CVE-2022-34571

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the system key information and execute arbitrary commands via accessing the page syslog.shtml...

CVE-2022-34575

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via accessing fctest.shtml...

Design/Logic Flaw

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via accessing fctest.shtml...

PT-2022-22210 · Wavlink · Wavlink Wifi-Repeater Rpta2-77W

Name of the Vulnerable Software and Affected Versions: Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 Description: An access control issue allows attackers to obtain system key information and execute arbitrary commands by accessing the page "syslog.shtml". Recommendations: For Wavlink...

PT-2022-22213 · Wavlink · Wavlink Wifi-Repeater Rpta2-77W

Name of the Vulnerable Software and Affected Versions: Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 Description: The issue is related to an access control problem, allowing attackers to obtain key device information by accessing the Tftpd32.ini file. Recommendations: For Wavlink...

WordPress plugin Social Share Buttons 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. An access control error vulnerability exists in WordPress Social Share Buttons 2.2.3 and prior versions, which stems from an improper access contr...

CVE-2022-32430

An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application...

ALLNET WR0500AC 访问控制错误漏洞

The ALLNET WR0500AC is a wireless router from ALLNET. The ALLNET WR0500AC suffers from an access control error vulnerability that originates from the wizardpwd.asp page that can change the password of the admin account without authentication...

CVE-2022-34049

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data...

CVE-2022-34047

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IPADDRESS/setsafety.shtml?r=52300 and searching for var syspasswd...

CVE-2022-34046

An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser;...

CVE-2022-34047

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IPADDRESS/setsafety.shtml?r=52300 and searching for var syspasswd...

PT-2022-21983 · Wavlink · Wavlink Wn533A8

Name of the Vulnerable Software and Affected Versions: Wavlink WN533A8 version M33A8.V5030.190716 Description: An access control issue allows attackers to obtain usernames and passwords via the API endpoint "http://IP ADDRESS/sysinit.shtml?r=52300" by searching for logincheckuser. Recommendations...

Cisco Nexus Dashboard 访问控制错误漏洞

Cisco Nexus Dashboard is a centralized data center control panel that makes it easier to manage hybrid cloud network operations and maintenance.A security vulnerability exists in Cisco Nexus Dashboard that could be exploited by attackers to spoof user identities and send malicious requests...

Cisco Nexus Dashboard 访问控制错误漏洞

Cisco Nexus Dashboard is the United States Cisco Cisco a single console. It can simplify the operation and management of data center networks. Cisco Nexus Dashboard has a security vulnerability that can be exploited by an unauthenticated, remote attacker to access specific APIs running in the dat...

The vulnerability of the Azure Site Recovery recovery tool, related to deficiencies in access control, allows a attacker to expose the protected information.

The vulnerability of the Azure Site Recovery recovery tool is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to expose the protected information...

The vulnerability of the microprogrammed Ethernet switch Bosch PRA-ES8P2S, related to deficiencies in access control, allows attackers to bypass existing security restrictions and elevate their privileges to the root level.

The vulnerability of the microprogrammed Ethernet switch Bosch PRA-ES8P2S is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and elevate their privileges to the root level...

CVE-2022-34738

The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the background...

CVE-2022-33689

Improper access control vulnerability in TelephonyUI prior to SMR Jul-2022 Release 1 allows attackers to change preferred network type by unprotected binder call...

CVE-2022-30751

Improper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wifi ap client mac address that connected by using WIFIAPSTADHCPACKEVENT action...