Design/Logic Flaw

A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain confidential information from an affected device. This vulnerability is due to an unrestricted Trivial File Transfer Protocol TFTP...

CVE-2021-1449

Cisco CVE-2021-1449 affects Cisco Access Points Software. A vulnerability in the boot logic allows an authenticated, local attacker to execute unsigned code at boot time by exploiting an improper startup check, requiring access to the device devshell. This could bypass software image verification...

CVE-2021-1449 Cisco Access Point Software Arbitrary Code Execution Vulnerability

A vulnerability in the boot logic of Cisco Access Points Software could allow an authenticated, local attacker to execute unsigned code at boot time. The vulnerability is due to an improper check that is performed by the area of code that manages system startup processes. An attacker could exploi...

CVE-2021-1439

CVE-2021-1439 affects Cisco Aironet Series Access Points Software. The mDNS gateway suffers from insufficient input validation, enabling an unauthenticated adjacent attacker to reboot the AP and cause a DoS via crafted mDNS packets over FlexConnect local switching or a configured mDNS VLAN. Impac...

CVE-2021-1439 Cisco Aironet Access Points FlexConnect Multicast DNS Denial of Service Vulnerability

A vulnerability in the multicast DNS mDNS gateway feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of incoming mDNS...

CVE-2021-1439 Cisco Aironet Access Points FlexConnect Multicast DNS Denial of Service Vulnerability

A vulnerability in the multicast DNS mDNS gateway feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of incoming mDNS...

CVE-2021-1437 Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure Vulnerability

A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain confidential information from an affected device. This vulnerability is due to an unrestricted Trivial File Transfer Protocol TFTP...

CVE-2021-1437

CVE-2021-1437 concerns the Cisco Aironet Series Access Points’ FlexConnect Upgrade feature. The root cause is an unrestricted TFTP configuration that enables an unauthenticated, remote attacker to disclose confidential information by requesting arbitrary files from the device filesystem. Affected...

CVE-2021-1423

A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points AP could allow an authenticated, local attacker to overwrite files in the flash memory of the device. This vulnerability is due to insufficient input validation for a specific command. An attacker could exploit...

Cisco Aironet Access Points Arbitrary File Overwrite Vulnerability

A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points AP could allow an authenticated, local attacker to overwrite files in the flash memory of the device. This vulnerability is due to insufficient input validation for a specific command. An attacker could exploit...

Cisco Access Point Software Arbitrary Code Execution Vulnerability

A vulnerability in the boot logic of Cisco Access Points Software could allow an authenticated, local attacker to execute unsigned code at boot time. The vulnerability is due to an improper check that is performed by the area of code that manages system startup processes. An attacker could exploi...

Cisco Aironet Access Points 安全漏洞

Cisco Aironet Access Points aps is a network access point device from Cisco. A security vulnerability exists in Cisco Aironet Access Points that stems from insufficient validation of input for a specific command. An attacker could exploit the vulnerability to overwrite files in the device's flash...

Cisco Aironet Series Access Points Software 安全漏洞

Cisco Aironet Series Access Points Software is a suite of software from Cisco that is used in Aironet wireless access point devices. A security vulnerability exists in the Cisco Aironet Series Access Points Software, which arises from an unrestricted TFTP configuration, and can be exploited by an...

TP-Link Devices - (setDefaultHostname) Stored Cross-site Scripting Vulnerability

Multiple TP-Link devices suffer from an unauthenticated persistent cross site scripting vulnerability. Affected models include TD-W9977, TL-WA801ND, TL-WA801N, TL-WR802N, and Archer-C3150. ============================================================== Unauthenticated Stored Cross-site Scripting i...

PT-2021-2451 · Cisco · Cisco Aironet Series Access Points

Name of the Vulnerable Software and Affected Versions: Cisco Aironet Series Access Points Software affected versions not specified Description: The issue is related to the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software, which is vulnerable due to an unrestricted Trivia...

Cisco Access Point 安全漏洞

Cisco Access Point is a network access point device from Cisco, Inc. It provides high-density wireless connectivity for small offices. A security vulnerability exists in Cisco Access Points Software, which can be exploited by an attacker to execute unsigned code at boot time...

HPESBNW04111 rev.2 - Aruba Instant Access Points, ArubaOS Mobility Conductor, Mobility Controllers, Access Points when Managed by Mobility Controllers, and SD-WAN Gateways, SAD DNS Side Channel Attack Leading to Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 7000 Series Mobility Controllers 6.4.4.24, 6.5.4.18, 8.3.0.14, 8.5.0.11, 8.6.0.7, 8.7.1.1 and below Aruba 7200 Series Mobility Controllers 6.4.4.24, 6.5.4.18, 8.3.0.1...

D-Link DAP-2020 webproc getpage Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of CGI scripts. When parsing the getpage...

Command Execution Vulnerability in Samsung Router WLAN APs

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. A command execution vulnerability...

Samsung router WLAN APs suffer from arbitrary file read vulnerability

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. An arbitrary file read vulnerability...