PT-2024-7144 · NetGear · Netgear Ex3700 +2

Name of the Vulnerable Software and Affected Versions: Netgear EX6120 version 1.0.0.68 Netgear EX6100 version 1.0.2.28 Netgear EX3700 version 1.0.0.96 Description: The issue is related to a command injection flaw in the operating mode.cgi script of Netgear EX Series Wi-Fi Extenders. This flaw is...

CVE-2023-43520

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE...

Memory corruption

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE...

CVE-2023-43520

CVE-2023-43520 is a memory corruption issue in Qualcomm WLAN components, arising when an Access Point includes a TID-to-link mapping Information Element in beacons and a station parses it. The vulnerability is documented across multiple sources (NVD/NVIDIA CVE entry, Red Hat advisory) with a base...

CVE-2023-43520 Stack-based Buffer Overflow in WLAN HOST

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE...

CVE-2023-35837

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. Authentication for web interface is completed via an unauthenticated WiFi AP. The administrative password for the web interface has a default password, equal to the registration ID of the device. This same registration ID is used as...

CVE-2023-35837

CVE-2023-35837 affects SolaX Pocket WiFi versions up to 3.001.02. An unauthenticated WiFi AP provides web-interface access, and the admin password defaults to the device's registration ID (also used as the WiFi SSID). There is no enforced change-on-first-use or user alert for the default password...

PT-2024-12514 · Solax · Solax Pocket Wifi

Name of the Vulnerable Software and Affected Versions: SolaX Pocket WiFi versions 3 through 3.001.02 Description: An issue was discovered where authentication for the web interface is completed via an unauthenticated WiFi AP. The administrative password for the web interface has a default passwor...

PT-2024-3785 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the vfio ap mdev filter matrix function in the Linux kernel, which is responsible for updating the guest's AP configuration by filtering the matrix of adapters...

PT-2024-14638

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A possible NULL pointer dereference in the wfx set mfp ap function has been resolved. The ieee80211 beacon get function can return NULL, and wfx set mfp ap should check the return value...

CVE-2023-49225

A cross-site-scripting vulnerability exists in Ruckus Access Point products ZoneDirector, SmartZone, and AP Solo. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see...

CVE-2023-49225

CVE-2023-49225 describes a cross-site scripting (XSS) vulnerability in Ruckus Access Point family including ZoneDirector, SmartZone, and AP Solo. An attacker could cause arbitrary script execution in the web browser of a user logging into the product. Affected versions vary by product; vendor gui...

CVE-2023-33083

Memory corruption in WLAN Host while processing RRM beacon on the AP...

CVE-2023-33024

Memory corruption while sending SMS from AP firmware...

Memory corruption

Memory corruption while sending SMS from AP firmware...

CVE-2023-33083

CVE-2023-33083 concerns memory corruption in the WLAN Host when processing RRM beacons on the AP, attributed to a classic buffer overflow (buffer copy without checking size). Reported across multiple sources tied to Qualcomm chipsets, with CVSSv3.1 base score 9.8 (CRITICAL), indicating network-le...

CVE-2023-33083 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Memory corruption in WLAN Host while processing RRM beacon on the AP...

CVE-2023-33024 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Radio Interface Layer

Memory corruption while sending SMS from AP firmware...

CVE-2023-33024

CVE-2023-33024 : The issue is a classic buffer overflow in the Radio Interface Layer, caused by a buffer copy without checking input size, leading to memory corruption when processing SMS from AP firmware. Connected documents corroborate memory corruption in AP firmware SMS handling; the CVE titl...

Zyxel Releases Patches to Fix 15 Flaws in NAS, Firewall, and AP Devices

Zyxel has released patches to address 15 security issues impacting network-attached storage NAS, firewall, and access point AP devices, including three critical flaws that could lead to authentication bypass and command injection. The three vulnerabilities are listed below - CVE-2023-35138 CVSS...