CVE-2025-20682

The CVE-2025-20682 entry refers to an out-of-bounds write in the wlan AP driver caused by an incorrect bounds check. Affects MediaTek-based wlan AP components; impact is local privilege escalation with high confidentiality, integrity, and availability implications. Exploitation is described as no...

PT-2025-28313 · Unknown · Wlan Access Point Controller

Name of the Vulnerable Software and Affected Versions: WLAN Access Point Controller affected versions not specified Description: The issue is related to a possible out-of-bounds write in the WLAN Access Point Controller driver due to an incorrect bounds check. This could lead to remote code...

PT-2025-28318 · Unknown · Wlan Access Point Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a possible out of bounds read in the WLAN access point driver due to an incorrect bounds check. This could lead to local information disclosure, requiring user...

PT-2025-28317 · Unknown · Wlan Access Point Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is a possible out of bounds read in the WLAN access point driver due to an incorrect bounds check. This could lead to local information disclosure, requiring user execution privileges...

PT-2025-28319

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a possible out of bounds read in the WLAN access point driver due to an incorrect bounds check. This could lead to local information disclosure, requiring user...

PT-2025-28311 · Unknown · Wlan Access Point Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds write exists in the WLAN access point driver due to an incorrect bounds check. This issue could lead to a local escalation of privilege, requiring user execution...

PT-2025-28316 · Unknown · Wlan Access Point Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is a possible out-of-bounds read in the WLAN access point driver due to an incorrect bounds check. This could lead to local information disclosure, requiring user execution privileges...

TOTOLINK CA300-PoE ap.so file command injection vulnerability

TOTOLINK CA300-PoE is a wireless access point from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK CA300-PoE ap.so file, which originates from the parameter hour/minute in the file ap.so failing to correctly filter constructed command special characters...

NETGEAR EX3700 Stack Buffer Overflow Vulnerability

The NETGEAR EX3700 is a dual-band wireless accessor with a maximum transmission rate of 750Mbps. The NETGEAR EX3700 suffers from a stack buffer overflow vulnerability that stems from the lack of proper validation of user-supplied data in the function sub41619C in file/mtd, which can be exploited ...

CVE-2025-39240

Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command...

CVE-2025-39240

Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command...

CVE-2025-39240

CVE-2025-39240 affects Hikvision Wireless Access Point products. The vulnerability stems from insufficient input validation, enabling authenticated remote command execution when an attacker with valid credentials sends crafted packets containing malicious commands. Reported impact is arbitrary co...

CVE-2025-39240

Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command...

CVE-2025-39240

Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command...

Hikvision Wireless Access Point 安全漏洞

Hikvision Wireless Access Point is a wireless access point device from Hikvision China. A security vulnerability exists in Hikvision Wireless Access Point that stems from insufficient input validation and could lead to authenticated remote command execution...

PT-2025-25398 · Hikvision · Hikvision Wireless Access Point

Name of the Vulnerable Software and Affected Versions: Hikvision Wireless Access Point affected versions not specified Description: The issue is related to insufficient input validation, allowing authenticated remote command execution. Attackers with valid credentials can exploit this by sending...

The vulnerability of the Wi-Fi AP driver’s microprogramming software, enabling attackers to enhance their privileges.

The vulnerability of the Wi-Fi AP driver software developed by MediaTek is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow remote attackers to gain increased privileges...

CVE-2025-20674

In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303...

CVE-2025-20674

In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303...

The vulnerability of the CLI interface of HPE Aruba Networking Access Point software allows a perpetrator to execute arbitrary code.

The vulnerability of the CLI interface of HPE Aruba Networking Access Point software relates to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted packets to the UDP port...