Design/Logic Flaw

Transient DOS due to buffer over-read in WLAN while sending a packet to device...

SUSE CVE-2011-2898

net/packet/afpacket.c in the Linux kernel before 2.6.39.3 does not properly restrict user-space access to certain packet data structures associated with VLAN Tag Control Information, which allows local users to obtain potentially sensitive information via a crafted application...

SUSE CVE-2021-27853

Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers...

CVE-2022-47329

In wlan driver, there is a possible missing permission check. This could lead to local information disclosure...

UNISOC chipset 缓冲区错误漏洞

The UNISOC chipset is an integrated circuit chipset from China's Ziguang Zhanrui UNISOC. A security vulnerability exists in some of UNISOC's products, which stems from a lack of parameter checking in the wlan driver, resulting in a denial of service. The following products are affected: SC9863A,...

CVE-2023-22315

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network LAN protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code...

Snap One Wattbox 数据伪造问题漏洞

Snap One Wattbox is a line of power solutions from Snap One, Inc. Snap One Wattbox WB-300-IP-3 WB10.9a17 version and prior versions are vulnerable to a data forgery issue that stems from the use of a private local area network LAN protocol that does not validate device updates. An attacker could...

PT-2023-13264 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to a transient Denial of Service DOS caused by a buffer over-read in WLAN when parsing corrupted NAN frames. Recommendations: At the moment, there is no information about ...

PT-2023-14486 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: Wlan driver affected versions not specified Description: The issue is related to a possible missing bounds check in the wlan driver, which could lead to local denial of service in wlan services. Recommendations: At the moment, there is no...

PT-2022-9076 · Arcadyan · Arcadyan Wifi Routers Vrv9506Jac23

Name of the Vulnerable Software and Affected Versions: Arcadyan Wifi routers VRV9506JAC23 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the hostName and domain name parameters present in the LAN configuration section of the administrative dashboard. Thi...

CVE-2022-38355

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to attackers with access to the local area network LAN to disclose sensitive information stored by the affected product without requiring authentication...

CVE-2022-38355

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to attackers with access to the local area network LAN to disclose sensitive information stored by the affected product without requiring authentication...

Qualcomm WLAN 缓冲区错误漏洞

Qualcomm WLAN is a wireless LAN component from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm WLAN that stems from a lack of length checking, leading to information leakage...

PT-2022-17489 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. This affects various Qualcomm Snapdragon products, including...

Webile 1.0.1 Directory Traversal

Document Title: =============== Webile v1.0.1 - Directory Traversal Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2320 Release Date: ============= 2022-10-10 Vulnerability Laboratory ID VL-ID: ==================================== 232...

Multiple vulnerabilities in SVMPC1 and SVMPC2

Overview SVMPC1 and SVMPC2 provided by Daikin Holdings Singapore Pte Ltd. contain multiple vulnerabilities listed below. Use of hard-coded password CWE-259 - CVE-2022-41653 Improper access control CWE-284 - CVE-2022-38355 Impact Exploiting these vulnerabilities may allow an attacker on the same L...

Webile v1.0.1 - Directory Traversal Web Vulnerability

Document Title: =============== Webile v1.0.1 - Directory Traversal Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2320 Release Date: ============= 2022-10-09 Vulnerability Laboratory ID VL-ID: ==================================== 232...

PT-2022-21392 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: Wlan affected versions not specified Description: The issue is related to a possible use after free in wlan due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User...

VulnCheck KEV: CVE-2022-26258

D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution...

CVE-2022-38562

Tenda M3 V1.0.0.124856 was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service DoS via the lan parameter...