CVE-2024-13892

Smartwares CIP-37210AT and C724IP (and related firmware up to 3.3.0) are affected by CVE-2024-13892: during device initialization, unsanitized AP-credentials input from a mobile app enables command injection via the firmware. The vulnerability is rooted in improper input handling, potentially all...

CVE-2025-20646

In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074; Issue ID: MSV-1803...

Linux Distros Unpatched Vulnerability : CVE-2024-46827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point...

CVE-2025-20646

In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074; Issue ID: MSV-1803...

CVE-2025-20646

In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074; Issue ID: MSV-1803...

SUSE CVE-2022-49539

In the Linux kernel, the following vulnerability has been resolved: rtw89: ser: fix CAM leaks occurring in L2 reset The CAM, meaning address CAM and bssid CAM here, will get leaks during SER system error recover L2 reset process and ieee80211restarthw which is called by L2 reset process eventuall...

DEBIAN-CVE-2022-49539

In the Linux kernel, the following vulnerability has been resolved: rtw89: ser: fix CAM leaks occurring in L2 reset The CAM, meaning address CAM and bssid CAM here, will get leaks during SER system error recover L2 reset process and ieee80211restarthw which is called by L2 reset process eventuall...

Tenda i12 formWifiMacFilterSet Buffer Overflow Vulnerability

The Tenda i12 is a Tenda Ceiling Mount Wireless Access Point from Tenda China. The Tenda i12 suffers from a buffer overflow vulnerability that can be exploited by an attacker to crash an application and cause a denial of service...

Tenda i12 formSetCfm Buffer Overflow Vulnerability

The Tenda i12 is an enterprise commercial high power AP wireless access point. The Tenda i12 formSetCfm handles a buffer overflow vulnerability in the funcpara1 parameter, which can be exploited by a remote attacker to submit a special request that can crash the application and cause a denial of...

Tenda i12 formwrlSSIDset Buffer Overflow Vulnerability

The Tenda i12 is an enterprise commercial high power AP wireless access point. A buffer overflow vulnerability exists in the Tenda i12 formwrlSSIDset processing list parameter, which can be exploited by a remote attacker to submit a special request that can crash the application and cause a denia...

Tenda i12 安全漏洞

The Tenda i12 is a Tenda Ceiling Mount Wireless Access Point from Tenda China. The Tenda i12 suffers from a buffer overflow vulnerability that can be exploited by an attacker to crash an application and cause a denial of service...

CVE-2025-25523

Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v11.00.023 due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...

CVE-2025-25525

Buffer overflow vulnerability in H3C FA3010L access points SWFA1B0V100R005 due to the lack of length verification, which is related to the setting of firewall rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...

UBUNTU-CVE-2022-37660

In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the...

CVE-2025-25523

Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v11.00.023 due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...

CVE-2025-25523

Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v11.00.023 due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...

CVE-2025-25523

CVE-2025-25523 affects Trendnet TEG-40128 Web Smart Switch, version 1(1.00.023). The vulnerability is a buffer overflow caused by lack of length verification in the mobile access point setup operation, allowing an attacker to directly control the remote device. The issue is documented across mult...

PT-2025-6378 · Trendnet · Teg-40128 Web Smart Switch

Name of the Vulnerable Software and Affected Versions: Trendnet TEG-40128 Web Smart Switch version 11.00.023 Description: The issue is related to a buffer overflow vulnerability due to the lack of length verification in the mobile access point setup operation. This vulnerability allows an attacke...

CVE-2025-25523

Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v11.00.023 due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...

CVE-2025-25523

Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v11.00.023 due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...