Aruba ClearPass Policy Manager Server-Side Request Forgery Vulnerability

Aruba ClearPass Policy Manager is an application that provides a secure access management system for wireless networks.Aruba ClearPass Policy Manager is vulnerable to server-side request forgery, which can be exploited by remote attackers to submit ad hoc requests that can obtain sensitive...

Aruba ClearPass Policy Manager Information Disclosure Vulnerability

Aruba ClearPass Policy Manager is an application that provides a wireless network security access management system. An information disclosure vulnerability exists in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.9, 6.7.14-HF1, which can be exploited by a remote attacker to submit a...

Texas Instruments SimpleLink 输入验证错误漏洞

Texas Instruments SimpleLink is an ultra-low power wireless microcontroller from Texas Instruments. An integer overflow or wrap-around vulnerability exists in multiple Texas Instruments products that originates from an integer overflow in the host MCU's api when attempting to connect to a WIFI...

network camera device 访问控制错误漏洞

Edimax Technology wireless network camera is a network device from Edimax Technology, China. It provides a video recording function. A security vulnerability exists in the network camera device that allows user authentication. A remote attacker can exploit this vulnerability to modify URL...

CVE-2021-30165

CVE-2021-30165 affects EDIMAX wireless network cameras (e.g., IC-3140W) where the default administrator account and password are hard-coded. The root cause is a hard-coded credential that enables remote attackers to disassemble firmware and obtain privileged permissions, allowing potential full c...

Unauthorized Access Vulnerability in TRENDnet TV-IP121W

The TV-IP121W is a wireless network camera from TRENDnet. An unauthorized access vulnerability exists in the TRENDnet TV-IP121W, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Equipment Management System of Shenzhen Chaohenghui Network Technology Co.

LELIGHT is the brand of wireless network series products independently developed by Shenzhen Chaohanghui Network Technology Co., Ltd, which covers: outdoor wireless AP, indoor ceiling AP, panel AP, intelligent gateway, digital bridge, intelligent wireless router, POE switch, outdoor high gain...

PT-2021-9428 · Unknown · Wiz Colors A60

Name of the Vulnerable Software and Affected Versions: WiZ Colors A60 version 1.14.0 Description: An issue was discovered where the device sends unnecessary information to the cloud controller server, including the local IP address and the SSID of the Wi-Fi network it is connected to. Although th...

Cisco Aironet Access Points FlexConnect Multicast DNS Denial of Service Vulnerability

A vulnerability in the multicast DNS mDNS gateway feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of incoming mDNS...

Command Execution Vulnerability in 11AC 1200MBPS Wireless Panel AP of Shenzhen Jixiang Tengda Technology Co Ltd (CNVD-2021-22529)

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Shenzhen Jixiang Tengda Technology Co., Ltd. 11AC 1200MBPS Wireless Panel AP has a command execution vulnerability that can be...

CVE-2020-15834

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The wireless network password is exposed in a QR encoded picture that an unauthenticated adversary can download via the web-management interface...

Design/Logic Flaw

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The wireless network password is exposed in a QR encoded picture that an unauthenticated adversary can download via the web-management interface...

CVE-2020-15834

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The wireless network password is exposed in a QR encoded picture that an unauthenticated adversary can download via the web-management interface...

CVE-2020-15834

The CVE-2020-15834 entry concerns Mofi Network MOFI4500-4GXeLTE devices running 4.1.5-std. The issue is that the wireless network password is exposed in a QR-encoded image that can be downloaded by an unauthenticated user through the device’s web-management interface, leading to unauthorized disc...

The vulnerability of the WLAN operating system in Windows, which allows a hacker to increase their privileges

The vulnerability of the Windows WLAN operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

HosTaGe - Low Interaction Mobile Honeypot

HosTaGe is a lightweight, low-interaction, portable, and generic honeypot for mobile devices that aims on the detection of malicious, wireless network environments. As most malware propagate over the network via specific protocols, a low-interaction honeypot located at a mobile device can check...

多款Cisco产品缓冲区错误漏洞

The Cisco RV110W is a Wireless-N VPN firewall, the Cisco RV130 is a multifunction VPN router, the Cisco RV130W is a Wireless-N multifunction VPN router, and the Cisco RV215W is a Wireless-N VPN router. A remote command execution and denial of service vulnerability exists in the Web management...

多款Cisco产品缓冲区错误漏洞

The Cisco RV110W is a Wireless-N VPN firewall, the Cisco RV130 is a multifunction VPN router, the Cisco RV130W is a Wireless-N multifunction VPN router, and the Cisco RV215W is a Wireless-N VPN router. A remote command execution and denial of service vulnerability exists in the Web management...

Mimosa Cloud. Invite friends, not hackers

TL;DR Global wireless network provider had an IDOR in their cloud management platform Anyone can create an account, anyone can upgrade that account to take control of anyone else’s devices Excellent VDP, responded to promptly Fixed in ONE WORKING DAY! Other vendors can learn from Mimosa Who? Mimo...

Additional Analysis into the SUNBURST Backdoor | McAfee Blogs

ARCHIVED STORY Additional Analysis into the SUNBURST Backdoor Christiaan Beek · DEC 17, 2020 Executive Summary There has been considerable focus on the recent disclosures associated with SolarWinds, and while existing analysis on the broader campaign has resulted in detection against specific IoC...