DEBIAN-CVE-2024-49937

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Set correct chandef when starting CAC When starting CAC in a mode other than AP mode, it return a "WARNING: CPU: 0 PID: 63 at cfg80211chandefdfsusable+0x20/0xaf cfg80211" caused by the chandef.chan being null at t...

PT-2024-30616 · Elecom · Elecom Wab-I1750-Ps +1

Name of the Vulnerable Software and Affected Versions: ELECOM WAB-I1750-PS version not specified ELECOM WAB-S1167-PS version not specified Description: A stack-based buffer overflow issue exists in ELECOM wireless access points. This issue can be triggered by processing a specially crafted HTTP...

CVE-2024-35519

Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operatingmode.cgi via the apmode parameter...

NETGEAR EX6120、EX6100和EX3700 安全漏洞

NETGEAR EX3700 and others are products of NETGEAR Corporation USA.NETGEAR EX3700 is a wireless network signal extender.NETGEAR EX6100 is a WiFi range extender.NETGEAR EX6120 is a wireless extender. A security vulnerability exists in the Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and...

CVE-2024-46040

IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode leads the attacker to replay the Wi-Fi packets and forcefully turn off the access point after t...

IoT Haat Smart Plug IH-IN-16A-S 安全漏洞

IoT Haat Smart Plug IH-IN-16A-S is a smart plug from IoT Haat. A security vulnerability exists in IoT Haat Smart Plug IH-IN-16A-S version v5.16.1, which stems from the presence of a session expiration insufficiency issue and lack of validation of authentication tokens, which could lead to an...

CVE-2024-46040

IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode leads the attacker to replay the Wi-Fi packets and forcefully turn off the access point after t...

CVE-2024-46040

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is affected by Insufficient Session Expiration due to lack of validation of the authentication token during the Access Point Pairing mode. This enables an attacker to replay Wi-Fi provisioning packets and forcibly turn off the access point after the token e...

CVE-2024-46040

IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode leads the attacker to replay the Wi-Fi packets and forcefully turn off the access point after t...

The vulnerability of the fromVirtualSet function in the /goform/setPortForward file of the Tenda wireless access point’s microprogramming software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromVirtualSet function in the /goform/setPortForward function of the Tenda wireless access point’s microprogramming system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to...

The vulnerability of the `fromSafeSetMacFilter` function in the `/goform/setMacFilterList` microprogramming system of the Tenda wireless access point allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSafeSetMacFilter function in the /goform/setMacFilterList microprogramming system for the wireless access point Tenda is related to the operation of the function beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary co...

The vulnerability of the formSetCfm function in the /goform/setcfm microprogramming software for the Tenda wireless access point allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetCfm function in the /goform/setcfm microprogramming system for the wireless access point Tenda is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause...

The vulnerability of the `fromSafeSetMacFilter` function in the `/goform/setMacFilterList` microprogramming system of the Tenda wireless access point allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSafeSetMacFilter function in the /goform/setMacFilterList microprogramming system for the wireless access point Tenda is related to the operation of the function beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary co...

The vulnerability of the fromDhcpSetSer function in the /goform/DhcpSetSer file of the Tenda wireless access point’s microprogramming software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromDhcpSetSer function in the /goform/DhcpSetSer microprogramming system for the Tenda wireless access point is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or...

CVE-2024-42507

Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's Access Point management protocol UDP port 8211. Successful exploitation of these vulnerabilities results in the...

CVE-2024-42506 Unauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI Protocol

Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's Access Point management protocol UDP port 8211. Successful exploitation of these vulnerabilities results in the...

CVE-2024-42506

CVE-2024-42506 affects Aruba Networks ArubaOS: command-injection in the underlying CLI service reachable via PAPI UDP port 8211 can allow unauthenticated remote code execution as a privileged OS user. Affected Aruba AP management stack and CLI service are exploitable over the network with low com...

CVE-2024-42505

CVE-2024-42505 affects Aruba Networks ArubaOS CLI service used by the PAPI protocol. The issue is a command injection in the CLI service that can be triggered by sending specially crafted packets to UDP port 8211, allowing unauthenticated remote code execution with privileges on the underlying OS...

CVE-2024-46755

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Do not return unused priv in mwifiexgetprivbyid mwifiexgetprivbyid returns the priv pointer corresponding to the bssnum and bsstype, but without checking if the priv is actually currently in use. Unused priv pointe...

AZL-49684 CVE-2024-46755 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Do not return unused priv in mwifiexgetprivbyid mwifiexgetprivbyid returns the priv pointer corresponding to the bssnum and bsstype, but without checking if the priv is actually currently in use. Unused priv pointe...