CVE-2021-46008

In totolink a3100r V5.9c.4577, the hard-coded telnet password can be discovered from official released firmware. An attacker, who has connected to the Wi-Fi, can easily telnet into the target with root shell if the telnet is function turned on...

TotoLink A3100R 信任管理问题漏洞

TotoLink A3100R is a series of wireless routers from TotoLink, a Taiwan-based company. TotoLink A3100R version V5.9c.4577 is vulnerable to a trust management issue, which stems from the fact that the telnet password is hard-coded and pre-populated in the official firmware, and an attacker connect...

CVE-2022-25830

Information Exposure vulnerability in Galaxy Watch3 Plugin prior to version 2.2.09.22012751 allows attacker to access password information of connected WiFiAp in the log...

CVE-2022-25827

Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows attacker to access password information of connected WiFiAp in the log...

PT-2022-17555 · Unknown · Watch Active2 Plugin

Name of the Vulnerable Software and Affected Versions: Watch Active2 Plugin versions prior to 2.2.08.22012751 Description: The issue allows an attacker to access password information of connected WiFi access points in the log. Recommendations: For versions prior to 2.2.08.22012751, update to...

CommScope Urfboard Sbg6950Ac2 命令注入漏洞

The CommScope Urfboard Sbg6950Ac2 is a Docsis 3.0 modem, Wave 2 Ac1900 Dual Concurrent Wifi Access Point, and 4-port Gigabit Ethernet Router from CommScope USA. A command injection vulnerability exists in the CommScope URFboard SBG6950AC2, which originates from the CommScope URFboard SBG6950AC2...

Samsung TencentWifiSecurity service Information Disclosure Vulnerability

Samsung TencentWifiSecurity service is a Tencent WiFi full service for Samsung mobile devices. The Samsung TencentWifiSecurity service suffers from an information disclosure vulnerability that originates from the unprotected WifiEvaluationService in the TencentWifiSecurity service, which can be...

PT-2021-9426 · Svakom · Svakom Siime Eye

Name of the Vulnerable Software and Affected Versions: Svakom Siime Eye version 14.1.00000001.3.330.0.0.3.14 Description: An issue was discovered in the Svakom Siime Eye device. By sending a "set params.cgi?telnetd=1&save=1&reboot=1" request to the webserver, it is possible to enable the telnet...

AutoGadgetFS - USB Testing Made Easy

What’s AutoGadgetFS ? AutoGadgetFS is an open source framework that allows users to assess USB devices and their associated hosts/drivers/software without an in-depth knowledge of the USB protocol. The tool is written in Python3 and utilizes RabbitMQ and WiFi access to enable researchers to condu...

VulnCheck KEV: CVE-2018-13023

System command injection vulnerability in wifiaccess in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute system commands via the "timeout" URL parameter...

PT-2020-15890 · Genexis · Genexis Platinum 4410 V2

Name of the Vulnerable Software and Affected Versions: Genexis Platinum 4410 V2 version 2.1 software version P4410-V2-1.28 Description: The issue allows for changing the Wi-Fi password remotely due to Broken Access Control and CSRF. This could potentially be exploited to gain unauthorized access ...

kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c

A flaw was found in the Linux kernel. The Marvell mwifiex driver allows a remote WiFi access point to trigger a heap-based memory buffer overflow due to an incorrect memcpy operation. The highest threat from this vulnerability is to data integrity and system availability...

kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c

A flaw was found in the Linux kernel. The Marvell mwifiex driver allows a remote WiFi access point to trigger a heap-based memory buffer overflow due to an incorrect memcpy operation. The highest threat from this vulnerability is to data integrity and system availability...

CVE-2020-10269

One of the wireless interfaces within MiR100, MiR200 and possibly according to the vendor other MiR fleet vehicles comes pre-configured in WiFi Master Access Point mode. Credentials to such wireless Access Point default to well known and widely spread SSID MiRRXXXX and passwords omitted. This...

Playable 9.18 Script Insertion / Arbitrary File Upload

Document Title: =============== Playable v9.18 iOS - Multiple Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2198 Release Date: ============= 2020-04-16 Vulnerability Laboratory ID VL-ID: ==================================== 2198...

hostapd Input Validation Error Vulnerability

hostapd is a user space daemon for access points and authentication servers. An input validation error vulnerability exists in 802.11w security state handling in hostapd version 2.6, which can be exploited by an attacker to cause a denial of service...

Xiaomi Mi Router 3 Command Injection Vulnerability (CNVD-2018-24496)

Xiaomi Mi Router 3 is a wireless router product from Chinese company Xiaomi. A system command injection vulnerability exists in the wifiaccess endpoint in Xiaomi Mi Router 3 version 2.22.15. The vulnerability can be exploited to execute system commands with the 'timeout' URL parameter...

CVE-2018-13023

System command injection vulnerability in wifiaccess in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute system commands via the "timeout" URL parameter...

CVE-2018-0415

A vulnerability in the implementation of Extensible Authentication Protocol over LAN EAPOL functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300 Series Wireless Access Points could allow an authenticated, adjacent attacker to cause a denial of servic...

ThreatList: A Ranking of Airports By Riskiest WiFi Networks

With time to spare at an airport, fliers don’t think twice about cracking open their laptops and taking advantage of one of many free WiFi hotspots. But they should, warns Coronet. Coronet, which sells wireless network security products, recently published its list of best and worst airport WiFi...