Default credentials

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

CVE-2017-16887

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

CVE-2017-16887

CVE-2017-16887 affects FiberHome MIFI LM53Q1 (VH519R05C01S38). The issue stems from improper validation of a user-supplied request in the device portal, enabling a remote attacker to bypass security restrictions and change the Administrator account password. Public references in the bundle indica...

CVE-2017-16887

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

CVE-2017-16887: Undefined Security Weakness

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

PT-2018-6358

Name of the Vulnerable Software and Affected Versions: FiberHome Mobile WIFI Device Model LM53Q1 version VH519R05C01S38 Description: The issue concerns unauthorized access to web services on the device, which can lead to the disclosure of the WLAN key/password. The portal uses SOAP-based web...

Buffer overflow

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an invalid input of firmware size negative value from user space can potentially lead to the memory leak or buffer overflow during the WLAN cal data store operation...

CVE-2017-15845

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an invalid input of firmware size negative value from user space can potentially lead to the memory leak or buffer overflow during the WLAN cal data store operation...

Buffer overflow

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, if userspace provides a too-large IE length in wlanhddcfg80211setie, a buffer over-read occurs...

CVE-2017-15845

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an invalid input of firmware size negative value from user space can potentially lead to the memory leak or buffer overflow during the WLAN cal data store operation...

PT-2018-8530

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description A buffer over-read issue occurs when userspace provides a too-large IE length in wlan hd...

PT-2018-6010

Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: The issue arises from an invalid input of firmware size, specifically a negative value...

Android WLAN Kernel Component Code Execution

The vulnerability of the WLAN kernel component of the Android operating system arises from buffer overflows during the processing of Measurement Request IE requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the context of a privileged process using a...

PEPPERL+FUCHS/ecom instruments WLAN Capable Devices using the WPA2 Protocol

CVSS v3 8.1 ATTENTION: Low skill level is needed to exploit. Public exploits are available. Vendor: PEPPERL+FUCHS/ecom instruments Equipment: WLAN capable devices using the WPA2 Protocol Vulnerabilities: Reusing a Nonce AFFECTED PRODUCTS PEPPERL+FUCHS/ecom instruments reports that these...

Ubuntu: Security Advisory (USN-3505-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3505-1: Linux firmware vulnerabilities

Mathy Vanhoef discovered that the firmware for several Intel WLAN devices incorrectly handled WPA2 in relation to Wake on WLAN. A remote attacker could use this issue with key reinstallation attacks to obtain sensitive information. CVE-2017-13080, CVE-2017-13081...

USN-3505-1 linux-firmware vulnerabilities

Mathy Vanhoef discovered that the firmware for several Intel WLAN devices incorrectly handled WPA2 in relation to Wake on WLAN. A remote attacker could use this issue with key reinstallation attacks to obtain sensitive information. CVE-2017-13080, CVE-2017-13081...

Google Android WLAN Qualcomm component elevation of privilege vulnerability (CNVD-2017-36556)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android WLAN Qualcomm component. An attacker can exploit this vulnerability to achieve elevation of privilege...

Ubuntu 14.04 LTS / 16.04 LTS : Linux firmware vulnerabilities (USN-3505-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3505-1 advisory. Mathy Vanhoef discovered that the firmware for several Intel WLAN devices incorrectly handled WPA2 in relation to Wake on WLAN. A remote...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2017-36521)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android WLAN Qualcomm component. An attacker could exploit this vulnerability to achieve elevation of privile...