PT-2024-27758 · Technicolor · Technicolor Cga2121

Name of the Vulnerable Software and Affected Versions: Technicolor CGA2121 version 1.01 Description: A vulnerability of Information Exposure has been found, allowing a local attacker to obtain sensitive information stored on the device, such as wifi network's SSID and their respective passwords...

CVE-2024-1655: Improper Neutralization of Special Elements used in an OS Command

Certain ASUS WiFi routers models has an OS Command Injection vulnerability, allowing an authenticated remote attacker to execute arbitrary system commands by sending a specially crafted request...

CVE-2024-3780: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability of Information Exposure has been found on Technicolor CGA2121 affecting the version 1.01, this vulnerability allows a local attacker to obtain sensitive information stored on the device such as wifi network's SSID and their respective passwords...

PT-2024-18203 · Asus · Asus Wifi Routers

Name of the Vulnerable Software and Affected Versions: ASUS WiFi routers affected versions not specified Description: The issue allows an authenticated remote attacker to execute arbitrary system commands by sending a specially crafted request, due to an OS Command Injection vulnerability...

CVE-2024-30210

IO-1020 Micro ELD uses a default WIFI password that could allow an adjacent attacker to connect to the device...

CVE-2024-30210

IOSiX IO-1020 Micro ELD is affected by CVE-2024-30210 due to default WIFI credentials in versions prior to 360. The vulnerability allows an adjacent attacker to connect to the device over wireless, with an attacker-adjacent access vector and low attack complexity, potentially yielding high confid...

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices are related to insufficient input data validation, allowing attackers to trigger service interruptions.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network device drivers is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2024-30210: Use of Default Credentials

IO-1020 Micro ELD uses a default WIFI password that could allow an adjacent attacker to connect to the device...

SUSE CVE-2024-26683

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: detect stuck ECSA element in probe resp We recently added some validation that we don't try to connect to an AP that is currently in a channel switch process, since that might want the channel to be quiet or we...

SUSE CVE-2024-26682

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: improve CSA/ECSA connection refusal As mentioned in the previous commit, we pretty quickly found that some APs have ECSA elements stuck in their probe response, so using that to not attempt to connect while CSA is...

SUSE CVE-2024-26694

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix double-free bug The storage for the TLV PC register data wasn't done like all the other storage in the drv-fw area, which is cleared at the end of deallocation. Therefore, the freeing must also be done...

CVE-2024-31812

In TOTOLINK EX200 V4.0.3c.7646B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtenderConfig...

CVE-2023-52553

Race condition vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability will affect availability...

PT-2024-14623 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A race condition vulnerability exists in the Wi-Fi module. Successful exploitation of this issue will affect availability. Recommendations: At the momen...

Unbreakable Enterprise kernel security update

4.14.35-2047.535.2.1 - netfilter: nftables: reject QUEUE/DROP verdict parameters Florian Westphal Orabug: 36467681 CVE-2024-1086 4.14.35-2047.535.2 - Fix null ptr in rdstcprecvpath Allison Henderson Orabug: 33499812 - LTS version: v4.14.338 Saeed Mirzamohammadi - crypto: scompress - initialize...

PT-2024-25796 · Cp Plus · Cp Plus Wi-Fi Camera

Name of the Vulnerable Software and Affected Versions: CP Plus Wi-Fi Camera versions up to 20240401 Description: A critical issue was found in the User Management component, leading to improper authorization. The manipulation can be launched remotely. The issue affects an unknown functionality of...

CVE-2024-22004 Unchecked length in Trusted Application on Google Nest Wifi Pro, leading to out of bounds read

Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can trigger a vulnerability and leak the secure memory from the Trusted Application...

SUSE CVE-2024-26666

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix RCU use in TDLS fast-xmit This looks up the link under RCU protection, but isn't guaranteed to actually have protection. Fix that...

CVE-2024-26779

A vulnerability was found in the mac80211 driver in the Linux kernel. This issue could lead to potential crashes or memory corruption due to of a situation where the driver attempts to utilize data structures that haven't been fully initialized yet...

CVE-2024-26693

A vulnerability was found in the Linux kernel's iwlwifi driver, which can result in a crash due to improper handling of station data STA when the system runs out of available stations in the firmware. This could lead to a denial of service Dos which crashes the Access Point AP...