Tenda G103 Command Injection Vulnerability

Tenda G103 is an enterprise-grade Ap router from Tenda China. The Tenda G103 suffers from a command injection vulnerability that can be exploited by an attacker to obtain sensitive information via a crafted packet...

CVE-2023-20100

A vulnerability in the access point AP joining process of the Control and Provisioning of Wireless Access Points CAPWAP protocol of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

Input validation

A vulnerability in Cisco access point AP software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this...

CVE-2023-20112

The CVE-2023-20112 entry describes a DoS in Cisco access point software caused by insufficient validation of parameters in 802.11 frames. An unauthenticated, adjacent attacker can trigger an unexpected reload by sending a crafted 802.11 association request frame, leading to device DoS. Affected: ...

CVE-2023-20100

CVE-2023-20100 concerns Cisco IOS XE Software for Wireless LAN Controllers (WLCs) CAPWAP join process. The vulnerability arises from a logic error during AP joining, enabling an unauthenticated, remote attacker to trigger a DoS by causing the affected device to restart. Exploitation involves addi...

CVE-2023-20097

Cisco's CVE-2023-20097 concerns command-injection in Cisco Access Points (AP) software. The issue arises from improper input validation of commands issued from the wireless controller to an AP, allowing an authenticated local attacker with Administrator CLI access to inject arbitrary commands and...

CVE-2023-20056

CVE-2023-20056 affects Cisco Access Point software management CLI. The issue stems from insufficient input validation of user commands, allowing an authenticated, local attacker to trigger a reload and DoS on the device. Exploitation details are not provided in the documents; no explicit affected...

CVE-2023-20100: Use of Multiple Resources with Duplicate Identifier

A vulnerability in the access point AP joining process of the Control and Provisioning of Wireless Access Points CAPWAP protocol of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

CVE-2023-20056: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the management CLI of Cisco access point AP software could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could...

Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join DoS (cisco-sa-c9800-apjoin-dos-nXRHkt5)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the access point AP joining process of the Control and Provisioning of Wireless Access Points CAPWAP protocol of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow a...

PT-2025-49476

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the vfio ap device driver within the Linux kernel. The device release callback function incorrectly attempts to free memory associated with a vfio matrix dev...

CVE-2023-26609

ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wirelessmft ap field...

CVE-2023-26609: Undefined Security Weakness

ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wirelessmft ap field...

PT-2023-20761 · Abus · Abus Tvip 20000-21150

Name of the Vulnerable Software and Affected Versions: ABUS TVIP 20000-21150 devices Description: The issue allows remote attackers to execute arbitrary code via shell metacharacters in the "/cgi-bin/mft/wireless mft" ap field. This enables attackers to potentially gain control over the device...

SUSE CVE-2010-1321

The kgacceptkrb5 function in krb5/acceptseccontext.c in the GSS-API library in MIT Kerberos 5 aka krb5 through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of...

SUSE CVE-2015-4142

Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpasupplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service crash via a crafted frame, which triggers an out-of-bounds read...

CVE-2022-31808

A vulnerability has been identified in SiPass integrated AC5102 ACC-G2 All versions V2.85.44, SiPass integrated ACC-AP All versions V2.85.43. Affected devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by...

CVE-2022-31808

CVE-2022-31808 affects Siemens SiPass integrated AC5102 (ACC-G2) and ACC-AP, among other SiPass components. Affected devices fail to properly sanitize input on the telnet CLI, enabling an authenticated user to inject commands that execute with root privileges. Affected versions are AC5102 < v2...

Information disclosure

An unauthenticated attacker in AP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, can craft a link which when clicked by an unsuspecting user can be used to redirect a user to a malicious site which could rea...

CVE-2023-23853

An unauthenticated attacker in AP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, can craft a link which when clicked by an unsuspecting user can be used to redirect a user to a malicious site which could rea...