13069 matches found
CVE-2024-53940
An issue was discovered in Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. Certain /cgi-bin/luci/admin endpoints are vulnerable to command injection. Attackers can exploit this by sending crafted payloads through parameters intended for the ping utility, enabling...
CVE-2024-53940
An issue was discovered in Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. Certain /cgi-bin/luci/admin endpoints are vulnerable to command injection. Attackers can exploit this by sending crafted payloads through parameters intended for the ping utility, enabling...
PT-2024-35981
Name of the Vulnerable Software and Affected Versions: Victure RX1800 WiFi 6 Router version EN V1.0.0 r12 110933 Description: A problem was discovered in Victure RX1800 WiFi 6 Router devices. The "/cgi-bin/luci/admin/opsw/Dual freq un apple" endpoint is vulnerable to command injection through the...
CVE-2024-53940
CVE-2024-53940 affects Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933; hardware 1.0). Certain /cgi-bin/luci/admin endpoints are vulnerable to command injection; crafted payloads in parameters meant for the ping utility can lead to arbitrary command execution at root. Exploitation is ...
CVE-2024-53941
CVE-2024-53941 affects the Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0). The issue allows a nearby attacker to derive the default Wi‑Fi PSK value from the last 4 octets of the BSSID, enabling potential unauthenticated access to protected wireless networks. Impact is ...
CVE-2024-53938
CVE-2024-53938 affects Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0). The TELNET service is enabled by default and exposed on the LAN; the root account is accessible without a password, allowing attackers to gain full control remotely without authentication. This is d...
CVE-2024-53937
An issue was discovered on Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. The TELNET service is enabled by default with admin/admin as default credentials and is exposed over the LAN. The allows attackers to execute arbitrary commands with root-level permissions...
CVE-2024-53939
An issue was discovered in Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. The /cgi-bin/luci/admin/opsw/Dualfrequnapple endpoint is vulnerable to command injection through the 2.4 GHz and 5 GHz name parameters, allowing an attacker to execute arbitrary commands on t...
CVE-2024-11980
CVE-2024-11980 describes a Missing Authentication vulnerability in multiple Billion Electric WiFi routers. Attackers can remotely and unauthenticatedly access a specific router function to obtain partial device information, modify the WiFi SSID, and restart the device. The CVSS 3.1 vector (AV:N/A...
CVE-2024-11980 Billion Electric router - Missing Authentication
Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access the specific functionality to obtain partial device information, modify the WiFi SSID, and restart the device...
CVE-2024-11980 Billion Electric router - Missing Authentication
Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access the specific functionality to obtain partial device information, modify the WiFi SSID, and restart the device...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 LTSS kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2021-47589: igbvf: fix double free in igbvfprobe bsc1226557. CVE-2022-48956: ipv6: avoid use-after-free in ip6fragment bsc1231893. CVE-2022-48960: net:...
SUSE-SU-2024:4103-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 LTSS kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47589: igbvf: fix double free in igbvfprobe bsc1226557. - CVE-2022-48956: ipv6: avoid use-after-free in ip6fragment bsc1231893. - CVE-2022-48960: net:...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-48956: ipv6: avoid use-after-free in ip6fragment bsc1231893. CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2rx bsc1231979...
Unbreakable Enterprise kernel security update
4.1.12-124.92.3 - memcgwriteeventcontrol: fix a user-triggerable oops Al Viro Orabug: 37070674 CVE-2024-45021 - ocfs2: fix races between hole punching and AIO+DIO Su Yue Orabug: 36835819 CVE-2024-40943 4.1.12-124.92.2 - fbdev: savage: Handle err return when savagefbcheckvar failed Cai Xinchen...
CVE-2024-50376
A CWE-79 "Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The vulnerability can be exploited remotely leveragi...
kernel security update
5.14.0-503.15.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
CVE-2020-12492
Improper handling of WiFi information by framework services can allow certain malicious applications to obtain sensitive information...
CVE-2020-12492
The CVE-2020-12492 case involves vivo Framework Services, where improper handling of WiFi information by framework services can allow certain malicious apps to obtain sensitive data. Several connected sources provide concrete details: vulnerable software is vivo Framework Services on Vivo devices...