CVE-2020-37097: Insufficiently Protected Credentials

Edimax EW-7438RPn 1.13 contains an information disclosure vulnerability that exposes WiFi network configuration details through the wlencryptwiz.asp file. Attackers can access the script to retrieve sensitive information including WiFi network name and plaintext password stored in device...

CVE-2020-7249

SMC D3G0804W 3.5.2.5-LATGA devices allow XSS via the SSID field on the WiFi Network Configuration page after a successful login to the admin account...

EUVD-2020-28376

Malware in sbrugna...

CVE-2020-7249

SMC D3G0804W 3.5.2.5-LATGA devices allow XSS via the SSID field on the WiFi Network Configuration page after a successful login to the admin account...

Code injection

SMC D3G0804W 3.5.2.5-LATGA devices allow XSS via the SSID field on the WiFi Network Configuration page after a successful login to the admin account...

CVE-2020-7249

SMC D3G0804W 3.5.2.5-LATGA devices allow XSS via the SSID field on the WiFi Network Configuration page after a successful login to the admin account...

PT-2020-19497

Name of the Vulnerable Software and Affected Versions SMC D3G0804W version 3.5.2.5-LAT GA Description The issue allows for XSS via the SSID field on the "WiFi Network Configuration" page, but only after a successful login to the admin account. Recommendations For SMC D3G0804W version 3.5.2.5-LAT...

CVE-2020-7249: Improper Neutralization of Input During Web Page Generation

SMC D3G0804W 3.5.2.5-LATGA devices allow XSS via the SSID field on the WiFi Network Configuration page after a successful login to the admin account...