Aruba Operating System Buffer Overflow Vulnerability

Aruba Operating System, the operating system for Aruba controller-managed wireless LANs and Aruba mobile controllers from Aruba Networks, has a buffer overflow vulnerability that results from a boundary error when the system processes PAPI messages. error when processing PAPI messages. A remote...

Aruba Operating System Command Injection Vulnerability

Aruba Networks Aruba Operating System, the operating system for Aruba controller-managed wireless LANs and Aruba mobile controllers from Aruba Networks, is vulnerable to a command injection vulnerability. The vulnerability is caused by a failure to properly filter special characters, commands, et...

CVE-2021-38703

Wireless devices running certain Arcadyan-derived firmware such as KPN Experia WiFi 1.00.15 do not properly sanitise user input to the syslog configuration form. An authenticated remote attacker could leverage this to alter the device configuration and achieve remote code execution. This can be...

CVE-2021-38703

Wireless devices running certain Arcadyan-derived firmware such as KPN Experia WiFi 1.00.15 do not properly sanitise user input to the syslog configuration form. An authenticated remote attacker could leverage this to alter the device configuration and achieve remote code execution. This can be...

Design/Logic Flaw

Wireless devices running certain Arcadyan-derived firmware such as KPN Experia WiFi 1.00.15 do not properly sanitise user input to the syslog configuration form. An authenticated remote attacker could leverage this to alter the device configuration and achieve remote code execution. This can be...

CVE-2021-38703

Wireless devices running certain Arcadyan-derived firmware such as KPN Experia WiFi 1.00.15 do not properly sanitise user input to the syslog configuration form. An authenticated remote attacker could leverage this to alter the device configuration and achieve remote code execution. This can be...

Aruba Operating System 命令注入漏洞

Aruba Operating System is an operating system for wireless LANs and Aruba mobile controllers managed by Aruba Networks, Inc. The Aruba Operating System is vulnerable to command injection, which could be exploited by attackers to execute remote commands...

Aruba Networks Aruba Operating System 命令注入漏洞

Aruba Networks Aruba Operating System, the operating system for Aruba controller-managed wireless LANs and Aruba mobile controllers from Aruba Networks, is vulnerable to a command injection vulnerability. The vulnerability is caused by a failure to properly filter special characters, commands, et...

Aruba Networks Aruba Operating System 命令注入漏洞

Aruba Operating System is the operating system for the Aruba controller-managed wireless LAN and Aruba Mobile Controller from Aruba Networks, U.S.A. A command injection vulnerability exists in Aruba Operating System, and no details of the vulnerability are available...

Aruba Operating System 跨站请求伪造漏洞

Aruba Operating System is the operating system for Aruba controller-managed wireless LANs and Aruba mobile controllers from Aruba Networks, Inc. user interface to perform file deletion operations...

CVE-2021-34572

Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices. Instead timestamps of the sensor are replaced by the time of the readout even if the data is a replay of earlier data...

CVE-2021-34571

Multiple Wireless M-Bus devices by Enbra use Hard-coded Credentials in Security mode 5 without an option to change the encryption key. An adversary can learn all information that is available in Enbra EWM...

PT-2021-20545 · Pepperl+Fuchs · Wirelesshart Gateway

Name of the Vulnerable Software and Affected Versions: PEPPERL+FUCHS WirelessHART-Gateway versions 3.0.9 and earlier Description: A form in the affected software contains a password field with autocomplete enabled, allowing stored credentials to be captured by an attacker who gains control over t...

CVE-2021-37911

The management interface of BenQ smart wireless conference projector does not properly control user's privilege. Attackers can access any system directory of this device through the interface and execute arbitrary commands if he enters the local subnetwork...

CVE-2021-37911

CVE-2021-37911 affects BenQ smart wireless conference projectors (data: BenQ EH600/related models). The management interface does not properly enforce user privileges, allowing an attacker on the local subnet to reach arbitrary system directories and execute commands. This is supported by NVD and...

CVE-2021-37911: Improper Privilege Management

The management interface of BenQ smart wireless conference projector does not properly control user's privilege. Attackers can access any system directory of this device through the interface and execute arbitrary commands if he enters the local subnetwork...

PC Wireless Wi-Fi Adapter Driver Security Updates August 2021

Wireless Wi-Fi vendors have informed HP of potential security vulnerabilities identified in some of their wireless PC adapters which may allow escalation of privilege and information disclosure. These industry-wide vulnerabilities are known as FragAttacks fragmentation and aggregation attacks...

D-Link DIR-816 Command Execution Vulnerability (CNVD-2021-67516)

The D-Link DIR-816 is a wireless router from D-Link, Taiwan, China.The D-Link DIR-816 has a security vulnerability that could be exploited by attackers to execute arbitrary php code via the typename parameter...

RaspAP Command Injection Vulnerability (CNVD-2021-94940)

RaspAP is a software solution that can easily deploy Raspberry Pi as a wireless AP access point with a set of responsive WebUI to control WiFi, as easy to use as a home router. a command injection vulnerability exists in includes/configureclient.php in RaspAP version 2.6.6. An attacker could...

CVE-2021-39510

An issue was discovered in D-Link DIR816A1FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to delete the user function. This can lead to command injection through shell...