PT-2023-29783 · Ruckus · Ruckus Cloudpath

Name of the Vulnerable Software and Affected Versions: RUCKUS Cloudpath version 5.12 build 5538 or before Description: A vulnerability in the web-based interface of the RUCKUS Cloudpath product could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a use...

Ruckus Wireless Ruckus CloudPath Cross-Site Scripting Vulnerability

Ruckus Wireless Ruckus CloudPath is a network access control NAC solution for managing the identity and access rights of network users, especially in Wi-Fi networks. Its goal is to provide advanced network access management and security features to ensure that users can securely connect to the...

D-Link DIR-823G MacAddress Parameter Buffer Overflow Vulnerability

The D-Link DIR-823G is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-823G MacAddress parameter due to incorrect boundary checking in the SetWanSettings function. An attacker could exploit the vulnerability to cause a denial of service...

The vulnerability of the SetWanSettings() function in D-Link DIR-823G router software allows a hacker to cause a service failure.

The vulnerability of the SetWanSettings function in the microprogramming software for D–Link DIR-823G routers is related to the issue where the operation’s output escapes the buffer in memory when processing the MacAddress parameter. Exploiting this vulnerability can allow a remote attacker to...

CVE-2023-44832

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress parameter in the SetWanSettings function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

Buffer overflow

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress parameter in the SetWanSettings function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2023-44832: Buffer Copy without Checking Size of Input

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress parameter in the SetWanSettings function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

Design/Logic Flaw

Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connected BT macAddress via Settings.Gloabal...

CVE-2022-33728

CVE-2022-33728 concerns Samsung Mobile devices where Bluetooth before SMR Aug-2022 Release 1 exposes the connected Bluetooth MAC address via Settings.Global. The issue is local: an attacker on the device can access the MAC address without user interaction. Root cause is a leakage in Bluetooth set...

CVE-2022-33728

Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connected BT macAddress via Settings.Gloabal...

PT-2022-21845 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth versions prior to SMR Aug-2022 Release 1 Description: The issue allows local attackers to access the connected Bluetooth macAddress via Settings.Global. Recommendations: For Bluetooth versions prior to SMR Aug-2022 Release 1, update...

CVE-2022-33728: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connected BT macAddress via Settings.Gloabal...

CVE-2022-29643

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

Stack overflow

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2022-29643

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2022-29643: Out-of-bounds Write

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50675)

TOTOLINK N600R is a wireless router from TOTOLINK, Taiwan, China. buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which originates from the lack of length validation of the macAddress parameter in the FUN0041b448 function . An attacker could exploit this vulnerabili...

CVE-2022-29394

TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the macAddress parameter in the function FUN0041b448...

Stack overflow

TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the macAddress parameter in the function FUN0041b448...

CVE-2022-29394

TOTOLINK N600R is affected by a stack overflow in the macAddress handling inside FUN_0041b448 on firmware V4.3.0cu.7647_B20210106. The issue is described across multiple sources (NVD, Red Hat advisory, CNVD, CVE lists) as a buffer/stack overflow arising from lack of length validation in the macAd...