Ziqiang Wang

**Name of the Vulnerable Software and Affected Versions** Linksys E5600 (affected versions not specified) **Description** An issue in Linksys E5600 routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Mercury x30g (affected versions not specified) Mercury YR1800XG (affected versions not specified) **Description** An issue in the routers allows attackers to hijack TCP sessions, which could lead to a denial of service. **Recommendations** For Mercury x30g, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Mercury YR1800XG, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TP-LINK TL-R473GP-AC TP-LINK XDR6020 TP-LINK TL-R479GP-AC TP-LINK TL-R4239G TP-LINK TL-WAR1200L TP-LINK TL-R476G **Description** An issue in the listed TP-LINK routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. **Recommendations** For TP-LINK TL-R473GP-AC, update to a version that addresses the TCP session hijacking issue. For TP-LINK XDR6020, update to a version that addresses the TCP session hijacking issue. For TP-LINK TL-R479GP-AC, update to a version that addresses the TCP session hijacking issue. For TP-LINK TL-R4239G, update to a version that addresses the TCP session hijacking issue. For TP-LINK TL-WAR1200L, update to a version that addresses the TCP session hijacking issue. For TP-LINK TL-R476G, update to a version that addresses the TCP session hijacking issue.

**Name of the Vulnerable Software and Affected Versions** Ruijie EG210G-P (affected versions not specified) Ruijie EG105G-V2 (affected versions not specified) Ruijie NBR (affected versions not specified) Ruijie EG105G (affected versions not specified) **Description** An issue in the mentioned Ruijie routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. **Recommendations** For Ruijie EG210G-P, update to a version that addresses the TCP session hijacking issue. For Ruijie EG105G-V2, update to a version that addresses the TCP session hijacking issue. For Ruijie NBR, update to a version that addresses the TCP session hijacking issue. For Ruijie EG105G, update to a version that addresses the TCP session hijacking issue.

**Name of the Vulnerable Software and Affected Versions** Comfast CF-616AC (affected versions not specified) **Description** An issue in Comfast CF-616AC routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** H3C Magic R365 (affected versions not specified) H3C Magic R100 (affected versions not specified) **Description** An issue in the routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. **Recommendations** For H3C Magic R365, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For H3C Magic R100, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OpenWrt versions 18.06 through 22.03 and beyond **Description** An issue in OpenWrt allows off-path attackers to hijack TCP sessions. This could lead to a denial of service, impersonating the client to the server, and impersonating the server to the client, potentially allowing access to sensitive information. The issue occurs because `nf conntrack tcp no window check` is true by default. **Recommendations** For OpenWrt versions 18.06 through 22.03 and beyond, consider setting `nf conntrack tcp no window check` to false to mitigate the risk of TCP session hijacking. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Wavlink QUANTUM D2G routers (affected versions not specified) **Description** An issue in Wavlink QUANTUM D2G routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** 360 V6G (affected versions not specified) 360 T5G (affected versions not specified) 360 T6M (affected versions not specified) 360 P1 (affected versions not specified) **Description** An issue in the routers allows attackers to hijack TCP sessions, which could lead to a denial of service. **Recommendations** For 360 V6G, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For 360 T5G, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For 360 T6M, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For 360 P1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DI-7003GV2 (affected versions not specified) **Description** The issue allows attackers to hijack TCP sessions, potentially leading to a denial of service. It is related to incorrect clearance or release of resources, which can be exploited by a remote attacker to cause a denial of service by intercepting a TCP/IP session. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.