CVE-2021-0602

CVE-2021-0602 affects Android 10 and 11 via WifiNetworkDetailsFragment.onCreateOptionsMenu, enabling guest users to view/modify configured APs due to a permissions bypass. This can cause local elevation of privilege with no extra execution privileges or user interaction. Exploitation details are ...

Tenda AC5 Cross-Site Scripting Vulnerability

The Tenda AC5 is an AC1200 smart dual-band WiFi router. A stored cross-site scripting vulnerability exists in the /main.html Wifi setting in Tenda AC5 V15.03.06.47multi. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the Wifi Name parameter...

CVE-2021-3186

CVE-2021-3186 describes a Stored Cross-Site Scripting (XSS) vulnerability in the Tenda AC5 AC1200 router, specifically in the /main.html Wifi Settings page where the Wifi Name parameter can be exploited to inject arbitrary script/HTML. Affected firmware version is V15.03.06.47_multi. Public refer...

CVE-2021-3186

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

CVE-2019-7440

JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings aka a SetWiFiSetting request to cgi-bin/qcmapwebcgi...

CVE-2018-14010

OS command injection in the guest Wi-Fi settings feature in /cgi-bin/luci on Xiaomi R3P before 2.14.5, R3C before 2.12.15, R3 before 2.22.15, and R3D before 2.26.4 devices allows an attacker to execute any command via crafted JSON data...

UPnP WFA Device Detection

According to its UPnP data, the remote device implements a UPnP WFA Device profile. This interface allows a user to configure WiFi settings over UPnP. The specifications requires a WPS-like authentication scheme. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid94049;...

HP LaserJet Credential Disclosure / Missing Authentication

Some of the networked HP LaserJet printers have hidden URLs hardcoded in the firmware. The URLs are not authenticated and can be used to extract admin password in plaintext – among other information like WiFi settings including WPS PIN. Models affected: HP LaserJet Pro P1102w, HP LaserJet Pro...

HP LaserJet Pro printers remote admin password extraction

Some of the networked HP LaserJet printers have hidden URLs hardcoded in the firmware. The URLs are not authenticated and can be used to extract admin password in plaintext v among other information like WiFi settings including WPS PIN. Models affected: HP LaserJet Pro P1102w, HP LaserJet Pro...