CVE-2023-51148

An issue in TRENDnet Trendnet AC1200 Dual Band PoE Indoor Wireless Access Point TEW-821DAP v.3.00b06 allows an attacker to execute arbitrary code via the 'mycli' command-line interface component...

CVE-2023-51148

An issue in TRENDnet Trendnet AC1200 Dual Band PoE Indoor Wireless Access Point TEW-821DAP v.3.00b06 allows an attacker to execute arbitrary code via the 'mycli' command-line interface component...

TRENDnet TEW-821DAP 安全漏洞

The TRENDnet TEW-821DAP is a wireless access point from Trendnet, Inc. A security vulnerability exists in TRENDnet TEW-821DAP V2.0R and V2.5R version 3.00b06, which originates from a buffer overflow vulnerability that could allow an attacker to execute arbitrary code via admmodpwd...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary code with root user privileges.

The vulnerability of the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root user privileges...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary code with root user privileges.

The vulnerability of the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a...

Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection and Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless Access Points APs could allow an authenticated, remote attacker to perform command injection and buffer overflow attacks against an affected device. In order to exploit these...

PT-2024-2135 · Cisco · Cisco Small Business 500 Series Wireless Access Points +2

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 100, 300, and 500 Series Wireless Access Points affected versions not specified Description: The issue exists due to insufficient validation of user-supplied input in the web-based management interface, allowing an...

PT-2024-2134 · Cisco · Cisco Small Business 500 Series Wireless Access Points +2

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 100, 300, 500 Series Wireless Access Points affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the web-based user interface of the affected devices. This vulnerability...

Tenda W9 out-of-bounds write vulnerability (CNVD-2024-14314)

Tenda W9 is a wireless in-wall access point from Tenda, China. An out-of-bounds write vulnerability exists in Tenda W9 version 1.0.0.7, which is caused by a stack-based buffer overflow in the ssidIndex parameter of the formQosManageuser function. An attacker can exploit this vulnerability to inje...

CVE-2023-6398

A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, USG20W-VPN...

The vulnerability of the UPnP SUBSCRIBE Message Handler component in the wireless access points from D-Link, such as the DAP-1650, allows a hacker to execute arbitrary commands.

The vulnerability of the UPnP SUBSCRIBE Message Handler component in the wireless access points from D-Link DAP-1650 is related to improper input validation. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using specially crafted data...

The vulnerability of the formOfflineSet function in the httpd component of the wireless access point Tenda W9 allows a attacker to execute arbitrary code.

The vulnerability of the formOfflineSet function in the httpd component of the wireless access point Tenda W9 microprogramming system involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Tenda i6 formSetCfm function buffer overflow vulnerability

Tenda i6 is a wireless access point from Tenda China. A buffer overflow vulnerability exists in Tenda i6 version 1.0.0.9, which originates from the funcpara1 parameter of the formSetCfm function in /goform/setcfm that fails to correctly validate the length of the input data, and can be exploited ...

Tenda i6 formWifiMacFilterGet function buffer overflow vulnerability

Tenda i6 is a wireless access point from Tenda China. A buffer overflow vulnerability exists in Tenda i6 version 1.0.0.9, which originates from the index parameter of the formWifiMacFilterGet function in /goform/WifiMacFilterGet that fails to correctly validate the length of the input data, and c...

Yamaha wireless LAN access point devices vulnerable to active debug code

Overview Active debug code CWE-489 exists in wireless LAN access point devices provided by Yamaha Corporation. The debug function can be enabled by performing specific operations. Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer...

The vulnerability of the formSetDiagnoseInfo function in the wireless access point Tenda W9 software allows a intruder to execute arbitrary code.

The vulnerability of the formSetDiagnoseInfo function in the Tenda W9 wireless access point software exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the pingSet function in the Tenda i29 wireless access point’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the pingSet function in the Tenda i29 wireless access point’s microprogramming software relates to the ability to write data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the `sysScheduleRebootSet` function in the wireless access point software of Tenda i29 allows a intruder to execute arbitrary code.

The vulnerability of the sysScheduleRebootSet function in the wireless access point software of Tenda i29 involves insufficient measures taken to protect input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the sysLogin function in the wireless access point Tenda i29 software allows a intruder to execute arbitrary code.

The vulnerability of the sysLogin function in the wireless access point software of Tenda i29 involves the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the formexeCommand function in the wireless access point software Tenda W9 allows a intruder to execute arbitrary code.

The vulnerability of the formexeCommand function in the Tenda W9 wireless access point software exists due to the failure to implement measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...