D-Link DIR-823G Command Injection Vulnerability (CNVD-2022-38532)

D-Link DIR-823G is a wireless router from D-Link, a Taiwan-based company. D-Link DIR-823G is vulnerable to command injection, which can be exploited by attackers to achieve command injection...

ASUS RT-AX56U Stack Buffer Overflow Vulnerability

The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. The ASUS RT-AX56U suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code, perform arbitrary operations, or interrupt services...

Tenda AC9 Buffer Overflow Vulnerability

Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 is vulnerable to a buffer overflow vulnerability, which can be exploited to execute arbitrary code via the url parameter...

D-Link DIR-878 Command Injection Vulnerability (CNVD-2022-38533)

The D-Link DIR-878 is a wireless router from D-Link, a Taiwan-based company. The D-Link DIR-878 is vulnerable to a command injection vulnerability that could be exploited by an unauthenticated LAN attacker to execute arbitrary system commands to control the system or interrupt services...

PT-2022-18253 · Roku · Rokuos

Name of the Vulnerable Software and Affected Versions: RokuOS versions 9.4.0 build 4200 or earlier Description: The issue affects Roku devices that use a Realtek WiFi chip and are running the specified versions of RokuOS, allowing for arbitrary file modification. Recommendations: For RokuOS...

Tenda AC9 Stack Overflow Vulnerability (CNVD-2022-38542)

Tenda AC9 is a wireless router. a stack overflow vulnerability exists in the Tenda AC9 SetStaticRouteCfg function. An attacker can exploit the vulnerability to obtain a stable root shell via a constructed payload...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of boundary checking in the wifi service, which may result in out-of-bounds writes...

D-Link DIR-823G 命令注入漏洞

D-Link DIR-823G is a wireless router from D-Link, a Taiwan-based company. D-Link DIR-823G is vulnerable to command injection, which can be exploited by attackers to achieve command injection...

Command Execution Vulnerability in TOTOLINK A3100R

The TOTOLINK A3100R is a wireless router. A command execution vulnerability exists in the TOTOLINK A3100R, which can be exploited by an attacker to gain control of the server...

TOTOLINK N600R has a logic flaw vulnerability

The N600R is a wireless router. A logic flaw vulnerability exists in the TOTOLINK N600R, which can be exploited by attackers to bypass login restrictions...

Unauthorized Access Vulnerability in TOTOLINK N300RH

The TOTOLINK N300RH is a wireless router. An unauthorized access vulnerability exists in the TOTOLINK N300RH, which can be exploited by attackers to obtain sensitive information...

Totolink A3100R Access Control Error Vulnerability

The TotoLink A3100R is a series of wireless routers from TotoLink, Taiwan, China. An attacker could use this vulnerability to set the administrator configuration without a cookie...

TotoLink A3100R OS Command Injection Vulnerability

TotoLink A3100R is a series of wireless routers from TotoLink, Taiwan, China.TotoLink A3100R version V5.9c.4577 contains an operating system command injection vulnerability that stems from input fields that are not properly filtered and can be exploited by an attacker to cause a command injection...

openSUSE: Security Advisory for kernel-firmware (openSUSE-SU-2022:1065-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE 15 Security Update : kernel-firmware (openSUSE-SU-2022:1065-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:1065-1 advisory. - Improper input validation in firmware for IntelR PROSet/Wireless Wi-Fi in multiple operating systems and KillerTM Wi-Fi in Windows 10 and...

ASB-A-205836329

In broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the shell user, if wireless debugging is enabled, due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed...

Automaker Cybersecurity Lagging Behind Tech Adoption, Experts Warn

A pair of recent vulnerabilities found in the automaker ecosystem might not seem like a real danger taken separately. But experts warn a lack of attention on cybersecurity could plague “smart” car and electric vehicle systems — and users — in years to come, as the use of automotive technology...

SUSE-SU-2022:1065-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: Update Intel Wireless firmware for 9xxx INTEL-SA-00539, bsc1196333: CVE-2021-0161: Improper input validation in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow a privileged user to potentially enable escalation of...

OPENSUSE-SU-2022:1065-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: Update Intel Wireless firmware for 9xxx INTEL-SA-00539, bsc1196333: CVE-2021-0161: Improper input validation in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow a privileged user to potentially enable escalation of...

GE General Electric Renewable Energy MDS Radios 加密问题漏洞

GE General Electric Renewable Energy MDS Radios are a family of industrial wireless solutions from General Electric GE. GE General Electric Renewable Energy's MDS iNET/iNET II/SD/TD220/TD220MAX Radios are vulnerable to an encryption issue that stems from weaknesses in the wireless security softwa...