CVE-2025-40321

CVE-2025-40321 affects the Linux kernel brcmfmac WLAN driver. The crash happens when transmitting an ANQP/Action Frame in standalone AP mode because the driver uses an uninitialized P2P vif pointer. The fix described in the advisory is to always use the vif corresponding to the wdev that initiate...

CVE-2025-40321 wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Currently, whenever there is a need to transmit an Action frame, the brcmfmac driver always uses the P2P vif to send the "actframe" IOVAR to firmware. Th...

CVE-2025-40321

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Currently, whenever there is a need to transmit an Action frame, the brcmfmac driver always uses the P2P vif to send the "actframe" IOVAR to firmware. Th...

PT-2025-49450

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s brcmfmac driver contains a flaw related to handling Action frames in standalone Access Point AP mode. Specifically, when hostapd manages the WLAN interface, the driver...

PT-2025-49570

Name of the Vulnerable Software and Affected Versions Ruijie APs versions 11.1.x Description An authenticated user with web access can inject shell commands on Ruijie APs. This allows execution of appended shell expressions as root through the command parameter in the ''web action.do'' endpoint...

CVE-2025-65363

Authenticated append-style command-injection Ruijie APs APRGOS 11.1.x allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the webaction.do endpoint...

CVE-2025-12986

When a WF200/WGM160P device is configured to operate as an Access Point, it may be vulnerable to a denial of service triggered by a malformed packet. The device may recover automatically or require a hard reset...

EUVD-2025-201295

When a WF200/WGM160P device is configured to operate as an Access Point, it may be vulnerable to a denial of service triggered by a malformed packet. The device may recover automatically or require a hard reset...

CVE-2025-12986 Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices

When a WF200/WGM160P device is configured to operate as an Access Point, it may be vulnerable to a denial of service triggered by a malformed packet. The device may recover automatically or require a hard reset...

CVE-2025-12986

CVE-2025-12986 affects Silicon Labs WF200/WGM160P devices configured as an Access Point. A malformed-packet trigger can cause a denial of service, with possible automatic recovery or a hard reset required. The provided documents do not specify a concrete fix or affected firmware versions. Multipl...

CVE-2025-12986 Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices

When a WF200/WGM160P device is configured to operate as an Access Point, it may be vulnerable to a denial of service triggered by a malformed packet. The device may recover automatically or require a hard reset...

CVE-2025-12986 Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices

When a WF200/WGM160P device is configured to operate as an Access Point, it may be vulnerable to a denial of service triggered by a malformed packet. The device may recover automatically or require a hard reset...

PT-2025-49159

Name of the Vulnerable Software and Affected Versions WF200/WGM160P affected versions not specified Description A device operating as an Access Point may experience a denial of service when processing a malformed packet. The device may automatically recover or require a hard reset. Recommendation...

Socomec DIRIS Digiware M-70 Denial of Service Vulnerability (CNVD-2025-30457)

The Socomec DIRIS Digiware M-70 is a communication gateway device that serves as an access point for the DIRIS Digiware system, which combines 24VDC power and communication functions in a single unit. A denial of service vulnerability exists in the Socomec DIRIS Digiware M-70, which stems from...

EUVD-2025-199922

HTCondor Access Point before 25.3.1 allows an authenticated user to impersonate other users on the local machine by submitting a batch job. This is fixed in 24.12.14, 25.0.3, and 25.3.1. The earliest affected version is 24.7.3...

CVE-2025-66433

HTCondor Access Point (HTCondor) before 25.3.1 allows an authenticated user to impersonate other users on the local machine by submitting a batch job. The earliest affected version is 24.7.3. Fixes are available in 24.12.14, 25.0.3, and 25.3.1. Affected platforms and versions are corroborated by ...

CVE-2025-66433

HTCondor Access Point before 25.3.1 allows an authenticated user to impersonate other users on the local machine by submitting a batch job. This is fixed in 24.12.14, 25.0.3, and 25.3.1. The earliest affected version is 24.7.3...

CVE-2025-66433

HTCondor Access Point before 25.3.1 allows an authenticated user to impersonate other users on the local machine by submitting a batch job. This is fixed in 24.12.14, 25.0.3, and 25.3.1. The earliest affected version is 24.7.3...

HTCondor Access Point 安全漏洞

HTCondor Access Point is a submission node in a high-throughput computing architecture from HTCondor. A security vulnerability exists in HTCondor Access Point versions prior to 25.3.1, which stems from the possibility that an authenticated user may impersonate another user by submitting a batch j...

CVE-2025-66433

HTCondor Access Point before 25.3.1 allows an authenticated user to impersonate other users on the local machine by submitting a batch job. This is fixed in 24.12.14, 25.0.3, and 25.3.1. The earliest affected version is 24.7.3...