA-88h7-xj6f-75q2

Missing authentication in Corega Inc CG-WGR1200

LOW 39

Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to bypass authentication and change the login password via unspecified vectors.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00595 Published 2018-03-09 No fix listed CWE-306

TI-2017-07953 CVE-2017-10853 · GHSA-283f-f867-hhph

Memory corruption in Corega Inc CG-WGR1200

LOW 39

Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary commands via unspecified vectors.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00788 Published 2018-03-09 No fix listed CWE-119

TI-2016-01062 CVE-2016-1158 · GHSA-rh34-gr76-7cj8

Cross-site request forgery (CSRF) vulnerability on Corega CG-WLBARGMH and CG-WLBARGNL…

LOW 39

Cross-site request forgery (CSRF) vulnerability on Corega CG-WLBARGMH and CG-WLBARGNL devices allows remote attackers to hijack the authentication of administrators for requests that perform administrative functions.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00616 Published 2016-03-03 No fix listed CWE-352

TI-2016-04168 CVE-2016-4823 · GHSA-72w8-h55p-53g5

Corega CG-WLBARAGM devices allow remote attackers to cause a denial of service (reboot) via unspecified vectors.

LOW 37

Corega CG-WLBARAGM devices allow remote attackers to cause a denial of service (reboot) via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01939 Published 2016-06-25 No fix listed

TI-2016-04167 CVE-2016-4822 · GHSA-7fgp-m9wp-3w72

Corega CG-WLBARGL devices allow remote authenticated users to execute arbitrary commands via unspecified vectors.

LOW 37

Corega CG-WLBARGL devices allow remote authenticated users to execute arbitrary commands via unspecified vectors.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01067 Published 2016-06-25 No fix listed CWE-77

TI-2017-07915 CVE-2017-10814 · GHSA-4c7r-p7xg-3p7g

Memory corruption in Corega Inc CG-WLR300NM

LOW 32

Buffer overflow in CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary code via unspecified vectors.

CVSS 3.0MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00823 Published 2017-09-15 No fix listed CWE-119

TI-2017-07914 CVE-2017-10813 · GHSA-9qvc-5q99-rvvw

CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary OS…

LOW 31

CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.

CVSS 3.0MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00655 Published 2017-09-15 No fix listed CWE-78

TI-2016-06560 CVE-2016-7808 · GHSA-227c-4fg6-p522

Cross-site scripting in Corega Inc CG-WLBARGMH

LOW 30

Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01195 Published 2017-06-09 No fix listed CWE-79

TI-2015-06473 CVE-2015-7794 · GHSA-5cjc-8vgv-qjwj

Corega CG-WLNCM4G devices provide an open DNS resolver, which allows remote attackers to…

LOW 29

Corega CG-WLNCM4G devices provide an open DNS resolver, which allows remote attackers to cause a denial of service (traffic amplification) via crafted queries.

CVSS 3.0MEDIUM 5.8 Network No auth No interaction EPSS 0.01599 Published 2015-12-30 No fix listed CWE-20

TI-2015-06472 CVE-2015-7793 · GHSA-pp8j-hxr3-7793

Corega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers…

LOW 29

Corega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers to trigger outbound network traffic via unspecified vectors.

CVSS 3.0MEDIUM 5.8 Network No auth No interaction EPSS 0.01599 Published 2015-12-30 No fix listed CWE-17

TI-2016-04169 CVE-2016-4824 · GHSA-c28q-c5r3-37pq

The Wi-Fi Protected Setup (WPS) implementation on Corega CG-WLR300GNV and CG-WLR300GNV-W…

LOW 27

The Wi-Fi Protected Setup (WPS) implementation on Corega CG-WLR300GNV and CG-WLR300GNV-W devices does not restrict the number of PIN authentication attempts, which makes it easier for remote attackers to obtain network a…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01385 Published 2016-06-25 No fix listed CWE-254

TI-2016-06562 CVE-2016-7810 · GHSA-28wq-p9hh-3w4h

Cross-site scripting in Corega Inc CG-WLR300NX

LOW 23

Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00765 Published 2017-06-09 No fix listed CWE-79

Open these records in search →

Critical	1
High	8
Medium	7
Low	0
No CVSS	0