Conceptronic C54APM HTTP应答拆分漏洞

CVE ID:CVE-2013-1406 Conceptronic C54APM是一款无线AP设备。 Conceptronic C54APM存在HTTP应答拆分攻击，允许攻击者利用漏洞注入HTTP头，可操作应用程序的cookie，验证状态等。 0 Conceptronic C54APM v2.0 1.26 目前没有详细解决方案提供： http://www.conceptronic.net/es/downloadlist.php?stype=3&productid=341...

Conceptronic C54APM多个开放重定向漏洞

CVE ID:CVE-2013-1405 Conceptronic C54APM是一款无线AP设备。 Conceptronic C54APM存在多个开放重定向漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可重定向用户通信，进行网络钓鱼等攻击。漏洞是由于goform/formWlSiteSurvey脚本不正确过滤'submit-url'参数及goform/formWlanSetup脚本不正确过滤wlan-url参数。 0 Conceptronic C54APM v2.0 1.26 目前没有详细解决方案提供：...

Conceptronic C54APM多个反射型跨站脚本漏洞

CVE ID:CVE-2013-1407 Conceptronic C54APM是一款无线AP设备。 Conceptronic C54APM存在多个反射型跨站脚本漏洞，允许远程攻击者构建恶意URI，诱使用户解析，当恶意数据被查看时可获取敏感信息或者劫持用户会话。漏洞是由于goform/formWlSiteSurvey脚本不正确过滤submit-url参数，及goform/formWlanSetup脚本不正确过滤wlan-url参数引起的。 0 Conceptronic C54APM v2.0 1.26 目前没有详细解决方案提供：...

LevelOne AMG-2000 Wireless AP Proxy Bypass

SEC Consult Security Advisory ======================================================================= title: Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000 product: LevelOne AMG-2000 Wireless AP Management Gateway vulnerable version: Firmware =2.00.00build00600 impact:...

Serious flaw in Linksys wireless AP password security

It appears that firmware version 4.50.6 for the Linksys WRT54GS hardware version 1 wireless router allows wireless clients to connect and use the network without actually authenticating. With WPA Personal/TKIP authentication enabled, the unit allows both clients using encryption with the correct...

CVE-2005-0112

The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point AP 1.00.08, and possibly earlier versions before 1.03.07A, allows remote attackers to bypass authentication and obtain sensitive information by directly accessing the 1 config.bin 2 profile.wlp?PN=ggg or 3...