CVE-2018-5788

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated Denial of Service in the RIM Radio Interface Module process running on the WiNG Access Point via crafted packets...

CVE-2018-5790

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is Remote, Unauthenticated "Global" Denial of Service in the RIM Radio Interface Module over the MINT Media Independent Tunnel Protocol on the WiNG Access Point via crafted packets...

CVE-2018-5791

Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3 contain a remote, unauthenticated heap overflow in the HSD process over the MINT protocol on WiNG APs. An attacker can craft packets to trigger the overflow via the MINT channel, potentially causing a denial of serv...

CVE-2018-5790

The CVE-2018-5790 issue affects Extreme Networks ExtremeWireless WiNG 5.x, specifically before 5.8.6.9 and before 5.9.1.3 for the 5.9.x line. The vulnerability is a Remote, Unauthenticated Denial of Service targeting the Radio Interface Module (RIM) over the MINT protocol on WiNG Access Points, t...

CVE-2018-5793

CVE-2018-5793 affects Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. A remote, unauthenticated heap overflow occurs in the HSD process over the MINT protocol on WiNG APs, triggered by crafted packets, leading to possible denial of service via a crash. No exploi...

CVE-2018-5788

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated Denial of Service in the RIM Radio Interface Module process running on the WiNG Access Point via crafted packets...

CVE-2018-5789

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated XML Entity Expansion Denial of Service on the WiNG Access Point / Controller via crafted XML entities to the Web User Interface...

CVE-2018-5791

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated Heap Overflow in the HSD Process over the MINT Media Independent Tunnel Protocol on the WiNG Access Point via crafted packets...

CVE-2018-5795

CVE-2018-5795 affects Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. The issue is Arbitrary File Write from the WebGUI on the WiNG Access Point/Controller. Descriptions in connected sources confirm the vulnerability exists in the Web User Interface of the WiNG ...

CVE-2018-5792

CVE-2018-5792 affects Extreme Networks ExtremeWireless WiNG 5.x (pre-5.8.6.9 and pre-5.9.1.3) where a remote, unauthenticated heap overflow occurs in the HSD process over the MINT (Media Independent Tunnel) protocol on the WiNG APs, exploitable via crafted packets. The issue can cause a denial of...

Extreme Networks ExtremeWireless WiNG Heap Overflow Vulnerability (CNVD-2018-03320)

Extreme Networks ExtremeWireless WiNG is a wireless access solution from Extreme Networks, Inc.The WiNG Access Point AP is one of the... A heap overflow vulnerability exists in the MINT Media Independent Tunnel Protocol for WiNG APs in Extreme Networks ExtremeWireless WiNG version 5.x prior to...

Cisco WAP150 Cross-Site Scripting Vulnerability

The Cisco WAP150 Wireless-AC/N Dual Radio Access Point with Power over Ethernet PoE and the WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with Power over Ethernet PoE are wireless access point devices from Cisco. A cross-site scripting vulnerability exists in the web-based management...

Telesquare SKT LTE Router SDT-CS3B1 - Information Disclosure Vulnerability

Exploit for hardware platform in category web applications Telesquare SKT LTE Router SDT-CS3B1 Insecure Direct Object Reference Info Leak Vendor: Telesquare Co., Ltd. Product web page: http://www.telesquare.co.kr Affected version: FwVer: SDT-CS3B1, sw version 1.2.0 LteVer: ML300S5XEA41090 1 0.1.0...

Automated WPA Phishing Attacks: WiFiPhisher

Wifiphisher is a security tool that mounts automated victim-customized phishing attacks against WiFi clients in order to obtain credentials or infect the victims with malwares. It is primarily a social engineering attack that unlike other methods it does not include any brute forcing. It is an ea...

CERIO 11nbg 2.4Ghz High Power Wireless Router (pekcmd) Rootshell Backdoors

Summary CERIO's DT-300N A4 eXtreme Power 11n 2.4Ghz 2x2 High Power Wireless Access Point with built-in 10dBi patch antennas and also supports broadband wireless routing. DT-300N A4's wireless High Power design enhances the range and stability of the device's wireless signal in office and home...

CVE-2017-14953

HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically proximate attackers to trigger association with an arbitrary access point by leveraging a default SSID with no WiFi encryption or authentication. NOTE: Vendor states that this is not a vulnerability, but more an...

Design/Logic Flaw

DISPUTED HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically proximate attackers to trigger association with an arbitrary access point by leveraging a default SSID with no WiFi encryption or authentication. NOTE: Vendor states that this is not a vulnerability, but mor...

CVE-2017-14953

HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically proximate attackers to trigger association with an arbitrary access point by leveraging a default SSID with no WiFi encryption or authentication. NOTE: Vendor states that this is not a vulnerability, but more an...

CVE-2017-14953

HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically proximate attackers to trigger association with an arbitrary access point by leveraging a default SSID with no WiFi encryption or authentication. NOTE: Vendor states that this is not a vulnerability, but more an...

Hikvision Wi-Fi IP Cameras Default SSID Unencrypted Vulnerability

HikVision Wi-Fi IP cameras is a network camera product from Hikvision China. A security vulnerability exists in HikVision Wi-Fi IP cameras. An attacker in close physical proximity could exploit the vulnerability to associate an arbitrary access point...