16675 matches found
CVE-2025-39240
Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command...
CVE-2025-39240
Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command...
CVE-2025-39240
CVE-2025-39240 affects Hikvision Wireless Access Point products. The vulnerability stems from insufficient input validation, enabling authenticated remote command execution when an attacker with valid credentials sends crafted packets containing malicious commands. Reported impact is arbitrary co...
TOTOLINK T10 Buffer Overflow Vulnerability (CNVD-2025-12749)
The TOTOLINK T10 is a wireless router manufactured by TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK T10 version 4.1.8cu.5207, which affects the function setWiFiMeshName in the /cgi-bin/cstecgi.cgi file of the component's POST request handler.An attacker can exploit the vulnerabilit...
TOTOLINK T10 Buffer Overflow Vulnerability
The TOTOLINK T10 is a wireless router from TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK T10 version 4.1.8cu.5207, which affects the function setWiFiRepeaterCfg in the /cgi-bin/cstecgi.cgi file of the component's POST request handler.An attacker can exploit the vulnerability by...
TOTOLINK T10 Buffer Overflow Vulnerability (CNVD-2025-12747)
The TOTOLINK T10 is a wireless router manufactured by TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK T10 4.1.8cu.5207. The vulnerability affects the UploadCustomModule function in the /cgi-bin/cstecgi.cgi file in the POST request handling component. An attacker could use this...
Hikvision Wireless Access Point 安全漏洞
Hikvision Wireless Access Point is a wireless access point device from Hikvision China. A security vulnerability exists in Hikvision Wireless Access Point that stems from insufficient input validation and could lead to authenticated remote command execution...
Realtek Wireless Bluetooth Security Update
A potential security vulnerability has been identified in certain Realtek Wireless Bluetooth drivers for HP PC products which might allow information disclosure. Realtek has provided an updated RTL8xxx Series Bluetooth Driver to mitigate this vulnerability. Realtek has released updates to mitigat...
CVE-2025-39240: Improper Neutralization of Special Elements used in an OS Command
Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command...
PT-2025-25398 · Hikvision · Hikvision Wireless Access Point
Name of the Vulnerable Software and Affected Versions: Hikvision Wireless Access Point affected versions not specified Description: The issue is related to insufficient input validation, allowing authenticated remote command execution. Attackers with valid credentials can exploit this by sending...
D-Link DIR-632 Stack Buffer Overflow Vulnerability
D-Link DIR-632 is a wireless router for small business and SOHO users, supporting IEEE 802.11n and IEEE 802.11g wireless standards, with a maximum theoretical transfer rate of 300Mbps and equipped with eight 10/100Mbps LAN ports. A stack buffer overflow vulnerability exists in the D-Link DIR-632...
LB-LINK多款产品 安全漏洞
LB-LINK BL-X26 and others are products of China Bilink LB-LINK.LB-LINK BL-X26 is a wireless router.LB-LINK BL-LTE300 is a wireless router.LB-LINK BL-AC2100 is a wireless Wi-Fi 6 router. A security vulnerability exists in several LB-LINK products, which stems from a command injection in the routep...
Tenda AC7 Buffer Overflow Vulnerability
Tenda AC7 is a high-performance dual-band wireless router designed for large homes with strong signal coverage and stable network performance. A buffer overflow vulnerability exists in Tenda AC7. The vulnerability originates from the formSetPPTPUserList function in the file /goform/setPptpUserLis...
Tenda AC5 Buffer Overflow Vulnerability
Tenda AC5 is a wireless router from Tenda, a Chinese company. The Tenda AC5 suffers from a buffer overflow vulnerability that originates from a stack buffer overflow due to the operation of the parameter rebootTime in the file /goform/SetRebootTimer. An attacker can exploit this vulnerability to...
Physical Layer-Based Device Fingerprinting for Wireless Security: from Theory to Practice
The identification of the devices from which a message is received is part of security mechanisms to ensure authentication in wireless communications. Conventional authentication approaches are cryptography-based, which, however, are usually computationally expensive and not adequate in the...
D-Link DI-500WF-WT Command Injection Vulnerability
D-Link DI-500WF-WT is a device for wireless network coverage from China AUO D-Link. A command injection vulnerability exists in the D-Link DI-500WF-WT, which stems from the parameter cmd failing to properly filter constructed command special characters, commands, and so on. No detailed...
D-Link DIR-816 /goform/wirelessApcli_5g File Buffer Overflow Vulnerability
The D-Link DIR-816 is a wireless router from China's AUO D-Link. The D-Link DIR-816 suffers from a buffer overflow vulnerability that originates from the failure of the parameters apclimode5g/apclienc5g/apclidefaultkey5g to correctly validate the length size of the input data in the file...
TOTOLINK A3002RU Virtual Server Page Component Cross-Site Scripting Vulnerability
TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. A cross-site scripting vulnerability exists in the TOTOLINK A3002RU, which stems from the lack of effective filtering and escaping of user-supplied data by the Virtual Server Page component parameter servicetype...
TOTOLINK A3002RU IP Port Filtering Page Component Cross-Site Scripting Vulnerability
TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. A cross-site scripting vulnerability exists in the TOTOLINK A3002RU, which stems from the lack of effective filtering and escaping of user-supplied data by the IP Port Filtering Page component parameter Comment,...
