Lucene search
+L

2347 matches found

CNNVD
CNNVD
added 2025/01/14 12:0 a.m.8 views

H3C N12 V100R005 安全漏洞

The H3C N12 V100R005 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C N12 V100R005 version, which stems from a lack of length validation in the AP configuration function, which could allow an attacker to crash a remote target device or execute arbitrary...

9.8CVSS7.4AI score0.00534EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/06 12:0 a.m.7 views

PT-2025-2282 · Wlan Sta · Wlan Sta

Name of the Vulnerable Software and Affected Versions: WLAN STA affected versions not specified Description: In WLAN STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges neede...

7.5CVSS6.9AI score0.00323EPSS
SaveExploits0References8
OSV
OSV
added 2025/01/01 12:0 a.m.25 views

ASB-A-193031925

In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determine what site a device has connected to through a VPN due to side channel information disclosure. This could lead to remote information disclosure with no additional execution privileges needed. Use...

7.5CVSS6.6AI score0.00277EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/12/23 12:0 a.m.5 views

Sharp SH-52B、SH-54C和HR02 操作系统命令注入漏洞

The Sharp HR02 and others are products of Sharp Corporation Japan.The Sharp HR02 is a home router.The Sharp SH-52B is a wireless LAN connectivity station.The Sharp SH-54C is a wireless LAN connectivity station. The Sharp SH-52B, SH-54C, and HR02 are vulnerable to an operating system command...

7.2CVSS7.4AI score0.01211EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/19 8:15 a.m.28 views

CVE-2021-26093

An access of uninitialized pointer CWE-824 vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted CLI command...

7.3CVSS0.0016EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/19 8:15 a.m.7 views

CVE-2021-26093

An access of uninitialized pointer CWE-824 vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted CLI command...

6.5CVSS5.8AI score0.0016EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/19 7:47 a.m.27 views

CVE-2021-26093

An access of uninitialized pointer CWE-824 vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted CLI command...

7.3CVSS0.0016EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:0 a.m.7 views

The vulnerability of the microprogrammed software of the multifunctional wireless access points Advantech EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO lies in the ability to restore a modified backup configuration. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the microprogrammed software in multifunctional wireless access points of Advantech EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO lies in the ability to restore a modified backup configuration. Exploiting this vulnerability allows an attacker operating remotely to...

9CVSS5.5AI score0.00522EPSS
SaveExploits0References3Affected Software3
CNNVD
CNNVD
added 2024/12/10 12:0 a.m.8 views

ORing IAP-420 安全漏洞

The ORing IAP-420 is a wireless access point from ORing. A security vulnerability exists in the ORing IAP-420 version 2.01e and prior versions, which stems from a forced deadlock caused by improper password character length checking...

7.5CVSS6.8AI score0.00462EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/10 12:0 a.m.8 views

ORing IAP-420 安全漏洞

The ORing IAP-420 is a wireless access point from ORing. A security vulnerability exists in the ORing IAP-420 version 2.01e and prior versions, which stems from a lack of input validation in the web interface...

7.1CVSS6.7AI score0.00283EPSS
SaveExploits1References1
NVD
NVD
added 2024/12/04 2:15 a.m.32 views

CVE-2024-45205

An Improper Certificate Validation on the UniFi iOS App managing a standalone UniFi Access Point not using UniFi Network Application could allow a malicious actor with access to an adjacent network to take control of this UniFi Access Point. Affected Products: UniFi iOS App Version 10.17.7 and...

7.1CVSS0.00122EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/04 1:6 a.m.12 views

CVE-2024-45205

An Improper Certificate Validation on the UniFi iOS App managing a standalone UniFi Access Point not using UniFi Network Application could allow a malicious actor with access to an adjacent network to take control of this UniFi Access Point. Affected Products: UniFi iOS App Version 10.17.7 and...

7.1CVSS7.1AI score0.00122EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/04 1:6 a.m.101 views

CVE-2024-45205

The CVE-2024-45205 entry affects the UniFi iOS App (versions

7.1CVSS7.1AI score0.00122EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/04 1:6 a.m.20 views

CVE-2024-45205

An Improper Certificate Validation on the UniFi iOS App managing a standalone UniFi Access Point not using UniFi Network Application could allow a malicious actor with access to an adjacent network to take control of this UniFi Access Point. Affected Products: UniFi iOS App Version 10.17.7 and...

7.1CVSS0.00122EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/04 12:0 a.m.6 views

Ubiquiti UniFi iOS 安全漏洞

Ubiquiti UniFi iOS is a mobile operating system from Ubiquiti, Inc. A security vulnerability exists in Ubiquiti UniFi iOS version 10.17.7 and earlier, which stems from improper certificate validation and could allow a malicious actor with access to an adjacent network to take control of a UniFi...

7.1CVSS6.8AI score0.00122EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/29 12:0 a.m.10 views

The vulnerabilities of the microprogrammed software of the multifunctional wireless access points Advantech EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO allow attackers to execute arbitrary commands.

The vulnerability of the microprogrammed software in multifunctional wireless access points Advantech EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

7.8CVSS8.3AI score0.00453EPSS
SaveExploits0References2Affected Software3
Cvelist
Cvelist
added 2024/11/26 10:57 a.m.20 views

CVE-2024-50376

A CWE-79 "Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The vulnerability can be exploited remotely leveragi...

7.3CVSS0.00453EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/26 10:57 a.m.23 views

CVE-2024-50375

A CWE-306 "Missing Authentication for Critical Function" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The vulnerability can be exploited by remote unauthenticated users capable of interacting...

9.8CVSS7.3AI score0.01026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/26 10:55 a.m.19 views

CVE-2024-50370

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The vulnerability can be exploited by remote...

9.8CVSS0.01485EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/26 12:0 a.m.5 views

Advantech EKI-6333AC-2G和Advantech EKI-6333AC-2GD 安全漏洞

The Advantech EKI-6333AC-2G and Advantech EKI-6333AC-2GD are both industrial-grade wireless access points APs from Advantech, China. A security vulnerability exists in the Advantech EKI-6333AC-2G version 1.6.3 and earlier, EKI-6333AC-2GD version v1.6.3 and earlier, and EKI-6333AC-1GPO version...

9.8CVSS9.3AI score0.01485EPSS
SaveExploits0References1
Rows per page
Query Builder