AC23 Denial of Service Vulnerability in Shenzhen Jixiang Tengda Technology Co.

The AC23 is a wireless router that provides high-speed wireless network connectivity. A denial of service vulnerability exists in the AC23 of Shenzhen Jixiang Tengda Technology Co. The vulnerability stems from improper handling of the getuid parameter by the /goform/VerAPIMant component. An...

Inaba Denki Sangyo Wi-Fi AP UNIT security vulnerability

The Inaba Denki Sangyo Wi-Fi AP UNIT is a Wi-Fi AP unit from Inaba Denki Sangyo, a Japanese company. A security vulnerability exists in Inaba Denki Sangyo Wi-Fi AP UNIT v2.0.03P and prior versions, which stems from improper restrictions in the UI layer or framework, and could lead to the user...

Inaba Denki Sangyo Wi-Fi AP UNIT security vulnerability

The Inaba Denki Sangyo Wi-Fi AP UNIT is a Wi-Fi AP unit from Inaba Denki Sangyo, a Japanese company. A security vulnerability exists in the Inaba Denki Sangyo Wi-Fi AP UNIT that stems from a service-specific disclosure of authentication information, which could allow a remote attacker to obtain...

Inaba Denki Sangyo Wi-Fi AP UNIT security vulnerability

Inaba Denki Sangyo Wi-Fi AP UNIT is a Wi-Fi AP unit from Inaba Denki Sangyo Inaba Denki Sangyo, a Japanese company. A security vulnerability exists in Inaba Denki Sangyo Wi-Fi AP UNIT v2.0.03P and prior versions, which stems from an improperly assigned privilege that could lead to tampered settin...

Inaba Denki Sangyo Wi-Fi AP UNIT Cross-site Request Forgery Vulnerability

The Inaba Denki Sangyo Wi-Fi AP UNIT is a Wi-Fi AP unit from Inaba Denki Sangyo, a Japanese company. A cross-site request forgery vulnerability exists in Inaba Denki Sangyo Wi-Fi AP UNIT v2.0.03P and earlier versions, which stems from a cross-site request forgery that could lead to a user...

Tenda O4 V3.0 SafeSetMacFilter Buffer Overflow

The vulnerability of the SafeSetMacFilter function in the Tenda O4 V3.0 wireless Wi-Fi access point software relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and...

TOTOLINK A3100R Router setWebWlanIdx Command Execution

The vulnerability of the setWebWlanIdx function in the /lib/cstemodules/wireless.so module of the TOTOLINK A3100R router’s microprogramming system is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a...

CVE-2025-20939

Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update device unique identifier of Watch devices...

CVE-2025-20939

Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update device unique identifier of Watch devices...

CVE-2025-20939

Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update device unique identifier of Watch devices...

CVE-2025-20939

Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update device unique identifier of Watch devices...

CVE-2025-20939

Galaxy Watch devices pre-SMR Apr-2025 Release 1 are affected by an improper authorization flaw in the wireless download protocol that could let a physical attacker modify the device UID. The issue arises from the download protocol’s authorization checks. Impact is limited to UID modification; the...

Samsung Mobile Devices security vulnerabilities

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Apr-2025 Release 1, which stems from improper authorization of the...

CVE-2025-20939: Undefined Security Weakness

Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update device unique identifier of Watch devices...

ALPINE-CVE-2025-21441

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...

CVE-2025-21440

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...

ABB Arctic Wireless Gateways

SUMMARY ABB is aware of public reports of the vulnerabilities in the product versions listed as affected in this advisory. An attacker who successfully exploited modem module vulnerabilities could run arbitrary code in the wireless modem module of the product. This could lead to denial of...

CVE-2025-21441

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...

CVE-2025-20664

In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406217; Issue ID: MSV-27...

CVE-2025-20663

In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00408868; Issue ID: MSV-30...