Lucene search
+L

968 matches found

Vulnrichment
Vulnrichment
•added 2024/05/06 12:00 a.m.•19 views

CVE-2023-33548

Cross Site Scripting XSS vulnerability in ASUS RT-AC51U with firmware versions up to and including 3.0.0.4.380.8591 allows attackers to run arbitrary code via the WPA Pre-Shared Key field...

6.3AI score0.00525EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/06 12:00 a.m.•14 views

ASUS RT-AC51U 安全漏洞

ASUS RT-AC51U is a wireless router from Asus China. A security vulnerability exists in ASUS RT-AC51U version 3.0.0.4.380.8591 and prior versions. An attacker can exploit the vulnerability to run arbitrary code via the WPA pre-shared key field...

6.8CVSS7.3AI score0.00525EPSS
SaveExploits0References2
OSV
OSV
•added 2024/05/03 2:15 a.m.•10 views

CVE-2023-35750

D-Link DAP-2622 DDP Get SSID List WPA PSK Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific...

6.5CVSS5.7AI score0.00654EPSS
SaveExploits0References2
NVD
NVD
•added 2024/05/03 2:15 a.m.•28 views

CVE-2023-35750

D-Link DAP-2622 DDP Get SSID List WPA PSK Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific...

7.4CVSS7.1AI score0.00654EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/05/03 1:58 a.m.•19 views

CVE-2023-35750 D-Link DAP-2622 DDP Get SSID List WPA PSK Information Disclosure Vulnerability

D-Link DAP-2622 DDP Get SSID List WPA PSK Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific...

7.4CVSS5.9AI score0.00654EPSS
SaveExploits0References2
CVE
CVE
•added 2024/05/03 1:58 a.m.•63 views

CVE-2023-35750

CVE-2023-35750 affects D-Link DAP-2622 routers. The flaw resides in the DDP service, enabling information disclosure via lack of authentication. An unauthenticated, network-adjacent attacker can access credentials stored by the device, with potential to further compromise. Public metrics indicate...

7.4CVSS7.1AI score0.00654EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
•added 2024/04/30 10:22 a.m.•40 views

Moderate: Red Hat Security Advisory: wpa_supplicant security update

An update for wpasupplicant is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

6.5CVSS6.9AI score0.01177EPSS
SaveExploits0References3
AlmaLinux
AlmaLinux
•added 2024/04/30 12:00 a.m.•37 views

Moderate: wpa_supplicant security update

The wpasupplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 IEEE 802.11i / RSN, and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association o...

6.5CVSS7.3AI score0.01177EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/04/03 12:00 a.m.•19 views

CVE-2023-52043

An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System Hardware Rev B1 truncates Wireless Access Point Passwords WPA-PSK allowing an attacker to gain unauthorized network access via weak authentication controls...

7.3AI score0.00301EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/03/18 12:00 a.m.•31 views

Cisco Multiple Products Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-26147)

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and...

5.4CVSS6.9AI score0.07604EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2024/03/18 12:00 a.m.•32 views

Cisco Multiple Products Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-24586)

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and...

3.5CVSS6.9AI score0.05765EPSS
SaveExploits2References10
Tenable Nessus
Tenable Nessus
•added 2024/03/18 12:00 a.m.•39 views

Cisco Multiple Products Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-26143)

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and...

6.5CVSS7.2AI score0.04173EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2024/03/18 12:00 a.m.•29 views

Cisco Multiple Products Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-26140)

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and...

6.5CVSS7.2AI score0.02923EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2024/03/18 12:00 a.m.•43 views

Cisco Multiple Products Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-24588)

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and...

3.5CVSS6.9AI score0.03537EPSS
SaveExploits2References10
Tenable Nessus
Tenable Nessus
•added 2024/03/18 12:00 a.m.•42 views

Cisco Multiple Products Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-26146)

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and...

5.3CVSS7.2AI score0.05622EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2024/03/18 12:00 a.m.•27 views

Cisco Multiple Products Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-26139)

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and...

5.3CVSS6.9AI score0.06487EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2024/03/18 12:00 a.m.•46 views

Cisco Multiple Products Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-24587)

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and...

2.6CVSS6.9AI score0.02592EPSS
SaveExploits2References10
OpenVAS
OpenVAS
•added 2024/03/11 12:00 a.m.•31 views

Fedora: Security Advisory for wpa_supplicant (FEDORA-2024-36d2be00d0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.6AI score0.01177EPSS
SaveExploits0References2
Fedora
Fedora
•added 2024/03/10 1:23 a.m.•47 views

[SECURITY] Fedora 38 Update: wpa_supplicant-2.10-7.fc38

wpasupplicant is a WPA Supplicant for Linux, BSD and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11...

6.5CVSS7.3AI score0.01177EPSS
SaveExploits0
OSV
OSV
•added 2024/03/08 11:05 a.m.•8 views

SUSE-SU-2024:0819-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2023-52160: Bypassing WiFi Authentication bsc1219975...

6.5CVSS6.5AI score0.01177EPSS
SaveExploits0References3
Rows per page
Query Builder