The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for Cisco IOS XE allows a attacker to trigger a device reboot or cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP protocol implemented by Cisco IOS XE lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause service failure...

The vulnerability in the web interface of Cisco IOS XE wireless network controller operating systems allows a perpetrator to execute a cross-site scripting attack.

The vulnerability in the web interface of Cisco IOS XE wireless network controller devices is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack remotely...

D-Link DIR-878 Stack Buffer Overflow Vulnerability

The D-Link DIR-878 is a wireless router from AUO D-Link of Taiwan, China. A stack buffer overflow vulnerability exists in prog.cgi in the D-Link DIR-878 version 1.30B08. An attacker can exploit this vulnerability without authentication based on a stack buffer overflow...

Wi-Fi Devices as Physical Object Sensors

The new 802.11bf standard will turn Wi-Fi devices into object sensors: In three years or so, the Wi-Fi specification is scheduled to get an upgrade that will turn wireless devices into sensors capable of gathering data about the people and objects bathed in their signals. "When 802.11bf will be...

PT-2021-9428 · Unknown · Wiz Colors A60

Name of the Vulnerable Software and Affected Versions: WiZ Colors A60 version 1.14.0 Description: An issue was discovered where the device sends unnecessary information to the cloud controller server, including the local IP address and the SSID of the Wi-Fi network it is connected to. Although th...

WiZ Colors A60 安全漏洞

WiZ Connected WiZ Colors A60 is a smart LED light from the Chinese company WiZ Connected. A security vulnerability exists in WiZ Colors A60 1.14.0, which stems from Wi-Fi credentials being stored in plaintext in flash memory...

Binary Vulnerability in D-Link DIR-816 Router

The DIR-816 is a wireless router under the AUO D-Link brand, manufactured in mainland China. A binary vulnerability exists in the D-Link DIR-816 router, which can be exploited by attackers to cause a service program crash...

Aruba Instant Command Injection Vulnerability

Aruba Instant is a cloud-hosted controller-less wireless access point. A command injection vulnerability exists in the DHCP option of Aruba Instant, which can be exploited by an attacker to execute arbitrary commands in the underlying operating system...

Aruba Instant Command Injection Vulnerability (CNVD-2021-26047)

Aruba Instant is a cloud-hosted controller-less wireless access point. A command injection vulnerability exists in the command line interface of Aruba Instant, which can be exploited by an attacker to execute arbitrary commands in the underlying operating system...

Aruba Instant Buffer Overflow Vulnerability (CNVD-2021-26051)

Aruba Instant is a cloud-hosted controller-less wireless access point. Aruba Instant has a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the underlying operating system by sending specially crafted packets to the PAPI UDP port...

Aruba Instant Command Injection Vulnerability (CNVD-2021-26049)

Aruba Instant is a cloud-hosted controller-less wireless access point. A command injection vulnerability exists in the command line interface of Aruba Instant, which can be exploited by an attacker to execute arbitrary commands in the underlying operating system...

Aruba Instant Buffer Overflow Vulnerability

Aruba Instant is a cloud-hosted controller-less wireless access point. Aruba Instant has a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the underlying operating system by sending specially crafted packets to the PAPI UDP port...

CVE-2021-28936

The Acexy Wireless-N WiFi Repeater REV 1.0 28.08.06.1 Web management administrator password can be changed by sending a specially crafted HTTP GET request. The administrator username has to be known default:admin whereas no previous authentication is required...

CVE-2021-28936

The Acexy Wireless-N WiFi Repeater REV 1.0 28.08.06.1 Web management administrator password can be changed by sending a specially crafted HTTP GET request. The administrator username has to be known default:admin whereas no previous authentication is required...

Authentication flaw

The Acexy Wireless-N WiFi Repeater REV 1.0 28.08.06.1 Web management administrator password can be changed by sending a specially crafted HTTP GET request. The administrator username has to be known default:admin whereas no previous authentication is required...

Design/Logic Flaw

The /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV 1.0 28.08.06.1 contains the administrator account password in plaintext. The page can be intercepted on HTTP...

CVE-2021-28936

The Acexy Wireless-N WiFi Repeater REV 1.0 28.08.06.1 Web management administrator password can be changed by sending a specially crafted HTTP GET request. The administrator username has to be known default:admin whereas no previous authentication is required...

CVE-2021-28936

The Acexy Wireless-N WiFi Repeater REV 1.0 28.08.06.1 Web management administrator password can be changed by sending a specially crafted HTTP GET request. The administrator username has to be known default:admin whereas no previous authentication is required...

CVE-2021-28936

The CVE-2021-28936 entry covers Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1). The vulnerability allows changing the Web management administrator password via a specially crafted HTTP GET request, without prior authentication, with the administrator username typically known as admin. This i...

CVE-2021-28937

Acexy Wireless-N WiFi Repeater REV 1.0 is vulnerable to a password disclosure through its web management interface. The NUCLEI template for CVE-2021-28937 notes that the /password.html page stores the administrator password in plaintext and can be intercepted over HTTP, enabling potential access ...