Radius Manager 3.8.0 - Multiple Cross-Site Scripting Vulnerabilities

Radius Manager 3.8.0 - Multiple Cross-Site Scripting Vulnerabilities Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Radius Manager Multiple Cross Site Scripting Issues CVE-2010-4275 INTRODUCTION Radius Manager is a centralized way for...

HP ProCurve access points / access controllers / mobility controllers privilege escalation

No description provided...

[security bulletin] HPSBGN02589 SSRT100296 rev.1 - HP ProCurve Access Points, Access Controllers, and Mobility Controllers, Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02544568 Version: 1 HPSBGN02589 SSRT100296 rev.1 - HP ProCurve Access Points, Access Controllers, and Mobility Controllers, Privilege Escalation NOTICE: The information in this Security Bulletin...

CVE-2010-3287

Unspecified vulnerability on HP ProCurve Access Points, Access Controllers, and Mobility Controllers with software 5.1.x through 5.1.9, 5.2.x through 5.2.7, 5.3.x through 5.3.5, and 5.4.x through 5.4.0 allows remote attackers to execute arbitrary code via unknown vectors...

Code injection

Unspecified vulnerability on HP ProCurve Access Points, Access Controllers, and Mobility Controllers with software 5.1.x through 5.1.9, 5.2.x through 5.2.7, 5.3.x through 5.3.5, and 5.4.x through 5.4.0 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2010-3287

CVE-2010-3287 affects HP ProCurve hardware (Access Points, Access Controllers, Mobility Controllers) running software versions 5.1.x up to 5.1.9, 5.2.x up to 5.2.7, 5.3.x up to 5.3.5, and 5.4.x up to 5.4.0. The vulnerability allows remote attackers to execute arbitrary code via unknown vectors. H...

CVE-2010-3287

Unspecified vulnerability on HP ProCurve Access Points, Access Controllers, and Mobility Controllers with software 5.1.x through 5.1.9, 5.2.x through 5.2.7, 5.3.x through 5.3.5, and 5.4.x through 5.4.0 allows remote attackers to execute arbitrary code via unknown vectors...

Access Point Web-browser Interface Vulnerability

The Cisco web-browser interface for Cisco access points and Cisco 3200 Series Wireless Mobile Interface Card WMIC, contains a vulnerability that could, under certain circumstances, remove the default security configuration from the managed access point and allow administrative access without...

Cisco Security Advisory: SQL Injection Vulnerability in Cisco Wireless Control System

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: SQL Injection Vulnerability in Cisco Wireless Control System Advisory ID: cisco-sa-20100811-wcs Revision 1.0 For Public Release 2010 August 11 1600 UTC GMT +---------------------------------------------------------------------...

IS-2010-003 - Linksys WAP54Gv3 debug.cgi Cross-Site Scripting

Security Advisory IS-2010-003 - Linksys WAP54Gv3 debug.cgi Cross-Site Scripting Advisory Information -------------------- Published dd/mm/yy: 23/06/2010 Updated dd/mm/yy: 23/06/2010 Manufacturer: Linksys Model: WAP54G Hardware version: v3.x Firmware version: ver.3.05.03 Europe ver.3.04.03 US...

CVE-2009-0052

The Atheros wireless driver, as used in Netgear WNDAP330 Wi-Fi access point with firmware 2.1.11 and other versions before 3.0.3 on the Atheros AR9160-BC1A chipset, and other products, allows remote authenticated users to cause a denial of service device reboot or hang and possibly execute...

Atheros based wireless access points DoS

Memory corruption on frame parsing...

Atheros Driver Reserved Frame Vulnerability

Title: ------ Atheros Driver Reserved Frame Vulnerability Summary: -------- The wireless driver in some Wi-Fi access points such as the ATHEROS-based Netgear WNDAP330 do not correctly parse malformed reserved management frames. Assigned CVE: ------------- CVE-2009-0052 Details: -------- The bug c...

Marvell chipset wireless access points buffer overflow

Buffer overflow on association request processing...

Marvell Driver Multiple Information Element Overflows

Title: ------ Marvell Driver Multiple Information Element Overflows Summary: -------- The wireless drivers in some Wi-Fi access points such as the MARVELL-based Linksys WAP4400N do not correctly parse information elements included in association requests. Most information elements are used by the...

Aruba wireless access points DoS

Crash on malformed 802.11 association request frame...

CVE-2008-6824

The management interface on the A-LINK WL54AP3 and WL54AP2 access points has a blank default password for the admin account, which makes it easier for remote attackers to obtain access...

CVE-2008-6823

Affected devices: A-LINK WL54AP3 and WL54AP2 access points running firmware before 1.4.2-eng1. Issue: multiple CSRF vulnerabilities in the management interface allow remote attackers to hijack administrator authentication by crafting requests to goform/formWanTcpipSetup (network configuration) or...

CVE-2008-6824

CVE-2008-6824 affects the A-LINK WL54AP3 and WL54AP2 access points where the management interface uses a blank default admin password. This allows remote attackers to obtain full access via a network attack. The NVD entry documents a base score of 10.0 (HIGH) with network, low complexity, and no ...

Marvell Driver Malformed Association Request Vulnerability

Title: ------ Marvell Driver Malformed Association Request Vulnerability Summary: -------- The wireless drivers in some Wi-Fi access points such as the MARVELL-based Linksys WAP4400N do not correctly parse some malformed 802.11 frames. Assigned CVE: ------------- CVE-2008-4441 Details: -------- T...