4366 matches found
The vulnerability of the SetWLanRadioSettings() function in the prog.cgi script of D-Link DIR-878 and DIR-882 router microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the SetWLanRadioSettings function in the prog.cgi script of D-Link DIR-878 and DIR-882 routers exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute...
CVE-2024-49930 wifi: ath11k: fix array out-of-bound access in SoC stats
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix array out-of-bound access in SoC stats Currently, the ath11ksocdpstats::halreoerror array is defined with a maximum size of DPREODSTRINGMAX. However, the ath11kdpprocessrx function access...
CVE-2024-47724
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: use work queue to process beacon tx event Commit 3a415daa3e8b "wifi: ath11k: add P2P IE in beacon template" from Feb 28, 2024 linux-next, leads to the following Smatch static checker warning:...
CVE-2024-47724 wifi: ath11k: use work queue to process beacon tx event
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: use work queue to process beacon tx event Commit 3a415daa3e8b "wifi: ath11k: add P2P IE in beacon template" from Feb 28, 2024 linux-next, leads to the following Smatch static checker warning:...
CVE-2024-47724
Technical details for CVE-2024-47724 (affected component, root cause, impact, remediation) are not provided in the supplied documents. Monitor for updates from official kernel advisories and vendor advisories.
CVE-2024-47724 wifi: ath11k: use work queue to process beacon tx event
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: use work queue to process beacon tx event Commit 3a415daa3e8b "wifi: ath11k: add P2P IE in beacon template" from Feb 28, 2024 linux-next, leads to the following Smatch static checker warning:...
CVE-2024-48634
D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the key parameter in the SetWLanRadioSecurity function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...
TP-LINK TL-WDR7660 安全漏洞
TP-LINK TL-WDR7660 is a gigabit router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK TL-WDR7660 version 1.0, which stems from the wlanTimerRuleJsonToBin function not checking the parameter string name when processing it, which could lead to a stack overflow...
D-Link DIR-605L formWlanSetup function buffer overflow vulnerability
The D-Link DIR-605L is the first cloud router from AUO, aimed at home and small office network environments. The D-Link DIR-605L suffers from a buffer overflow vulnerability that originates from the webpage parameter of the formWlanSetup function in the /goform/formWlanSetup page that fails to...
Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active Exploits
Qualcomm has rolled out security updates to address nearly two dozen flaws spanning proprietary and open-source components, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2024-43047 CVSS score: 7.8, has been described as a...
CVE-2024-38397 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing probe response and assoc response frame...
CVE-2024-38397 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing probe response and assoc response frame...
CVE-2024-33073 Buffer Over-read in WLAN Host Communication
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE...
CVE-2024-33071 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0...
CVE-2024-33071 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0...
CVE-2024-33070 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing ESP IE from beacon/probe response frame...
CVE-2024-33070 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing ESP IE from beacon/probe response frame...
CVE-2024-33069 Use After Free in WLAN Host
Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host...