CVE-2024-34682

Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi password in Maintenance Mode...

CVE-2024-34682

CVE-2024-34682 corresponds to Samsung Mobile devices with an improper authorization flaw in Settings before SMR Nov-2024 Release 1. The issue allows a physical attacker in Maintenance Mode to access stored Wi‑Fi passwords. Affected component: Settings; root cause: improper authorization. Risk is ...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2024 Release 1 prior to version 1, which stems from Settings containing an improper...

CVE-2024-51524

Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2024-26103 · Settings · Settings

Name of the Vulnerable Software and Affected Versions: Settings versions prior to SMR Nov-2024 Release 1 Description: The issue is related to improper authorization in Settings, allowing physical attackers to access stored WiFi passwords in Maintenance Mode. This affects devices that have not bee...

PT-2024-34688 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service...

CVE-2024-23386

memory corruption when WiFi display APIs are invoked with large random inputs...

CVE-2024-23386

CVE-2024-23386 is a memory corruption vulnerability in WiFi Display API handling; when these APIs process large random inputs, a vulnerability arises. The issue is described across multiple sources as affecting Qualcomm chipsets, with the root cause being improper handling of large inputs leading...

CVE-2024-23386 Improper Input Validation in Video

memory corruption when WiFi display APIs are invoked with large random inputs...

CVE-2024-23386 Improper Input Validation in Video

memory corruption when WiFi display APIs are invoked with large random inputs...

Unspecified Vulnerability in D-Link DSL6740C

The D-Link DSL6740C is a wireless router developed by D-link. The D-Link DSL6740C suffers from a security vulnerability that stems from the use of an insecure default wifi password, which can be exploited by an attacker to gain unauthorized access to the system...

PT-2024-19861 · Unknown · Wifi Display Api

Name of the Vulnerable Software and Affected Versions: WiFi Display API affected versions not specified Description: The issue is related to memory corruption that occurs when WiFi display APIs are invoked with large random inputs. Recommendations: At the moment, there is no information about a...

PT-2024-16342 · Tp Link · Tp-Link Iot Smart Hub

Name of the Vulnerable Software and Affected Versions: TP-Link IoT Smart Hub affected versions not specified Description: The issue exists due to the storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmwa...

CVE-2024-51432

Cross Site Scripting vulnerability in FiberHome HG6544C RP2743 allows an attacker to execute arbitrary code via the SSID field in the WIFI Clients List not being sanitized...

CVE-2024-51432

The CVE-2024-51432 entry concerns FiberHome HG6544C RP2743, where the SSID field in the WIFI Clients List is not properly sanitized, enabling Cross Site Scripting that can lead to arbitrary code execution. Affected component: SSID handling in the WIFI Clients List on FiberHome HG6544C RP2743. Roo...

CVE-2024-51432

Cross Site Scripting vulnerability in FiberHome HG6544C RP2743 allows an attacker to execute arbitrary code via the SSID field in the WIFI Clients List not being sanitized...

CVE-2024-51432

Cross Site Scripting vulnerability in FiberHome HG6544C RP2743 allows an attacker to execute arbitrary code via the SSID field in the WIFI Clients List not being sanitized...

SUSE CVE-2024-49938

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: Use skbsetlength for resetting urb before resubmit Syzbot points out that skbtrim has a sanity check on the existing length of the skb, which can be uninitialised in some error paths. The intent here is clearly ju...

CVE-2024-48272

D-Link DSL6740C v6.TR069.20211230 was discovered to use an insecure default Wifi password, possibly allowing attackers to connect to the device via a bruteforce attack...

Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505001347 fixes several issues. The following security issues were fixed: CVE-2024-35905: Fixed int overflow for stack access size bsc1226327. CVE-2021-47598: schcake: do not call cakedestroy from cakeinit bsc1227471. CVE-2024-35863: Fixed potential UAF i...