1030 matches found
PT-2023-2191 · Cisco · Cisco Catalyst 9100 +2
Name of the Vulnerable Software and Affected Versions: Cisco Business 150 versions affected versions not specified Cisco Business 151 Mesh Extenders versions affected versions not specified Cisco Catalyst 9100 versions affected versions not specified Description: The issue is related to a buffer...
SUSE CVE-2017-13079
Wi-Fi Protected Access WPA and WPA2 that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key IGTK during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients...
The vulnerability of the var sys_Token component in the wireless access point software of D-Link DAP-2020 and DAP-1360 allows a hacker to execute arbitrary code.
The vulnerability of the var sysToken component in the D-Link DAP-2020 and DAP-1360 wireless access points is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of D-Link DAP-2020 and DAP-1360 wireless access points, due to the use of rigidly encrypted login credentials, allows attackers to circumvent security restrictions.
The vulnerability of D-Link DAP-2020 and DAP-1360 wireless access points lies in the use of strictly encrypted login credentials. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
The vulnerability relates to the implementation of the Control and Provisioning of Wireless Access Points protocol (CAPWAP) in Cisco IOS XE operating systems, Catalyst access points, and Cisco Catalyst 9000 series wireless network controllers. It stems from insufficient resource management during their existence, allowing attackers to trigger service interruptions.
The vulnerability of the CAPWAP protocol implementation for Cisco IOS XE operating systems, Catalyst access points, and Cisco Catalyst 9000 series wireless network controllers is related to insufficient resource management during their existence. Exploiting this vulnerability could allow a...
The vulnerability in the implementation of the Simple Network Management Protocol (SNMP) on Cisco IOS XE Catalyst access points and Cisco Catalyst 9000 wireless network controllers, related to errors in request processing, allows a perpetrator to disclose protected information.
The vulnerability of the Simple Network Management Protocol SNMP implementation on Cisco IOS XE Catalyst access points and Cisco Catalyst 9000 wireless network controllers is related to errors in handling requests. Exploiting this vulnerability can allow a malicious actor to disclose protected...
The vulnerability of the microprogramming software for industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software for wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C series, is related to the execution of operations outside the buffer in memory. This vulnerability allows a malicious actor to cause service failures.
The vulnerability of the microprogramming software in industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software in wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C...
The vulnerability of the microprogramming software for industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software for wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C series, is related to inconsistencies in response to incoming requests. This vulnerability allows an intruder to gain unauthorized access to protected information.
The vulnerability of the microprogramming software used in industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software used in wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and...
The vulnerability of the microprogramming software used in industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software used in wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C models, is related to the unencrypted storage of critical information. This vulnerability allows attackers to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the microprogramming software used in industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software used in wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and...
The vulnerability of the microprogramming software used in industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software used in wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C models, stems from insufficient authentication attempts limits. This vulnerability allows attackers to execute a brute-force attack.
The vulnerability of the microprogramming software used in industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software used in wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and...
Aruba Networks ArubaOS Input Validation Error Vulnerability
Aruba Networks ArubaOS, an operating system for Aruba Mobility-Defined Networks including mobile controllers and mobile access switches from Aruba Networks, is vulnerable to an input validation error. The vulnerability can be exploited to interrupt the normal operation of the affected access poin...
The vulnerability of the microprogramming software used in industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software used in wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C models, is related to the unencrypted storage of critical information. This vulnerability allows attackers to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the microprogramming software used in industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software used in wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and...
The vulnerability of the web interface of microprogramming software for wireless access points in Moxa’s industrial systems, such as Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C, as well as the microprogramming software for wireless access points like Moxa TAP-323 and Moxa TAP-213, allows a hacker to perform cross-site scripting attacks.
The vulnerability of the web interface of Moxa wireless access points for industrial systems, namely Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C, as well as the wireless access points with Moxa TAP-323 and Moxa TAP-213, stems from the lack of protective measures for the web page structure...
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.
...
UBUNTU-CVE-2022-42719
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers able to inject WLAN frames to crash the kernel and potentially execute code...
CVE-2022-20855
A vulnerability in the self-healing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points could allow an authenticated, local attacker to escape the restricted controller shell and execute arbitrary commands on the underlying operating system of the...
CVE-2022-20728
A vulnerability in the client forwarding code of multiple Cisco Access Points APs could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards...
CVE-2022-20728
A vulnerability in the client forwarding code of multiple Cisco Access Points APs could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards...
Input validation
A vulnerability in the self-healing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points could allow an authenticated, local attacker to escape the restricted controller shell and execute arbitrary commands on the underlying operating system of the...
Design/Logic Flaw
A vulnerability in the client forwarding code of multiple Cisco Access Points APs could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards...