234 matches found
CVE-2025-26202
CVE-2025-26202 describes a Cross-Site Scripting (XSS) vulnerability in the WPA/WAPI Passphrase field of the Wireless Security settings on the DZS Router Web Interface (2.4 GHz & 5 GHz). An authenticated attacker can inject malicious JavaScript into the passphrase, which is stored and later execut...
CVE-2025-26202
Cross-Site Scripting XSS vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings 2.4GHz & 5GHz bands in DZS Router Web Interface. An authenticated attacker can inject malicious JavaScript into the passphrase field, which is stored and later executed when an...
SUSE-SU-2025:0698-1 Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-15040024116 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes bsc1227320. - CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irqprocessworklis...
CVE-2024-46755 wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Do not return unused priv in mwifiexgetprivbyid mwifiexgetprivbyid returns the priv pointer corresponding to the bssnum and bsstype, but without checking if the priv is actually currently in use. Unused priv pointe...
Unspecified Vulnerability in SyroTech SY-GPON-1110-WDONT
The SyroTech SY-GPON-1110-WDONT is a wireless router from SyroTech. A security vulnerability exists in the SyroTech SY-GPON-1110-WDONT that stems from improper implementation of a password policy. An attacker can exploit this vulnerability to launch further attacks on the system...
PT-2024-27693 · Totolink · Totolink A3700R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.6165 20211012 Description: A stack overflow issue was discovered in the setWiFiEasyGuestCfg function via ssid5g. Recommendations: For TOTOLINK A3700R version 9.1.2u.6165 20211012, as a temporary workaround,...
IEEE 802.11 安全漏洞
IEEE 802.11 is a series of IEEE protocols for wireless LANs. A security vulnerability exists in IEEE 802.11 that stems from the ability of an attacker to trick a victim into connecting to an unintended or untrusted network...
ARRIS SURFboard SBG6580 Security Vulnerability
The ARRIS SURFboard SBG6580 is a modem with wireless capabilities from ARRIS. A security vulnerability exists in the ARRIS SURFboard SBG6580 that stems from the default WPA2 security password being easily predictable...
The vulnerability of the PEAP (Protected Extensible Authentication Protocol) client implementation of the Wi-Fi Protected Access Point software WPA Supplicant allows a hacker to intercept the unencrypted user traffic.
The vulnerability of the PEAP Protected Extensible Authentication Protocol client Wi-Fi access control implementation, such as WPA Supplicant, arises due to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to intercept unencrypted user traffic by...
D-Link DIR-823G Buffer Error Vulnerability
The D-Link DIR-823G is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-823G v1.0.2B05, which stems from a parameter TXPower and GuardInt found to contain a stack overflow via SetWLanRadioSecurity...
SUSE CVE-2017-13081
Wi-Fi Protected Access WPA and WPA2 that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key IGTK during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients...
SUSE CVE-2020-26147
An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames...
CVE-2023-0613
A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /wireless/security.asp of the component httpd. The manipulation leads to memory corruption. The attack can be launched remotely. The...
PT-2022-17453 · Qualcomm · Snapdragon Consumer Iot +2
Name of the Vulnerable Software and Affected Versions: Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Voice & Music affected versions not specified Description: The issue concerns cryptographic problems in WLAN during t...
Design/Logic Flaw
A vulnerability in the client forwarding code of multiple Cisco Access Points APs could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards...
PT-2022-6018 · Cisco · Cisco Catalyst 9100 Series Access Points
Name of the Vulnerable Software and Affected Versions: Cisco Catalyst 9100 Series Access Points affected versions not specified Description: A vulnerability in the 802.11 association frame validation could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on a...
PT-2022-14871 · Intel · Intel Proset/Wireless Wifi
Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi products affected versions not specified Description: The issue is related to inadequate encryption strength, which may allow an unauthenticated user to potentially enable escalation of privilege via adjacent acces...
Reolink Rlc-410W 输入验证错误漏洞
Reolink Rlc-410W is a Wifi security camera from Reolink China.Reolink RLC-410W has a security vulnerability that can be exploited by attackers to cause a denial of service...