127 matches found
Heap overflow
The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a FreeBSD Wi-Fi client is in scanning mode i.e., not associated with a SSID a malicious beacon frame may overwrite kernel memory, leading to remote code...
Design/Logic Flaw
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame...
Default credentials
Ubee DDW365 XCNDDW365 devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame. A PSK is generated by using the first six characters of the SSID and...
CVE-2024-23726
Ubee DDW365 XCNDDW365 devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame. A PSK is generated by using the first six characters of the SSID and...
PT-2023-24166 · Unknown · Wlan Firmware
Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a transient Denial of Service DOS in the WLAN Firmware that occurs while parsing WLAN beacon or probe-response frames. Recommendations: At the moment, there is...
CVE-2023-40039
An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame...
Design/Logic Flaw
An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame...
CVE-2023-40039
An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame...
ARRIS TG852G Security Vulnerability
The ARRIS TG852G is a router from ARRIS. A security vulnerability exists in the ARRIS TG852G, TG862G, and TG1672G, which stems from a vulnerability that allows an attacker to obtain the default WPA2-PSK value by observing beacon frames...
PT-2023-27230 · Arris · Arris Tg862G +2
Name of the Vulnerable Software and Affected Versions: ARRIS TG852G affected versions not specified ARRIS TG862G affected versions not specified ARRIS TG1672G affected versions not specified Description: A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by...
CVE-2023-33015
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame...
Design/Logic Flaw
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame...
CVE-2023-33015 Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame...
CVE-2023-33015
The CVE-2023-33015 entry describes a transient DoS in Qualcomm WLAN firmware caused by how MBSSID Information Elements are interpreted in a received beacon frame. Affected component: Qualcomm WLAN firmware/driver stack within Qualcomm-based devices. Root cause: buffer/parsing issue when processin...
Design/Logic Flaw
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame...
CVE-2023-21658 Buffer Over-Read in WLAN Firmware
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame...
SUSE CVE-2007-5448
Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service panic via a beacon frame with a large length value in the extended supported rates xrates element, which triggers an assertion error, related to net80211/ieee80211scanap.c and net80211/ieee80211scansta.c...
PT-2021-7224 · Freebsd · Freebsd
Name of the Vulnerable Software and Affected Versions: FreeBSD affected versions not specified Description: The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a FreeBSD Wi-Fi client is in scanning mode, a...
