CVE-2024-21456

Information Disclosure while parsing beacon frame in STA...

TRENDnet TEW-814DAP Stack Buffer Overflow Vulnerability (CNVD-2025-17862)

The TRENDnet TEW-814DAP is a wireless access point from TRENDnet. The TRENDnet TEW-814DAP suffers from a stack buffer overflow vulnerability that stems from the submit-url parameter at /formSysLog failing to properly validate the length of the input data, which could be exploited by an attacker t...

Exploit for CVE-2023-33105

CVE-2023-33105: Transient DOS in WLAN Host and Firmware Ov...

kernel: wifi: iwlwifi: mvm: fix a crash when we run out of stations

A vulnerability was found in the Linux kernel's iwlwifi driver, which can result in a crash due to improper handling of station data STA when the system runs out of available stations in the firmware. This could lead to a denial of service Dos which crashes the Access Point AP...

kernel: wifi: iwlwifi: mvm: fix a crash when we run out of stations

A vulnerability was found in the Linux kernel's iwlwifi driver, which can result in a crash due to improper handling of station data STA when the system runs out of available stations in the firmware. This could lead to a denial of service Dos which crashes the Access Point AP...

ORing IAP-420 跨站脚本漏洞

The ORing Net IAP-420+ is a wireless access point from China Power ORing. A security vulnerability exists in ORing IAP-420 version 2.01e and prior versions, which stems from a lack of input validation and operating system command integration for input in the web interface, resulting in command...

ORing IAP-420 跨站脚本漏洞

The ORing Net IAP-420+ is a wireless access point from China Power ORing. A cross-site scripting vulnerability exists in the ORing IAP-420 2.01e and prior versions, which stems from a lack of input validation in the web interface, resulting in cross-site scripting...

Arris VAP2500 命令注入漏洞

The Arris VAP2500 is a wireless video access point device from Arris USA. A command injection vulnerability exists in the Arris VAP2500 version 08.50, which stems from the fact that manipulation of the parameter customerinfo in the file /diags.php can result in command injection...

Arris VAP2500 安全漏洞

The Arris VAP2500 is a wireless video access point device from Arris USA. A security vulnerability exists in the Arris VAP2500 version 08.50, which stems from an action on the parameter cmbheader/txtcommand in the file /toolscommand.php that can result in command injection...

UBUNTU-CVE-2021-47225

In the Linux kernel, the following vulnerability has been resolved: mac80211: fix deadlock in AP/VLAN handling Syzbot reports that when you have APVLAN interfaces that are up and close the AP interface they belong to, we get a deadlock. No surprise - since we devclose them with the wiphy mutex...

SUSE CVE-2024-27434

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK The firmware doesn't need the MFP flag for the GTK, it can even make the firmware crash. in case the AP is configured with: group cipher TKIP and MFPC. We would send the GTK...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a deadlock issue in AP/VLAN handling...

DEBIAN-CVE-2024-35838

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential sta-link leak When a station is allocated, links are added but not set to valid yet e.g. during connection to an AP MLD, we might remove the station without ever marking links valid, and leak them. F...

The vulnerability of the DDP microprogramming software-based wireless access point D-Link DAP-2622 allows a intruder to make unauthorized changes to the device’s configuration.

The vulnerability of the DDP microprogramming software-based wireless access point D-Link DAP-2622 lies in the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to remotely make unauthorized changes to device configurations...

The vulnerability of the DDP microprogramming software-based wireless access point D-Link DAP-2622 allows a intruder to execute arbitrary code.

The vulnerability of the DDP microprogramming software-based wireless access point D-Link DAP-2622 lies in buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2024-30772

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the Linux kernel's handling of wifi settings, specifically the configuration of AP channel widths. The AP channel width is meant for use with the normal 20/40/... MHz...

CVE-2024-31482

An unauthenticated Denial-of-Service DoS vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected Access Point...

CVE-2024-31482

An unauthenticated Denial-of-Service DoS vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected Access Point...

CVE-2024-31478

Multiple unauthenticated Denial-of-Service DoS vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilites result in the ability to interrupt the normal operation of the affected Access Point...

CVE-2024-31474

There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI Aruba's Access Point management protocol. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to...