CVE-2021-1551

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a attacker to obtain confidential information or execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to the lack of measures taken to neutralize special elements used in the operating system teams. Exploiting this vulnerability can allow a remote attacker to obtain...

PT-2021-8256 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a deadlock in AP/VLAN handling. When AP VLAN interfaces are up and the AP interface they belong to is closed, a deadlock occurs because the wiphy mutex is held...

CVE-2020-24586

A flaw was found in the Linux kernels implementation of wifi fragmentation handling. An attacker with the ability to transmit within the wireless transmission range of an access point can abuse a flaw where previous contents of wifi fragments can be unintentionally transmitted to another device...

CVE-2020-26139

An issue was discovered in the kernel in NetBSD 7.1. An Access Point AP forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients an...

DEBIAN-CVE-2020-26139

An issue was discovered in the kernel in NetBSD 7.1. An Access Point AP forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients an...

CVE-2020-26139

An issue was discovered in the kernel in NetBSD 7.1. An Access Point AP forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients an...

CVE-2020-26139

An issue was discovered in the kernel in NetBSD 7.1. An Access Point AP forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients an...

Weak Password Vulnerability in Ruckus Wireless Ruckus 7372

The Ruckus 7372 is a wireless access point product from Ruckus Wireless. The Ruckus Wireless Ruckus 7372 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in Ruckus Wireless Ruckus T504

The Ruckus T504 is a wireless access point from Ruckus Wireless. The Ruckus Wireless Ruckus T504 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in Ruckus Wireless Ruckus R500

The Ruckus R500 is a wireless access point product from Ruckus Wireless. The Ruckus Wireless Ruckus R500 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

CVE-2021-1400

CVE-2021-1400 affects Cisco Small Business 100, 300, and 500 Series Wireless Access Points (WAPs). The Cisco advisory and related records describe multiple vulnerabilities in the web-based management interface, including improper access control (CWE-284) that can allow an authenticated attacker t...

Shenzhen Skyworth RN510 Information Disclosure

Overview ======== Title:- UnAuthenticated Sensitive information Discloser in RN510 Mesh Extender. CVE-ID :- CVE-2021-25326 Author: Kaustubh G. Padwad Vendor: Shenzhen Skyworth Digital Technology Company Ltd.http://www.skyworthdigital.com/products Products: 1. RN510 with firmware V.3.1.0.4 Tested...

Shenzhen Skyworth RN510 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities

Overview ======== Title:- Authenticated XSRF in RN510 Mesh Extender. CVE-ID :- CVE-2021-25327 Author: Kaustubh G. Padwad Vendor: Shenzhen Skyworth Digital Technology Company Ltd.http://www.skyworthdigital.com/products Products: 1. RN510 with firmware V.3.1.0.4 Tested and verified Potential 2.RN62...

CVE-2021-27249

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of CGI scripts. The issue result...

CVE-2021-27248

CVE-2021-27248 affects D-Link DAP-2020 v1.01rc001. The vulnerability is a stack-based buffer overflow in the webproc CGI handling of the getpage parameter, where the length of user data is not properly validated before copying to a fixed-length stack buffer. This allows network-adjacent, unauthen...

Google Chrome 安全漏洞

Chrome is a web browsing tool developed by Google. A security vulnerability exists in versions prior to Google Chrome 90.0.4430.72. A remote attacker may compromise the security of a WiFi connection via a malicious WAP...

Skyworth Digital Technology RN510 Buffer Overflow Vulnerability

The RN510 is a dual-band wireless AC2100 access point from Skyworth Digital Technology. A buffer overflow vulnerability exists in /cgi-bin/app-staticIP.asp in the Skyworth Digital Technology RN510 version V.3.1.0.4. An attacker could exploit this vulnerability by sending a specially crafted reque...

Skyworth Digital Technology RN510 Cross-Site Request Forgery Vulnerability

The RN510 is a dual-band wireless AC2100 access point from Skyworth Digital Technology. A cross-site request forgery vulnerability exists in /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp in the Skyworth Digital Technology RN510 version V.3.1.0.4. No detailed vulnerability details are...

Weak password vulnerability in Samsung WLAN AP (CNVD-2021-30051)

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. A command execution vulnerability...