Authentication flaw

A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points APs could allow an unauthenticated, adjacent attacker to bypass social login authentication. This vulnerability is due to a logic error with the social login implementation. An...

CVE-2023-20003 Cisco Business Wireless Access Points Social Login Guest User Authentication Bypass Vulnerability

A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points APs could allow an unauthenticated, adjacent attacker to bypass social login authentication. This vulnerability is due to a logic error with the social login implementation. An...

CVE-2023-20003

CVE-2023-20003 affects Cisco Business Wireless Access Points where the social login configuration for guest users can be bypassed by an unauthenticated adjacent attacker due to a logic error in the social login flow. Impact is guest portal access without authentication (high confidentiality and i...

CVE-2023-20003 Cisco Business Wireless Access Points Social Login Guest User Authentication Bypass Vulnerability

A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points APs could allow an unauthenticated, adjacent attacker to bypass social login authentication. This vulnerability is due to a logic error with the social login implementation. An...

Cisco Business Wireless Access Points Social Login Guest User Authentication Bypass Vulnerability

A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points APs could allow an unauthenticated, adjacent attacker to bypass social login authentication. This vulnerability is due to a logic error with the social login implementation. An...

Cisco IOS XE Software for Wireless LAN Controllers HTTP Client Profiling Denial of Service Vulnerability

A vulnerability in the HTTP-based client profiling feature of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of...

D-Link DWL-2600AP Command Injection Vulnerability

D-Link DWL-2600AP is a wireless access point device from D-Link, a Chinese company. The D-Link DWL-2600AP is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands as root...

D-Link DWL-2600AP 命令注入漏洞

D-Link DWL-2600AP is a wireless access point device from D-Link, a Chinese company. The D-Link DWL-2600AP is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands as root...

The vulnerability of D-Link DAP-2020 and DAP-1360 wireless access points, due to the use of rigidly encrypted login credentials, allows attackers to circumvent security restrictions.

The vulnerability of D-Link DAP-2020 and DAP-1360 wireless access points lies in the use of strictly encrypted login credentials. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability of the var sys_Token component in the wireless access point software of D-Link DAP-2020 and DAP-1360 allows a hacker to execute arbitrary code.

The vulnerability of the var sysToken component in the D-Link DAP-2020 and DAP-1360 wireless access points is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2023-24095

TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formSystemCheck. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects...

CVE-2023-24098

TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formSysLog. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects products...

PT-2023-19401 · Trendnet · Trendnet Wireless Ac Easy-Upgrader Tew-820Ap

Name of the Vulnerable Software and Affected Versions: TrendNet Wireless AC Easy-Upgrader TEW-820AP version 1.0R, firmware version 1.01.B01 Description: A stack overflow issue was discovered via the submit-url parameter at the "/formSysLog" API endpoint. This issue allows attackers to execute...

Tenda i22 Buffer Overflow Vulnerability

The Tenda i22 is a wireless access point from Tenda China. A buffer overflow vulnerability exists in the Tenda i22 /goform/setcfm, which can be exploited by a remote attacker to submit a special request that can execute arbitrary code in the system context or crash the application...

TP-Link TL-WA901N 安全漏洞

The TP-LINK TL-WA901N is a wireless access point from China P&L TP-LINK. A security vulnerability exists in TP-Link TL-WA901ND V1 v3.11.2 and earlier versions, and TL-WA901N V2 v3.12.16 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial ...

TP-LINK TL-WA801N 安全漏洞

The TP-LINK TL-WA801N is a wireless access point from China P&L TP-LINK. A security vulnerability exists in the TP-LINK TL-WA801N/TL-WA801ND V1 v3.12.16 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service DoS by uploading a...

Tenda i22 formSetAppFilterRule function buffer overflow vulnerability

Tenda i22 is a wireless access point from Tenda, China. Tenda i22 is vulnerable to a buffer overflow vulnerability, which stems from a lack of length validation of input data in the appData parameter of the formSetAppFilterRule function. An attacker could exploit this vulnerability to cause a...

Tenda i22 formWx3AuthorizeSet function buffer overflow vulnerability

Tenda i22 is a wireless access point from Tenda, China. version 1.0.0.3 4687 of the Tenda i22 is vulnerable to a buffer overflow vulnerability that stems from a lack of length validation of input data in the data parameter of the formWx3AuthorizeSet function. An attacker could exploit this...

Tenda i22 formWifiMacFilterGet function buffer overflow vulnerability

Tenda i22 is a wireless access point from Tenda, China. Tenda i22 is vulnerable to a buffer overflow vulnerability, which stems from a lack of length validation of input data in the index parameter of the formWifiMacFilterGet function. An attacker could exploit this vulnerability to cause a denia...

Tenda i22 formWifiMacFilterSet function buffer overflow vulnerability

Tenda i22 is a wireless access point from Tenda, China. Tenda i22 is vulnerable to a buffer overflow vulnerability that stems from a lack of length validation of input data in the index parameter of the formWifiMacFilterSet function. An attacker could exploit this vulnerability to cause a denial ...