Compex Wiriless Access Points DoS

DoS on UConfig agent packet parsing UDP/7778...

CVE-2005-3253: Undefined Security Weakness

Wireless Access Points AP for 1 Avaya AP-3 through AP-6 2.5 to 2.5.4, and AP-7/AP-8 2.5 and other versions before 3.1, and 2 Proxim AP-600 and AP-2000 before 2.5.5, and Proxim AP-700 and AP-4000 after 2.4.11 and before 3.1, use a static WEP key of "12345", which allows remote attackers to bypass...

CVE-2004-2549

Nortel Wireless LAN WLAN Access Point AP 2220, 2221, and 2225 allow remote attackers to cause a denial of service service crash via a TCP request with a large string, followed by 8 newline characters, to 1 the Telnet service on TCP port 23 and 2 the HTTP service on TCP port 80, possibly due to a...

CVE-2004-2549

CVE-2004-2549 affects Nortel WLAN APs 2220, 2221, and 2225. A remote attacker can cause a service crash (DoS) by sending a TCP request containing a large string followed by eight newline characters to Telnet (port 23) or HTTP (port 80); the issue is described as possibly due to a buffer overflow....

Crash SMC AP

The remote SMC 2652W Access point web server crashes when sent a specially formatted HTTP request. OpenVAS Vulnerability Test $Id: smcwwwdos.nasl 5838 2017-04-03 10:26:36Z cfi $ Description: Crash SMC AP Authors: John Lampe ... [email protected] changes by rd: -fill the Host header to work...

Cisco wireless accee points LWAPP mode unauthorized access

It's possible to send unencrypted packet with spoofed MAC to secure network...

CVE-2005-2879: Undefined Security Weakness

Advansysperu Software USB Lock Auto-Protect AP 1.5 uses a weak encryption scheme to encrypt passwords, which allows local users to gain sensitive information and bypass USB interface protection...

Serious flaw in Linksys wireless AP password security

It appears that firmware version 4.50.6 for the Linksys WRT54GS hardware version 1 wireless router allows wireless clients to connect and use the network without actually authenticating. With WPA Personal/TKIP authentication enabled, the unit allows both clients using encryption with the correct...

CVE-2002-1800: Cleartext Storage of Sensitive Information

phpRank 1.8 stores the administrative password in plaintext on the server and in the "ap" cookie, which allows remote attackers to retrieve the administrative password...

CVE-2005-0112

The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point AP 1.00.08, and possibly earlier versions before 1.03.07A, allows remote attackers to bypass authentication and obtain sensitive information by directly accessing the 1 config.bin 2 profile.wlp?PN=ggg or 3...

CVE-2001-0352

CVE-2001-0352 affects 3Com AirConnect AP-4111 and Symbol 41X1 APs. The vulnerability arises from SNMP queries that read WEP keys from the IEEE 802.11b MIB (dot11WEPDefaultKeyValue in dot11WEPDefaultKeysTable) or the Symbol MIB (ap128bWepKeyValue), where keys should be write-only. This permits rem...

CVE-2001-0352: Undefined Security Weakness

SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be write-only, via 1 dot11WEPDefaultKeyValue in the dot11WEPDefaultKeysTable of the IEEE 802.11b MIB, or 2 ap128bWepKeyValue i...