Lucene search
+L

901 matches found

CNVD
CNVD
added 2022/12/06 12:00 a.m.22 views

Tenda i22 formwrlSSIDget function buffer overflow vulnerability

Tenda i22 is a wireless access point from Tenda, China. Tenda i22 is vulnerable to a buffer overflow vulnerability, which stems from a lack of length validation of input data in the list parameter of the formwrlSSIDget function. An attacker could exploit this vulnerability to cause a denial of...

7.5CVSS4.1AI score0.00815EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/12/02 12:00 a.m.11 views

Tenda i21 缓冲区错误漏洞

Tenda i21 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i21 version V1.0.0.144656, which was discovered to contain a stack overflow vulnerability via /goform/setSysPwd...

9.8CVSS8.5AI score0.00928EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2022/11/14 12:00 a.m.10 views

The vulnerability of the microprogramming software for industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software for wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C series, is related to the execution of operations outside the buffer in memory. This vulnerability allows a malicious actor to cause service failures.

The vulnerability of the microprogramming software in industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software in wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C...

9.4CVSS5.9AI score
SaveExploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/11/14 12:00 a.m.13 views

The vulnerability of the microprogramming software for industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software for wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C series, is related to inconsistencies in response to incoming requests. This vulnerability allows an intruder to gain unauthorized access to protected information.

The vulnerability of the microprogramming software used in industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software used in wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and...

9.4CVSS5.5AI score
SaveExploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/11/14 12:00 a.m.14 views

The vulnerability of the microprogramming software used in industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software used in wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C models, is related to the unencrypted storage of critical information. This vulnerability allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the microprogramming software used in industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software used in wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and...

9.4CVSS5.5AI score
SaveExploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/11/02 12:00 a.m.10 views

The vulnerability of the web interface of microprogramming software for wireless access points in Moxa’s industrial systems, such as Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C, as well as the microprogramming software for wireless access points like Moxa TAP-323 and Moxa TAP-213, allows a hacker to perform cross-site scripting attacks.

The vulnerability of the web interface of Moxa wireless access points for industrial systems, namely Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C, as well as the wireless access points with Moxa TAP-323 and Moxa TAP-213, stems from the lack of protective measures for the web page structure...

10CVSS5.3AI score
SaveExploits0References3Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/10/18 12:00 a.m.11 views

The vulnerability of the NIS-HAP11AC wireless access point’s microprogramming software, due to lack of access control mechanisms, allows a intruder to execute arbitrary code.

The vulnerability of the NIS-HAP11AC wireless access point’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through an external port using the Telnet protocol...

10CVSS8.2AI score0.00876EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2022/10/13 1:15 a.m.49 views

CVE-2022-40187

Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework TCF service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless acce...

8CVSS0.00779EPSS
SaveExploits1References4
OSV
OSV
added 2022/10/13 1:15 a.m.9 views

CVE-2022-40187

Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework TCF service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless acce...

8CVSS5.7AI score0.00779EPSS
SaveExploits1References4
Prion
Prion
added 2022/10/13 1:15 a.m.25 views

Design/Logic Flaw

Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework TCF service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless acce...

5.2CVSS7.8AI score0.00779EPSS
SaveExploits1References4Affected Software2
Cvelist
Cvelist
added 2022/10/13 12:00 a.m.33 views

CVE-2022-40187

Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework TCF service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless acce...

8AI score0.00779EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/09/28 11:00 p.m.8 views

CVE-2022-20856

A vulnerability in the processing of Control and Provisioning of Wireless Access Points CAPWAP Mobility messages in Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

8.6CVSS7.2AI score0.01154EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/09/23 12:00 a.m.9 views

Tenda i9 缓冲区错误漏洞

Tenda i9 is an enterprise wireless AP device. a buffer overflow vulnerability exists in the Tenda i9 formwrlSSIDgett function, which can be exploited by attackers to cause a denial of service DoS via a specially crafted string...

7.5CVSS7.2AI score0.00774EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/09/01 12:00 a.m.11 views

Contec FLEXLAN FX3000和FX2000 信任管理问题漏洞

The Contec FLEXLAN FX3000 and Contec FLEXLAN FX2000 are both wireless LAN access points from Contec Japan. A security vulnerability exists in the Contec FLEXLAN FX3000 version prior to 1.16.00 and the FX2000 version prior to 1.39.00. An attacker could exploit the vulnerability to access product...

8.8CVSS7.8AI score0.00975EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2022/08/29 12:00 a.m.7 views

Hytec Inter HWL-2511-SS 命令注入漏洞

The Hytec Inter HWL-2511-SS is an industrial LTE router and Wi-Fi access point from Hytec Inter, Japan. A security vulnerability exists in Hytec Inter HWL-2511-SS v1.05 and earlier, which stems from a CLI that allows attackers to execute arbitrary commands with root privileges...

9.8CVSS7.5AI score0.02247EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/08/21 12:00 a.m.7 views

Siklu MultiHaul TG Series 安全漏洞

The Siklu MultiHaul TG Series is a series of wireless transmission devices from Siklu designed to provide reliable, high-speed data transmission solutions, especially for fixed wireless access and connectivity needs in dense urban environments. A security vulnerability exists in the Siklu MultiHa...

7.5CVSS5.5AI score0.0055EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/12 12:00 a.m.11 views

Tenda W6 缓冲区错误漏洞

Tenda W6 is a wireless WiFi AP access point router from Tenda China.Tenda W6 is vulnerable to a stack overflow vulnerability caused by a stack buffer overflow in the function wifiSSIDget. A remote attacker can exploit this vulnerability to cause a denial of service...

7.5CVSS7.4AI score0.00986EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/07/11 12:00 a.m.3 views

PT-2022-20291 · Unknown · Semwifiapclient

Name of the Vulnerable Software and Affected Versions: SemWifiApClient versions prior to SMR Jul-2022 Release 1 Description: The issue is related to an improper access control vulnerability in the sendDHCPACKBroadcast function. This vulnerability allows an attacker to access the WiFi AP client MA...

3.3CVSS3.7AI score0.00094EPSS
SaveExploits0References3
OSV
OSV
added 2022/06/16 10:15 p.m.13 views

CVE-2018-18907

An issue was discovered on D-Link DIR-850L 1.21WW devices. A partially completed WPA handshake is sufficient for obtaining full access to the wireless network. A client can access the network by sending packets on Data Frames to the AP without encryption...

7.5CVSS5.8AI score0.00779EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/04/27 5:15 p.m.13 views

CVE-2022-22277

A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext...

5.3CVSS6AI score0.00758EPSS
SaveExploits0References2
Rows per page
Query Builder