13451 matches found
GSD-2023-1000091 wifi: cfg80211: don't allow multi-BSSID in S1G
wifi: cfg80211: don't allow multi-BSSID in S1G This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...
GSD-2023-1000090 wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration
wifi: mac8021: fix possible oob access in ieee80211getrateduration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...
CVE-2022-45439
A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0 firmware prior to V5.17ABPC.3C0 in cleartext. An unauthenticated attacker could use the credentials to access the WLAN service if the configuration file has been retrieved from the device by leveraging...
Design/Logic Flaw
A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0 firmware prior to V5.17ABPC.3C0 in cleartext. An unauthenticated attacker could use the credentials to access the WLAN service if the configuration file has been retrieved from the device by leveraging...
PT-2023-33665 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to the initialization of the qmi msg handler data structure in the ath11k wifi driver. The actual impact and attack plausibility have not yet been proven. Recommendation...
PT-2023-33260 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: A buffer overflow issue exists in the elem comparison of cfg80211, a WiFi configuration module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...
PT-2023-1318 · Zyxel · Zyxel Ax7501-B0
Name of the Vulnerable Software and Affected Versions: Zyxel AX7501-B0 versions prior to V5.17ABPC.3C0 Description: The issue is related to the storage of a pair of spare WiFi credentials in the configuration file of the Zyxel AX7501-B0 firmware in cleartext. An unauthenticated attacker could use...
PT-2023-33669 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to the wifi ath10k driver in the Linux Kernel, where a buffer is not properly unmapped, potentially leading to a security issue. The actual impact and attack plausibilit...
CVE-2022-45439
A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0 firmware prior to V5.17ABPC.3C0 in cleartext. An unauthenticated attacker could use the credentials to access the WLAN service if the configuration file has been retrieved from the device by leveraging...
CVE-2022-45439
A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0 firmware prior to V5.17ABPC.3C0 in cleartext. An unauthenticated attacker could use the credentials to access the WLAN service if the configuration file has been retrieved from the device by leveraging...
PT-2023-33330 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: A buffer overflow issue exists in the elem comparison of cfg80211, a WiFi configuration module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...
CVE-2022-45439
The affected product is Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0. The issue: a pair of spare WiFi credentials is stored in the device configuration file in cleartext, enabling an unauthenticated attacker to access WLAN services if the file is retrieved by exploiting another vulnerability...
PT-2023-33258 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: A potential security issue exists in the Linux Kernel, specifically in the cfg80211 component related to wifi, where multi-BSSID in S1G is not properly handled. The actual impact and attack...
PT-2023-33167 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue concerns a possible out-of-bounds oob access in the ieee80211 get rate duration function. This is related to the wifi mac80211 component. The actual impact and attack plausibility...
A week in security (January 9—15)
Last week on Malwarebytes Labs: Slack private code on GitHub stolen Crypto-inspired Magecart skimmer surfaces via digital crime haven Security vulnerabilities in major car brands revealed Microsoft ends extended support for Windows 7 and Windows Server 2008 today Pokemon NFT card game malware...
Polite WiFi loophole could allow attackers to drain device batteries
Researchers at the University of Waterloo in Ontario have further researched a loophole in the WiFi protocol that was dubbed "polite WiFi". Last year the researchers published a study in which they showed someone could use this loophole to triangulate the location of any WiFi enabled device. Now,...
PT-2023-7451 · Zyxel · Zyxel Vpn Series +3
Name of the Vulnerable Software and Affected Versions: Zyxel USG FLEX series firmware versions 4.50 through 5.35 Zyxel USG FLEX 50W firmware versions 4.30 through 5.35 Zyxel USG20W-VPN firmware versions 4.30 through 5.35 Zyxel VPN series firmware versions 4.30 through 5.35 Description: A buffer...
Intel PROSet Wireless WiFi, Intel vPro CSME WiFi and Killer WiFi Advisory - Lenovo Support US
No description provided...