CVE-2025-20691: Out-of-bounds Read

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418039; Issue ID: MSV-3477...

CVE-2025-20682: Out-of-bounds Write

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416937; Issue ID: MSV-3445...

PT-2025-28311 · Unknown · Wlan Access Point Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds write exists in the WLAN access point driver due to an incorrect bounds check. This issue could lead to a local escalation of privilege, requiring user execution...

PT-2025-28318 · Unknown · Wlan Access Point Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a possible out of bounds read in the WLAN access point driver due to an incorrect bounds check. This could lead to local information disclosure, requiring user...

PT-2025-28315 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds read exists in the wlan AP driver due to an incorrect bounds check. This could lead to local information disclosure, requiring User execution privileges. No user...

PT-2025-28316 · Unknown · Wlan Access Point Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is a possible out-of-bounds read in the WLAN access point driver due to an incorrect bounds check. This could lead to local information disclosure, requiring user execution privileges...

PT-2025-28319

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a possible out of bounds read in the WLAN access point driver due to an incorrect bounds check. This could lead to local information disclosure, requiring user...

PT-2025-28320 · Unknown · Wlan Sta Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds read exists in the wlan STA driver due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed...

PT-2025-28308 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds write exists in the wlan AP driver due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User...

PT-2025-28437 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A transient Denial of Service DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests. Recommendations: At the moment, there is no...

PT-2025-28317 · Unknown · Wlan Access Point Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is a possible out of bounds read in the WLAN access point driver due to an incorrect bounds check. This could lead to local information disclosure, requiring user execution privileges...

Belkin F9K1122 安全漏洞

The Belkin F9K1122 is a WiFi signal extender from Belkin Canada. The Belkin F9K1122 suffers from a stack buffer overflow vulnerability that originates from the incorrect operation of the parameter wpsenroleepin/webpage in the file /goform/formWlanSetupWPS, no details of the vulnerability are...

CVE-2025-32880

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and machine-in-the-middle attacks...

TOTOLINK A3002R 命令注入漏洞

TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a command injection vulnerability that stems from the parameter wlanif in the file /boafrm/formWlSiteSurvey failing to correctly filter constructed command special characters, commands, a...

CVE-2025-32878

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. This function is mainly for downloading firmware files. Before downloading firmware files, the watch requests some information about the firmware via HTTPS from the back-end...

CVE-2025-32880

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and machine-in-the-middle attacks...

CVE-2025-32880: Cleartext Transmission of Sensitive Information

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and machine-in-the-middle attacks...

CVE-2025-32880

The COROS PACE 3 GPS sports watch, running firmware versions through 3.0808.0 , is vulnerable to sniffing and machine-in-the-middle (MitM) attacks. The root cause is that the device downloads firmware files via unencrypted HTTP when connected to a WLAN. An attacker positioned between the device a...

PT-2025-26322 · Coros · Coros Pace 3

Name of the Vulnerable Software and Affected Versions: COROS PACE 3 versions through 3.0808.0 Description: An issue was discovered that allows the COROS Pace 3 to download firmware files via HTTP when connected to a WLAN, but the communication is not encrypted. This lack of encryption enables...

CVE-2025-32880

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and machine-in-the-middle attacks...