Wireless Access Point (WAP) Detection (HTTP) (deprecated)

Binary data 1619.prm...

Linksys Wireless Access Point (WAP) Detection (HTTP) (deprecated)

Binary data 1603.prm...

Wireless Access Point (WAP) Detection (HTTP) (deprecated)

Binary data 1613.prm...

7a69Adv#13 - USRobotics AP Wireless Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------ 7a69ezine Advisories 7a69Adv13 - ------------------------------------------------------------------ http://www.7a69ezine.org 02/08/2004 -...

CVE-2004-1706

The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service device crash and possibly execute arbitrary code via an HTTP GET request with a long version string...

U.S. Robotics USR808054 Wireless Access Point - Web Administration Denial of Service

source: https://www.securityfocus.com/bid/10840/info The USR808054 wireless access point is reported to contain a denial of service vulnerability in its embedded web server. When malicious requests are received by the device, it will reportedly crash, denying service to legitimate users of the...

edimaxBackdoor.txt

Vendor: Edimax Type: 7205APL Firmware: 2.40a-00 Kind of bug: Security Description: Normally a user called addmin, has to create a password on the Accesspoint. When you create a back-up of the settings of your Accesspoint, it will result in a config.bin file. Opening the file in Notepad gave the...

EDIMAX Wireless AP Default Password Check

The remote EDIMAX Wireless Access Point ships with a default account 'guest' / '1234' that has backup privileges on the remote configuration file. A remote attacker can exploit this to obtain a plaintext password for the administrator account by doing a backup of the remote configuration file...

NETGEAR Wireless Access Point Hardcoded Default Password

NETGEAR ships at least one device with a built-in administrator account. This account cannot be changed via the configuration interface and enables a remote attacker to control the NETGEAR device. To duplicate this error, simply point your browser to a vulnerable machine, and log in when prompted...

Nortel Wireless LAN Access Point 2200 Series - Denial of Service

Nortel Wireless LAN Access Point 2200 Series - Denial of Service // source: https://www.securityfocus.com/bid/9787/info Nortel Wireless LAN Access Point 2200 series appliances have been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself when ...

Nortel Wireless LAN Access Point 2200 Series - Denial of Service

// source: https://www.securityfocus.com/bid/9787/info Nortel Wireless LAN Access Point 2200 series appliances have been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself when a large network request is handled by one of the Wireless LAN...

CVE-2003-1346

D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager...

CVE-2003-1264

TFTP server in Longshine Wireless Access Point WAP LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file config.img and other files without authentication...

NetGear WAB102

The NetGear WAB102 running firmware v1.2.3 is a dual band wireless access point. After a recent power outage I noticed that the unit reset its password to the default of '1234'. Obviously this makes it possible for someone to reconfigured it meet their needs... a significant security risk. After...

SNMP Trap Reveals WEP Key in Cisco Aironet Access Point

...

WIDZ 1.01.5 - Remote Code Execution

WIDZ 1.01.5 - Remote Code Execution source: https://www.securityfocus.com/bid/8479/info WIDZ does not validate untrusted input when generating alerts. Alerts pass the essid of an unknown wireless access point through a system call. By setting the essid of an unauthorized access point to include...

WIDZ 1.0/1.5 - Remote Code Execution

source: https://www.securityfocus.com/bid/8479/info WIDZ does not validate untrusted input when generating alerts. Alerts pass the essid of an unknown wireless access point through a system call. By setting the essid of an unauthorized access point to include malformed information, the underlying...

Multiple Cisco AP bugs

Oversized HTTP GET request DoS. Valid account disclosure...

Cisco Aironet AP1100 fails to provide universal login error messages thereby disclosing validity of user account

Overview A vulnerability in the Cisco Aironet 1100 Series Access Point may allow a remote attacker to discover valid accounts on the access point. Description Cisco describes the Aironet 1100 Series Access Point as, "an affordable and upgradable 802.11b wireless LAN WLAN solution, setting the...

CVE-2003-0270

Apple AirPort Base Station (802.11) is affected by CVE-2003-0270. The administrative protocol on TCP 5009 uses XOR with a fixed key to protect credentials, allowing an attacker that can sniff traffic over Ethernet or non-WEP wireless to obtain administrative access. The flaw impacts confidentiali...