CVE-2025-21448

Transient DOS may occur while parsing SSID in action frames...

CVE-2025-21448

CVE-2025-21448 involves a transient Denial of Service in Qualcomm WLAN firmware when parsing SSIDs in action frames. Affected component: WLAN firmware; root cause: parsing SSIDs in action frames leading to DoS. Impact: availability loss (CVSSv3.1 base score 7.5, Network attack, no user interactio...

CVE-2025-21448 Buffer Over-read in WLAN Firmware

Transient DOS may occur while parsing SSID in action frames...

CVE-2025-21448 Buffer Over-read in WLAN Firmware

Transient DOS may occur while parsing SSID in action frames...

CVE-2025-3328

A vulnerability was found in Tenda AC1206 15.03.06.23. It has been classified as critical. Affected is the function formfastsettingwifiset of the file /goform/fastsettingwifiset. The manipulation of the argument ssid/timeZone leads to buffer overflow. It is possible to launch the attack remotely...

CVE-2025-21448: Buffer Over-read

Transient DOS may occur while parsing SSID in action frames...

CVE-2025-3328: Buffer Copy without Checking Size of Input

A vulnerability was found in Tenda AC1206 15.03.06.23. It has been classified as critical. Affected is the function formfastsettingwifiset of the file /goform/fastsettingwifiset. The manipulation of the argument ssid/timeZone leads to buffer overflow. It is possible to launch the attack remotely...

PT-2025-15218

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A transient Denial of Service DOS may occur while parsing SSID in action frames, due to a buffer over-read issue in WLAN firmware. This issue is related to a buffer over-read, which is a type ...

Tenda AC1206 缓冲区错误漏洞

Shenzhen Jixiang Tengda Technology Co., Ltd AC1206 is a high-performance wireless router designed for 200M and above broadband users. A buffer overflow vulnerability exists in the Shenzhen Jixiang Tengda Technology Company Limited AC1206. The vulnerability stems from the formfastsettingwifiset...

PT-2025-15100

Name of the Vulnerable Software and Affected Versions Tenda AC1206 version 15.03.06.23 Description A critical issue is present in the function form fast setting wifi set of the file /goform/fast setting wifi set, where the manipulation of the argument ssid/timeZone leads to a buffer overflow. Thi...

CVE-2025-3157

A vulnerability was found in Intelbras WRN 150 1.0.15ptITB01. It has been rated as problematic. This issue affects some unknown processing of the component Wireless Menu. The manipulation of the argument SSID leads to cross site scripting. The attack may be initiated remotely. The exploit has bee...

CVE-2025-3157: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Intelbras WRN 150 1.0.15ptITB01. It has been rated as problematic. This issue affects some unknown processing of the component Wireless Menu. The manipulation of the argument SSID leads to cross site scripting. The attack may be initiated remotely. The exploit has bee...

CVE-2025-30118

An issue was discovered on the Audi Universal Traffic Recorder 2.88. It has Susceptibility to denial of service. It uses the same default credentials for all devices and does not implement proper multi-device authentication, allowing attackers to deny the owner access by occupying the only...

CVE-2025-30118

An issue was discovered on the Audi Universal Traffic Recorder 2.88. It has Susceptibility to denial of service. It uses the same default credentials for all devices and does not implement proper multi-device authentication, allowing attackers to deny the owner access by occupying the only...

CVE-2025-30118: Use of Hard-coded Credentials

An issue was discovered on the Audi Universal Traffic Recorder 2.88. It has Susceptibility to denial of service. It uses the same default credentials for all devices and does not implement proper multi-device authentication, allowing attackers to deny the owner access by occupying the only...

CVE-2025-30118

The Audi Universal Traffic Recorder version 2.88 is susceptible to a Denial of Service (DoS) attack. The root cause is the use of identical default credentials across all devices combined with a lack of proper multi-device authentication . This allows an attacker to occupy the single available co...

CVE-2025-29217

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2025-29217

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2025-30115

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Default Credentials Cannot Be Changed. It uses a fixed default SSID and password "qwertyuiop", which cannot be modified by users. The SSID is continuously broadcast, allowing unauthorized access to the device network...

CVE-2025-30139

An issue was discovered on G-Net Dashcam BB GONX devices. Default credentials for SSID cannot be changed. It broadcasts a fixed SSID with default credentials that cannot be changed. This allows any nearby attacker to connect to the dashcam's network without restriction. Once connected, an attacke...