TOTOLINK CA600-PoE 安全漏洞

TOTOLINK CA600-PoE is an outdoor wireless AP/CPE device from China Gion Electronics TOTOLINK. TOTOLINK CA600-PoE suffers from a command injection vulnerability that stems from the CloudSrvUserdataVersionCheck function url parameter failing to correctly filter constructed command special character...

The vulnerability of the CLI interface of HPE Aruba Networking Access Point software allows a perpetrator to execute arbitrary code.

The vulnerability of the CLI interface of HPE Aruba Networking Access Point software relates to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted packets to the UDP port...

编号撤回

The TP-LINK EAP120 is a wireless access point from China's P&L TP-LINK company This CVE number has been withdrawn...

CVE-2025-25056

Cross-site request forgery vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views a malicious page while logged in, unintended operations may be performed...

CVE-2025-29870

Missing authentication for critical function vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote unauthenticated attacker may obtain the product configuration information including authentication information...

CVE-2025-21429

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request...

CVE-2025-21430

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session...

CVE-2025-27722

Cleartext transmission of sensitive information issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a man-in-the-middle attack may allow a remote unauthenticated attacker to eavesdrop the communication and obtain the authentication information...

CVE-2025-29870

Missing authentication for critical function vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote unauthenticated attacker may obtain the product configuration information including authentication information...

CVE-2025-29870

Affected product: Wi-Fi AP UNIT AC-WPS-11ac series from Inaba Denki Sangyo. CVE-2025-29870 describes a Missing authentication for critical function vulnerability that could allow a remote unauthenticated attacker to obtain the device configuration information, including authentication details. Th...

CVE-2025-27934

Information disclosure of authentication information in the specific service vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote unauthenticated attacker may obtain the product authentication information...

CVE-2025-27797

OS command injection vulnerability in the specific service exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to the product...

CVE-2025-25213

Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed...

CVE-2025-25056

Cross-site request forgery vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views a malicious page while logged in, unintended operations may be performed...

CVE-2025-25056

CVE-2025-25056 describes a Cross-site request forgery in Inaba Denki Sangyo Wi-Fi AP UNIT AC-WPS-11ac series. The vulnerability allows an authenticated user to perform unintended operations when visiting a malicious page while logged in. The JVN entry aggregates multiple CVEs for this product fam...

CVE-2025-23407

CVE-2025-23407 describes an incorrect privilege assignment in the WEB UI (settings page) affecting the Inaba Denki Sangyo Wi‑Fi AP UNIT AC‑WPS‑11ac series. A remote attacker who can log in to the product could alter settings without proper privileges. The CVE is rated CVSS v3.1 base score 4.3 (Me...

Inaba Denki Sangyo Wi-Fi AP UNIT 安全漏洞

The Inaba Denki Sangyo Wi-Fi AP UNIT is a Wi-Fi AP unit from Inaba Denki Sangyo, a Japanese company. A security vulnerability exists in the Inaba Denki Sangyo Wi-Fi AP UNIT that stems from a service-specific disclosure of authentication information, which could allow a remote attacker to obtain...

Inaba Denki Sangyo Wi-Fi AP UNIT 安全漏洞

Inaba Denki Sangyo Wi-Fi AP UNIT is a Wi-Fi AP unit from Inaba Denki Sangyo Inaba Denki Sangyo, a Japanese company. A security vulnerability exists in Inaba Denki Sangyo Wi-Fi AP UNIT v2.0.03P and prior versions, which stems from an improperly assigned privilege that could lead to tampered settin...

Inaba Denki Sangyo Wi-Fi AP UNIT 安全漏洞

The Inaba Denki Sangyo Wi-Fi AP UNIT is a Wi-Fi AP unit from Inaba Denki Sangyo, a Japanese company. A security vulnerability exists in Inaba Denki Sangyo Wi-Fi AP UNIT v2.0.03P and prior versions, which stems from improper restrictions in the UI layer or framework, and could lead to the user...

Inaba Denki Sangyo Wi-Fi AP UNIT 跨站请求伪造漏洞

The Inaba Denki Sangyo Wi-Fi AP UNIT is a Wi-Fi AP unit from Inaba Denki Sangyo, a Japanese company. A cross-site request forgery vulnerability exists in Inaba Denki Sangyo Wi-Fi AP UNIT v2.0.03P and earlier versions, which stems from a cross-site request forgery that could lead to a user...