CVE-2024-48272

D-Link DSL6740C v6.TR069.20211230 was discovered to use an insecure default Wifi password, possibly allowing attackers to connect to the device via a bruteforce attack...

CVE-2024-48272

CVE-2024-48272 affects D-Link DSL6740C (v6.TR069.20211230). The vulnerability stems from an insecure default WiFi password, enabling an attacker to brute-force and gain unauthorized device access (per CVE description and Red Hat/CNVD/CNNVD entries). Impact is described as potential unauthorized a...

PT-2024-8611 · D Link · D-Link Dsl6740C

Name of the Vulnerable Software and Affected Versions: D-Link DSL6740C version v6.TR069.20211230 Description: The issue is related to the display of the default WiFi password during network scanning, potentially allowing a remote attacker to perform a brute force attack. This could enable...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system from Apple Inc. developed for Mac computers. A security vulnerability exists in Apple macOS versions prior to Sonoma 14, which stems from a possible failure to remove a Wi-Fi password when activating a Mac in macOS Recovery...

CVE-2024-34786

UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone not using UniFi Network Application that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio. This vulnerability is fixed in UniFi iOS app...

CVE-2024-34786

The CVE-2024-34786 entry concerns the UniFi iOS app (v10.15.0) and a misconfiguration on 2nd Generation UniFi APs operating as standalone units (not via UniFi Network Application). The issue could lead to changing the SSID name and/or removing the 5 GHz Wi‑Fi password. Public details confirm the ...

CVE-2024-34786

UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone not using UniFi Network Application that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio. This vulnerability is fixed in UniFi iOS app...

IOSIX IO-1020 Micro ELD

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.4 ATTENTION : Exploitable from adjacent network/Low attack complexity Vendor : IOSiX Equipment : IO-1020 Micro ELD Vulnerabilities : Use of Default Credentials, Download of Code Without Integrity Check 2. RISK EVALUATION Successful exploitation of these...

CVE-2023-35836

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup and reconfiguration. Upon success, the attacker is able to further infiltrate the...

Shelly TRV Security Vulnerability

Shelly TRV is a Wi-Fi connected radiator thermostat from Shelly. A security vulnerability exists in Shelly TRV version 20220811-152343 v.2.1.8, which stems from a plaintext transmission during initial setup that allows a local attacker to obtain the Wi-Fi password...

PT-2024-12513 · Solax · Solax Pocket Wifi

Name of the Vulnerable Software and Affected Versions: SolaX Pocket WiFi versions 3 through 3.001.02 Description: An issue allows an attacker within RF range to obtain a cleartext copy of the network configuration, including the Wi-Fi PSK, during device setup and reconfiguration. This enables the...

CVE-2022-46025

Totolink N200REV5 V9.3.5u.6255B20211224 is vulnerable to Incorrect Access Control. The device allows remote attackers to obtain Wi-Fi system information, such as Wi-Fi SSID and Wi-Fi password, without logging into the management page...

CVE-2023-24050

Cross Site Scripting XSS vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string when setting the Wi-Fi password in the admin panel...

CVE-2023-24050

Cross Site Scripting XSS vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string when setting the Wi-Fi password in the admin panel...

CVE-2023-46978

TOTOLINK X6000R V9.4.0cu.852B20230719 is vulnerable to Incorrect Access Control.Attackers can reset login password & WIFI passwords without authentication...

CVE-2021-40546

Tenda AC6 USAC6V4.0RTLV02.03.01.26cn.bin allows attackers who have the administrator password to cause a denial of service device crash via a long string in the wifiPwd5G parameter to /goform/setWifi...

PT-2023-12365 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version US AC6V4.0RTL V02.03.01.26 cn.bin Description: The issue allows attackers, who have the administrator password, to cause a denial of service device crash via a long string in the wifiPwd 5G parameter to "/goform/setWifi"...

Tenda AC6 安全漏洞

The Tenda AC6 is a wireless router from the Chinese company Tenda. A denial of service vulnerability exists in the Tenda AC6. The vulnerability stems from a failure to properly handle incoming error messages and can be exploited to cause a denial of service device crash via a long string in the...

PT-2023-5516 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda A18 version V15.13.07.09 Description: The issue is related to a stack overflow in the fromSetWirelessRepeat function, which can be triggered via the wpapsk crypto2 4g parameter. This can potentially allow a remote attacker to cause a...

CVE-2023-30400

An issue was discovered in Anyka Microelectronics AK3918EV300 MCU v18. A command injection vulnerability in the network configuration script within the MCU's operating system allows attackers to perform arbitrary command execution via a crafted wifi SSID or password...