CVE-2022-41870: Improper Neutralization of Special Elements used in a Command

AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload...

CVE-2022-34326

In ambiot amb1sdk aka SDK for Ameba1 before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b284ba892c730a3, the timer task and RX task would be locked when there are frequent and continuous Wi-Fi connection with four-way handshake failures in Soft AP mode...

CVE-2022-34326

In ambiot amb1sdk aka SDK for Ameba1 before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b284ba892c730a3, the timer task and RX task would be locked when there are frequent and continuous Wi-Fi connection with four-way handshake failures in Soft AP mode...

Design/Logic Flaw

In ambiot amb1sdk aka SDK for Ameba1 before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b284ba892c730a3, the timer task and RX task would be locked when there are frequent and continuous Wi-Fi connection with four-way handshake failures in Soft AP mode...

CVE-2022-34326

In ambiot amb1sdk aka SDK for Ameba1 before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b284ba892c730a3, the timer task and RX task would be locked when there are frequent and continuous Wi-Fi connection with four-way handshake failures in Soft AP mode...

CVE-2022-34326

In ambiot amb1sdk aka SDK for Ameba1 before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b284ba892c730a3, the timer task and RX task would be locked when there are frequent and continuous Wi-Fi connection with four-way handshake failures in Soft AP mode...

PT-2022-22132 · Realtek · Amb1 Sdk +1

Name of the Vulnerable Software and Affected Versions: amb1 sdk aka SDK for Ameba1 versions prior to 2022-06-20 Realtek RTL8195AM devices versions prior to 284241d70308ff2519e40afd7b284ba892c730a3 Description: The issue occurs when there are frequent and continuous Wi-Fi connection failures in So...

CVE-2022-34326: Uncontrolled Resource Consumption

In ambiot amb1sdk aka SDK for Ameba1 before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b284ba892c730a3, the timer task and RX task would be locked when there are frequent and continuous Wi-Fi connection with four-way handshake failures in Soft AP mode...

Tenda i9 formwrlSSIDset function buffer overflow vulnerability

Tenda i9 is an enterprise wireless AP device. a buffer overflow vulnerability exists in the Tenda i9 formwrlSSIDset function, which can be exploited by attackers to cause a denial of service DoS via a specially crafted string...

Tenda i9 formwrlSSIDgett function buffer overflow vulnerability

Tenda i9 is an enterprise wireless AP device. a buffer overflow vulnerability exists in the Tenda i9 formwrlSSIDgett function, which can be exploited by attackers to cause a denial of service DoS via a specially crafted string...

Tenda i9 formWifiMacFilterGet function buffer overflow vulnerability

Tenda i9 is an enterprise wireless AP device. a buffer overflow vulnerability exists in the Tenda i9 formWifiMacFilterGet function, which can be exploited by attackers to cause a denial of service DoS via a specially crafted string...

Tenda i9 set_local_time function buffer overflow vulnerability

Tenda i9 is an enterprise wireless AP device. a buffer overflow vulnerability exists in the Tenda i9 setlocaltime function, which can be exploited by attackers to cause a denial of service DoS via a specially crafted string...

PT-2022-34283 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to a refcount leak in the ap flash init function. It was introduced in version v4.7 and fixed in version v5.4.211. The actual impact and attack plausibility have not ye...

PT-2022-34509

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.291 Description A refcount leak was discovered in the ap flash init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.14.291...

PT-2022-34123

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.137 Description A refcount leak was discovered in the ap flash init function. The issue was introduced in version v4.7 and is fixed in Linux Kernel version v5.10.137. Recommendations For versions prior to...

PT-2022-33872

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.61 Description The issue is related to a refcount leak in the ap flash init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-33528 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a refcount leak in the ap flash init function. It was introduced in version v4.7 and fixed in version v5.19.2. The actual impact and attack plausibility have not yet...

The vulnerability in the implementation of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 allows a hacker to induce a service failure.

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 lies in the copying of buffers without checking the size of the input data during the processing of the apsteer file. Exploiting this vulnerability could allow a remote attacker to cause...

Input validation

Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Snapdragon Connectivity, Snapdragon Mobile...

CVE-2021-35108

CVE-2021-35108 concerns Qualcomm/Qualcomm closed‑source components in Snapdragon Connectivity and Snapdragon Mobile. The root cause is improper checking of the AP-S lock bit when verifying secure resource group permissions, which can permit non‑secure read and write access. The CVSSv3.1 base vect...