163 matches found
Code injection
In add of WifiNetworkSuggestionsManager.java, there is a possible way to trigger permanent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2023-17700 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to a possible way to trigger permanent denial of service due to resource exhaustion in the WifiNetworkSuggestionsManager.java or WifiManager.java. This could lea...
CVE-2022-20556
In launchConfigNewNetworkFragment of NetworkProviderSettings.java, there is a possible way for the guest user to add a new WiFi network due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede...
CVE-2022-20556
In launchConfigNewNetworkFragment of NetworkProviderSettings.java, there is a possible way for the guest user to add a new WiFi network due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede...
Design/Logic Flaw
In launchConfigNewNetworkFragment of NetworkProviderSettings.java, there is a possible way for the guest user to add a new WiFi network due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede...
PT-2022-14747 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: A missing permission check in the getSlice function of WifiSlice.java allows for a possible connection to a new WiFi network from guest mode. This could lead to local escalation of privilege without...
CVE-2022-20556
In launchConfigNewNetworkFragment of NetworkProviderSettings.java, there is a possible way for the guest user to add a new WiFi network due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede...
PUB-A-232798363
In getSlice of WifiSlice.java, there is a possible way to connect a new WiFi network from the guest mode due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-246301667
In launchConfigNewNetworkFragment of NetworkProviderSettings.java, there is a possible way for the guest user to add a new WiFi network due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede...
PT-2022-21585 · Apple · Ios +1
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.7.1 iOS versions prior to 16.1 iPadOS versions prior to 15.7.1 iPadOS versions prior to 16.1 Description: The issue was addressed with improved memory handling. Joining a malicious Wi-Fi network may result in a...
PT-2022-22907 · Linksys · Linksys E5350 Wifi Router
Name of the Vulnerable Software and Affected Versions: Linksys E5350 WiFi Router version 1.0.00.037 and lower Description: The issue concerns the /SysInfo.htm URI, which does not require a session ID. This web page calls the show sysinfo function, retrieving sensitive information such as WPA...
PT-2022-6500 · Dji · Dji Spark
Name of the Vulnerable Software and Affected Versions: DJI Spark version 01.00.0900 Description: The issue is related to a flaw in the implementation of the Dynamic Host Configuration Protocol DHCP in the DJI Spark drone's firmware, which can lead to the exhaustion of the IP address pool due to a...
CVE-2021-39768
In Settings, there is a possible way to add an auto-connect WiFi network without the user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...
CVE-2021-39771
In Settings, there is a possible way to misrepresent which app wants to add a wifi network due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...
CVE-2021-39771
In Settings, there is a possible way to misrepresent which app wants to add a wifi network due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...
CVE-2021-39771
In Settings, there is a possible way to misrepresent which app wants to add a wifi network due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...
Design/Logic Flaw
In Settings, there is a possible way to add an auto-connect WiFi network without the user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...
CVE-2021-39771
CVE-2021-39771 is an Elevation of Privilege (EoP) in Android 12L Platform related to improper input validation in Settings, allowing a local attacker to misrepresent which app adds a Wi‑Fi network. Impact is Moderate per Android 12L release notes; exploitation requires user interaction. The vulne...
CVE-2021-43282
An issue was discovered on Victure WR1200 devices through 1.0.3. The default Wi-Fi WPA2 key is advertised to anyone within Wi-Fi range through the router's MAC address. The device default Wi-Fi password corresponds to the last 4 bytes of the MAC address of its 2.4 GHz network interface controller...