Cross-Site Request Forgery Vulnerability in Multiple NETGEAR Products (CNVD-2020-28139)

The NETGEAR WAC505 and others are a wireless access point AP from NETGEAR. A cross-site request forgery vulnerability exists in multiple NETGEAR products, which stems from a WEB application that does not adequately validate that a request is coming from a trusted user, and can be exploited by an...

CVE-2018-21097

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before...

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-50924)

The NETGEAR WAC505 and others are a wireless access point AP from NETGEAR. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting in a...

Cross-site Request Forgery Vulnerability in Multiple NETGEAR Products (CNVD-2021-59162)

NETGEAR WAC505 and others are a wireless access point AP from NETGEAR, Inc. A cross-site request forgery vulnerability exists in several NETGEAR products. The vulnerability stems from the WEB application not adequately verifying that the request is from a trusted user. An attacker could use the...

NETGEAR WAC510 Information Disclosure Vulnerability (CNVD-2020-27295)

The NETGEAR WAC510 is a wireless access point AP from NETGEAR. An information disclosure vulnerability exists in the NETGEAR WAC510 prior to version 5.0.10.2, which can be exploited by an attacker to obtain sensitive information...

kernel: triggering AP to send IAPP location updates for stations before the required authentication process has completed can lead to DoS

A flaw was found in the Linux kernel’s implementation of the WiFi station handoff code. An attacker within the radio range could use this flaw to deny a valid device from joining the access point...

Cisco Aironet Series Access Points Software Resource Management Error Vulnerability

Cisco Aironet Series Access Points Software is a set of software used in Aironet wireless access point devices from Cisco USA. A resource management error vulnerability exists in Cisco Aironet Series Access Points Software Cisco Aironet 1540 Series APs and Aironet 1800 Series APs, which arises fr...

NETGEAR WAC505 and WAC510 Input Validation Error Vulnerability

Both the NETGEAR WAC505 and NETGEAR WAC510 are a wireless access point AP from NETGEAR. An input validation error vulnerability exists in the NETGEAR WAC505 version prior to 8.0.6.4 and the WAC510 version prior to 8.0.6.4. No detailed vulnerability details are available at this time...

NETGEAR WAC505 and WAC510 Input Validation Error Vulnerability (CNVD-2020-27204)

Both the NETGEAR WAC505 and NETGEAR WAC510 are a wireless access point AP from NETGEAR. An input validation error vulnerability exists in the NETGEAR WAC505 prior to version 8.0.6.4 and the WAC510 prior to version 8.0.6.4, which can be exploited by an attacker to cause a denial of service...

Cisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service Vulnerability

A vulnerability in the 802.11 Generic Advertisement Service GAS frame processing function of Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS. The vulnerability is due to incomple...

D-Link DWL-2600 Authentication Remote Command Injection Vulnerability

The D-Link DWL-2600 is a wireless access point device. A security vulnerability exists in the D-Link DWL-2600. An attacker can exploit the vulnerability to inject arbitrary commands...

CVE-2019-10126

A flaw was found in the mwifiex implementation in the Linux kernel. A system connecting to wireless access point could be manipulated by an attacker with advanced permissions on the access point into localized memory corruption or possibly privilege escalation...

Updated APN database entry for Transatel (France, Worldwide) network for Windows 8.1 and Windows 8

Updated APN database entry for Transatel France, Worldwide network for Windows 8.1 and Windows 8 This article describes an update for the Transatel France, Worldwide network in Windows 8.1, Windows RT 8.1, Windows 8, and Windows RT. Before you apply this update, you should be aware that this upda...

CVE-2019-9499

A flaw was found in wpasupplicant. An attack using invalid scalar/element values is possible against the EAP-pwd peer since hostapd and wpasupplicant did not validate these values in the received EAP-pwd-Commit messages.When processing an EAP-pwd Commit frame, the server's scalar and element...

kernel: triggering AP to send IAPP location updates for stations before the required authentication process has completed can lead to DoS

A flaw was found in the Linux kernel’s implementation of the WiFi station handoff code. An attacker within the radio range could use this flaw to deny a valid device from joining the access point...

The vulnerability of the iw_webs component in the wireless access point software for Moxa AWK-3131A industrial systems allows a hacker to gain full control over the device.

The vulnerability of the iwwebs component in the wireless access point software for Moxa AWK-3131A industrial systems exists due to the lack of measures taken to neutralize the special elements used in the operating system. Exploiting this vulnerability can allow a malicious actor to gain full...

The vulnerability of the iw_webs component in the wireless access point software for Moxa AWK-3131A industrial systems allows a hacker to execute arbitrary code.

The vulnerability of the iwwebs component in the wireless access point software for Moxa AWK-3131A industrial systems is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability in the settings of the iw_webs account of the Moxa AWK-3131A wireless access point’s microprogramming software allows a hacker to reset the user’s password for that account.

The vulnerability in the settings of the iwwebs account of the Moxa AWK-3131A wireless access point software-related microprogramming system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to remotely reset the user account password...

The vulnerability of the microprogrammed wireless access point software for Moxa AWK-3131A industrial systems arises from errors in updating the “Device Name” (the hostname). This allows a hacker to gain full control over the device.

The wireless access point software for Moxa AWK-3131A industrial systems is vulnerable to errors when modifying the “Device Name” host name. Exploiting this vulnerability can allow a malicious actor to gain full control over the device remotely...

The vulnerability of the iwwebs microprogramming software component in the wireless access point for Moxa AWK-3131A industrial systems allows a intruder to gain full control over the device.

The vulnerability of the iwwebs microprogramming software for wireless access devices in Moxa AWK-3131A industrial systems exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability can allow a malicious actor t...