alink-xsrfxss.xt

Louhi Networks Information Security Research Security Advisory Advisory: A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability Release Date: 2008/10/31 Last Modified: 2008/10/28 Authors: Jussi Vuokko, CISSP [email protected] Henri Lindberg [email protected] Device: A-Link WL54AP3 and WL54AP...

CVE-2008-4441

The Marvell driver for the Linksys WAP4400N Wi-Fi access point with firmware 1.2.14 on the Marvell 88W8361P-BEM1 chipset, when WEP mode is enabled, does not properly parse malformed 802.11 frames, which allows remote attackers to cause a denial of service reboot or hang-up via a malformed...

Proxim Tsunami MP.11 2411 Wireless Access Point - system.sysName.0 SNMP HTML Injection

Proxim Tsunami MP.11 2411 Wireless Access Point - system.sysName.0 SNMP HTML Injection source: https://www.securityfocus.com/bid/31666/info The Proxim Tsunami MP.11 2411 Wireless Access Point is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input...

Proxim Tsunami MP.11 2411 Wireless Access Point - 'system.sysName.0' SNMP HTML Injection

source: https://www.securityfocus.com/bid/31666/info The Proxim Tsunami MP.11 2411 Wireless Access Point is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Attacker-supplied HTML and script code would run in the context of the web...

Nokia e90 (s60v3) Remote Denial of Service Vulnerability

No description provided by source. Nokia E90 and probably other devices with s60v3 crashes with aireplay The device should be authorised on an access point sample: aireplay-ng -0 10 -a 00:74:3B:0C:A0:5A -c 00:2A:29:F3:1F:42 wlan0 My HW: AP= Acorp w422g Nokia E90 v 07.40.1.2 Ra-6...

Nokia e90/n82 (s60v3) Remote Denial of Service Vulnerability

Exploit for hardware platform in category dos / poc ============================================================ Nokia e90/n82 s60v3 Remote Denial of Service Vulnerability ============================================================ Nokia E90 and probably other devices with s60v3 crashes with...

Nokia e90/n82 (s60v3) Remote Denial of Service Vulnerability

No description provided by source. Nokia E90 and probably other devices with s60v3 crashes with aireplay The device should be authorised on an access point sample: aireplay-ng -0 10 -a 00:74:3B:0C:A0:5A -c 00:2A:29:F3:1F:42 wlan0 My HW: AP= Acorp w422g Nokia E90 v 07.40.1.2 Ra-6 For attack...

Nokia e90n82 (s60v3) - Remote Denial of Service

Nokia e90n82 s60v3 - Remote Denial of Service Nokia E90 and probably other devices with s60v3 crashes with aireplay The device should be authorised on an access point sample: aireplay-ng -0 10 -a 00:74:3B:0C:A0:5A -c 00:2A:29:F3:1F:42 wlan0 My HW: AP= Acorp w422g Nokia E90 v 07.40.1.2 Ra-6 For...

Fwd: Nokia e90 (Probably, and other devices with s60v3) Crashes

Nokia E90 and probably other devices with s60v3 crashes with aireplay The device should be authorised on an access point sample: aireplay-ng -0 10 -a 00:74:3B:0C:A0:5A -c 00:2A:29:F3:1F:42 wlan0 My HW: AP= Acorp w422g Nokia E90 v 07.40.1.2 Ra-6...

Nokia e90/n82 (s60v3) - Remote Denial of Service

Nokia E90 and probably other devices with s60v3 crashes with aireplay The device should be authorised on an access point sample: aireplay-ng -0 10 -a 00:74:3B:0C:A0:5A -c 00:2A:29:F3:1F:42 wlan0 My HW: AP= Acorp w422g Nokia E90 v 07.40.1.2 Ra-6 For attack realisation is necessary to send DeAuth a...

NETGEAR WN802T Wireless Access Point EAPoL密钥长度拒绝服务漏洞

BUGTRAQ ID: 31013 CVE ID：CVE-2008-1144 CNCVE ID：CNCVE-20081144 NETGEAR WN802T Wireless Access Point是一款无线路由接入点。 NETGEAR WN802T Wireless Access Point不正确处理EAPoL报文中的超长密钥长度，远程攻击者可以利用漏洞对服务进行拒绝服务攻击。 发送特殊构建的EAPoL报文可触发此漏洞，不过只有通过802.11验证后才能利用无线访问接入点的"Open"模式配置和成功关联恰当的安全参数如WPA w/ TKIP unicast, TKIP multicas...

CVE-2008-1197

The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse the SSID information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or hang or...

Cross site request forgery (csrf)

The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse the SSID information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or hang or...

Cross site request forgery (csrf)

The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or...

CVE-2007-5474

The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or...

CVE-2008-1144

CVE-2008-1144 affects the Netgear WN802T Wi‑Fi AP with Marvell 88W8361P‑BEM1, where the Marvell driver mishandles EAPoL‑Key packets. A crafted EAPoL‑Key with an advertised length can be used by remote authenticated users to cause a denial of service (device reboot or hang) and may enable arbitrar...

CVE-2008-1197

The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse the SSID information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or hang or...

CVE-2007-5474

CVE-2007-5474 affects Linksys WRT350N (firmware 2.00.17) using Atheros AR5416-AC1E. The vulnerability arises from incorrect parsing of the Atheros vendor-specific information element in an association request, allowing a too-long information element to cause a denial of service (device reboot or ...

CVE-2007-5474

The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or...

DD-WRT - Site Survey SSID Script Injection

source: https://www.securityfocus.com/bid/30573/info DD-WRT is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied data to the 'Site Survey' section of the administrative web interface. Attackers can exploit this issue to execute arbitrary script code i...