PT-2024-5006 · Google · Google Nest Wifi

Name of the Vulnerable Software and Affected Versions: Google Nest Wifi affected versions not specified Linux Nonsecure operating system affected versions not specified Description: The issue is related to a length check that allows an attacker with privilege access to trigger a vulnerability. Th...

CVE-2024-2813

A vulnerability was found in Tenda AC15 15.03.20multi. It has been declared as critical. This vulnerability affects the function formfastsettingwifiset of the file /goform/fastsettingwifiset. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be initiated...

CVE-2024-2810

A vulnerability has been found in Tenda AC15 15.03.05.18/15.03.20multi and classified as critical. Affected by this vulnerability is the function formWifiWpsOOB of the file /goform/WifiWpsOOB. The manipulation of the argument index leads to stack-based buffer overflow. The attack can be launched...

TOTOLINK X2000R Cross-Site Scripting Vulnerability

TOTOLINK X2000R is a WiFi 6 router from China's Gion Electronics that supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion capabilities. The TOTOLINK X2000R suffers from a cross-site scripting vulnerability that stems from the application's lack of...

Tenda AC15 安全漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. Tenda AC15 suffers from a stack buffer overflow...

CVE-2024-2711

A vulnerability was found in Tenda AC10U 15.03.06.48. It has been rated as critical. Affected by this issue is the function addWifiMacFilter of the file /goform/addWifiMacFilter. The manipulation of the argument deviceMac leads to stack-based buffer overflow. The attack may be launched remotely...

CVE-2024-2710

A vulnerability was found in Tenda AC10U 15.03.06.49. It has been declared as critical. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime leads to stack-based buffer overflow. The attack can be launched...

CVE-2024-2706

A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49. This affects the function formWifiWpsStart of the file /goform/WifiWpsStart. The manipulation of the argument index leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The...

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices involve a data protection mechanism that can be exploited, allowing an attacker to cause the device to fail.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

PT-2024-2350 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.48 Description: A critical issue affects the addWifiMacFilter function of the file /goform/addWifiMacFilter, leading to a stack-based buffer overflow when the deviceMac argument is manipulated. This can be exploit...

Tenda AC10 Security Vulnerability

Tenda AC10 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC10U version 15.03.06.49, which is caused by a stack-based buffer overflow in the index parameter of the formWifiWpsStart function of the /goform/WifiWpsStart file...

PT-2024-2443 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.49 Description: A critical issue has been found in the setSchedWifi function of the /goform/openSchedWifi file, which can lead to a stack-based buffer overflow when the schedStartTime argument is manipulated. This...

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices are related to a processing error in exception handling, which allows a hacker to cause a service failure.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network device drivers is related to an exception handling error. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

PT-2024-2349 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.49 Description: A critical issue was found in the function formWifiWpsStart of the file /goform/WifiWpsStart, which is related to a stack-based buffer overflow. This can be initiated remotely through the...

UBEE DDW365 XCNDDW365 Security Breach

Ubee DDW365 XCNDDW365 is a wireless router. A security vulnerability exists in the UBEE DDW365 XCNDDW365 version 8.14.3105 that originates from a vulnerability that allows remote attackers in the vicinity of Wi-Fi to conduct stored cross-site scripting XSS attacks via RgFirewallEL.asp, RgDdns.asp...

TOTOLINK X2000R Cross-Site Scripting Vulnerability (CNVD-2025-15317)

TOTOLINK X2000R is a WiFi 6 router from China's Gion Electronics that supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion capabilities. The TOTOLINK X2000R suffers from a cross-site scripting vulnerability that stems from the lack of effective...

CVE-2024-26637

A vulnerability was found in the WiFi driver for ath11k in the Linux kernel, where it caused crashes due to improper handling of debugfs entries. The mac80211 subsystem began deleting these entries under certain conditions, leading to conflicts when ath11k attempted to delete them again, causing...

CVE-2023-52611

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: sdio: Honor the host maxreqsize in the RX path Lukas reports skboverpanic errors on his Banana Pi BPI-CM4 which comes with an Amlogic A311D G12B SoC and a RTL8822CS SDIO wifi/Bluetooth combo card. The error he observ...

CVE-2024-26637

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: rely on mac80211 debugfs handling for vif mac80211 started to delete debugfs entries in certain cases, causing a ath11k to crash when it tried to delete the entries later. Fix this by relying on mac80211 to delete t...

CVE-2023-52611

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: sdio: Honor the host maxreqsize in the RX path Lukas reports skboverpanic errors on his Banana Pi BPI-CM4 which comes with an Amlogic A311D G12B SoC and a RTL8822CS SDIO wifi/Bluetooth combo card. The error he observ...