CVE-2023-28571

CVE-2023-28571 describes an information-disclosure flaw in WLAN HOST while processing the WLAN scan descriptor list during roaming scans. Public documents (NVD, Red Hat, PRION, vuln enrichment) consistently refer to information disclosure with CVSS metrics indicating a local attacker with low com...

CVE-2023-28571 Buffer Over-read in WLAN HOST

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan...

CVE-2023-28539 Buffer Copy Without Checking Size of Input in WLAN Host

Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command...

CVE-2023-28539 Buffer Copy Without Checking Size of Input in WLAN Host

Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command...

CVE-2023-28539

CVE-2023-28539 is a memory corruption in the WLAN Host when the firmware invokes multiple WMI Service Available commands. Documented across multiple sources (NVD/NVD.org, Red Hat, Qualcomm bulletins, and Android Pixel security bulletin) as a WLAN/firmware issue impacting Qualcomm components. The ...

CVE-2023-41086

CVE-2023-41086 affects Furuno SYSTEMS wireless LAN APs running in ST (Standalone) mode. A CSRF vulnerability may allow unintended operations when a logged-in user views a malicious page. Affected firmware: ACERA 1210 (≤02.36), 1150i (≤01.35), 1150w (≤01.35), 1110 (≤01.76), 1020 (≤01.86), 1010 (≤0...

CVE-2023-39429

CVE-2023-39429 affects Furuno SYSTEMS WAP devices (ACERA series) running in ST (Standalone) mode. The vulnerability is a cross-site scripting flaw where an authenticated user can inject arbitrary script through a crafted configuration, impacting multiple firmware versions listed in the connected ...

Qualcomm Chip Security Breach

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. The Qualcomm chip has a security vulnerability that stems from...

Input validation

In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07932637; Issue ID: ALPS07932637...

CVE-2023-32820

In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07932637; Issue ID: ALPS07932637...

CVE-2023-32820

In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07932637; Issue ID: ALPS07932637...

CVE-2023-32820

CVE-2023-32820 affects MediaTek wlan firmware. The issue arises from improper input handling that can trigger a firmware assertion, potentially enabling remote denial of service without extra privileges or user interaction. Public details consistently reference a patch ID ALPS07932637 (and ALPS07...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from improper handling of inputs to the wlan firmware module, which may result in firmware assertions...

PT-2023-24149 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a transient Denial of Service DOS in WLAN Firmware that occurs while parsing rsn ies. There is no information provided about the estimated number of potentiall...

PT-2023-5729 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the SetWLanRadioSettings function when handling the GuardInt parameter. This allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2023-24051 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: No specific software version is mentioned, so the description is: wlan firmware affected versions not specified Description: The issue is related to improper input handling in wlan firmware, which could lead to a firmware assertion. This migh...

PT-2023-24148 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in WLAN Firmware that occurs while parsing a NAN management frame. Recommendations: At the moment, there is no information...

Amazon Linux 2 : microvm-kernel (ALASMICROVM-KERNEL-4.14-2023-003)

The version of microvm-kernel installed on the remote host is prior to 4.14.246-200.474. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2MICROVM-KERNEL-4.14-2023-003 advisory. A flaw was found in the Linux kernel's implementation of wireless drivers using the...

The vulnerability of the SetWLanRadioSecurity function in the D-Link DIR-823G router’s microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SetWLanRadioSecurity function in the D-Link DIR-823G router’s microprogramming software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility ...

D-Link DIR-823G Stack Buffer Overflow Vulnerability

The D-Link DIR-823G is a home dual-band Gigabit wireless router with second-generation 802.11ac Wi-Fi5 technology designed for medium- to high-speed broadband networks. The D-Link DIR-823G suffers from a stack buffer overflow vulnerability that originates from the failure of SetWLanRadioSecurity'...