Lucene search
+L

1825 matches found

osv_cve
osv_cve
•added 2024/06/17 6:15 p.m.•24 views

CVE-2024-37664

Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

5.2CVSS5.8AI score0.00374EPSS
SaveExploits1References1
NVD
NVD
•added 2024/06/17 6:15 p.m.•39 views

CVE-2024-37664

Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

5.2CVSS0.00374EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/06/17 12:00 a.m.•11 views

CVE-2024-37664

Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

7AI score0.00374EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/06/17 12:00 a.m.•17 views

TP-LINK TL-7DR5130 Security Vulnerability

TP-LINK TL-7DR5130 is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-LINK TL-7DR5130 v1.0.23, which stems from vulnerability to TCP DoS or hijacking attacks, where an attacker can evict the NAT mapping in the router by sending a forged TCP RST message to disconnec...

6.3CVSS6.9AI score0.0038EPSS
SaveExploits1References2
CVE
CVE
•added 2024/06/17 12:00 a.m.•99 views

CVE-2024-37662

The TP-LINK TL-7DR5130 v1.0.23 wireless router is vulnerable to TCP DoS or hijacking attacks due to insufficient verification of the communication channel source. An attacker residing on the same WLAN can send forged TCP RST messages to evict NAT mappings, enabling them to disconnect or hijack tr...

6.3CVSS7AI score0.0038EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/17 12:00 a.m.•7 views

CVE-2024-37662: Improper Verification of Source of a Communication Channel

TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

6.3CVSS6.7AI score0.0038EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/06/17 12:00 a.m.•20 views

Xiaomi Redmi RB03 Security Vulnerability

Xiaomi Redmi RB03 is a wireless router from Chinese company Xiaomi Xiaomi. A security vulnerability exists in Xiaomi Redmi RB03 v1.0.57, which stems from vulnerability to TCP DoS or hijacking attacks, where an attacker can evict the NAT mapping in the router by sending a forged TCP RST message to...

5.2CVSS6.9AI score0.00374EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/06/17 12:00 a.m.•47 views

CVE-2024-37664

Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

0.00374EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/06/17 12:00 a.m.•60 views

CVE-2024-37662

TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

0.0038EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/17 12:00 a.m.•7 views

CVE-2024-37664: Improper Verification of Source of a Communication Channel

Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

5.2CVSS5.8AI score0.00374EPSS
SaveExploits1References1
CVE
CVE
•added 2024/06/17 12:00 a.m.•73 views

CVE-2024-37664

The Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks due to improper verification of the source of a communication channel (CWE-940 ). An attacker located on the same WLAN as the victim can send forged TCP RST messages to evict NAT mappings in the router. This allows the at...

5.2CVSS6.7AI score0.00374EPSS
SaveExploits1References1Affected Software1
osv_debian
osv_debian
•added 2024/05/17 12:15 p.m.•15 views

DEBIAN-CVE-2024-27415

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack nfconfirm logic cannot handle cloned skbs referencing the same nfconn entry, which will happen for multicast broadcast frames on bridges...

4.7CVSS5.4AI score0.00252EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/17 12:15 p.m.•29 views

CVE-2024-27415

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack nfconfirm logic cannot handle cloned skbs referencing the same nfconn entry, which will happen for multicast broadcast frames on bridges...

8.8CVSS7.7AI score0.00252EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/05/17 11:51 a.m.•41 views

CVE-2024-27415 netfilter: bridge: confirm multicast packets before passing them up the stack

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack nfconfirm logic cannot handle cloned skbs referencing the same nfconn entry, which will happen for multicast broadcast frames on bridges...

8.8CVSS6.8AI score0.00252EPSS
SaveExploits0References5
CVE
CVE
•added 2024/05/17 11:51 a.m.•216 views

CVE-2024-27415

CVE-2024-27415 : Linux kernel netfilter bridge multicast handling races between macvlan clones and conntrack nf_confirm, risking unconfirmed nf_conn entries for multicast/broadcast frames. The race occurs when a L2 multicast/broadcast packet is cloned and sent across bridge interfaces, with confi...

8.8CVSS6.8AI score0.00252EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
•added 2024/05/17 11:51 a.m.•52 views

CVE-2024-27415

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack nfconfirm logic cannot handle cloned skbs referencing the same nfconn entry, which will happen for multicast broadcast frames on bridges...

8.8CVSS7.6AI score0.00252EPSS
SaveExploits0
osv_cve
osv_cve
•added 2024/05/14 3:39 p.m.•15 views

CVE-2024-34943

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting...

9.8CVSS6.2AI score0.00936EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/04/25 12:00 a.m.•5 views

PT-2024-28507

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description A vulnerability in the Linux kernel has been resolved, which was caused by a missing sanity check on i xattr nid during f2fs iget. This led to current nat addr accessing nat bitmap with an offs...

7.8CVSS0.00237EPSS
SaveExploits0
osv_cve
osv_cve
•added 2024/04/23 3:15 p.m.•13 views

CVE-2024-33217

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter in ip/goform/addressNat...

7.5CVSS6.2AI score0.00626EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/04/23 12:00 a.m.•19 views

Tenda FH1206 安全漏洞

The Tenda FH1206 is a wireless router from Tenda China. The Tenda FH1206 suffers from a buffer overflow vulnerability that originates from failing to properly validate the length size of input data via the page parameter in ip/goform/addressNat. No details of the vulnerability are available at th...

7.5CVSS7.5AI score0.00626EPSS
SaveExploits1References2
Rows per page
Query Builder