CVE-2021-1437 Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure Vulnerability

A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain confidential information from an affected device. This vulnerability is due to an unrestricted Trivial File Transfer Protocol TFTP...

CVE-2021-1437

CVE-2021-1437 concerns the Cisco Aironet Series Access Points’ FlexConnect Upgrade feature. The root cause is an unrestricted TFTP configuration that enables an unauthenticated, remote attacker to disclose confidential information by requesting arbitrary files from the device filesystem. Affected...

Cisco Access Point Software Arbitrary Code Execution Vulnerability

A vulnerability in the boot logic of Cisco Access Points Software could allow an authenticated, local attacker to execute unsigned code at boot time. The vulnerability is due to an improper check that is performed by the area of code that manages system startup processes. An attacker could exploi...

Cisco Aironet Access Points Arbitrary File Overwrite Vulnerability

A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points AP could allow an authenticated, local attacker to overwrite files in the flash memory of the device. This vulnerability is due to insufficient input validation for a specific command. An attacker could exploit...

Cisco Aironet Series Access Points Software 安全漏洞

Cisco Aironet Series Access Points Software is a suite of software from Cisco that is used in Aironet wireless access point devices. A security vulnerability exists in the Cisco Aironet Series Access Points Software, which arises from an unrestricted TFTP configuration, and can be exploited by an...

Cisco Aironet Access Points 安全漏洞

Cisco Aironet Access Points aps is a network access point device from Cisco. A security vulnerability exists in Cisco Aironet Access Points that stems from insufficient validation of input for a specific command. An attacker could exploit the vulnerability to overwrite files in the device's flash...

TP-Link Devices - (setDefaultHostname) Stored Cross-site Scripting Vulnerability

Multiple TP-Link devices suffer from an unauthenticated persistent cross site scripting vulnerability. Affected models include TD-W9977, TL-WA801ND, TL-WA801N, TL-WR802N, and Archer-C3150. ============================================================== Unauthenticated Stored Cross-site Scripting i...

PT-2021-2451 · Cisco · Cisco Aironet Series Access Points

Name of the Vulnerable Software and Affected Versions: Cisco Aironet Series Access Points Software affected versions not specified Description: The issue is related to the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software, which is vulnerable due to an unrestricted Trivia...

Cisco Access Point 安全漏洞

Cisco Access Point is a network access point device from Cisco, Inc. It provides high-density wireless connectivity for small offices. A security vulnerability exists in Cisco Access Points Software, which can be exploited by an attacker to execute unsigned code at boot time...

HPESBNW04111 rev.2 - Aruba Instant Access Points, ArubaOS Mobility Conductor, Mobility Controllers, Access Points when Managed by Mobility Controllers, and SD-WAN Gateways, SAD DNS Side Channel Attack Leading to Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 7000 Series Mobility Controllers 6.4.4.24, 6.5.4.18, 8.3.0.14, 8.5.0.11, 8.6.0.7, 8.7.1.1 and below Aruba 7200 Series Mobility Controllers 6.4.4.24, 6.5.4.18, 8.3.0.1...

D-Link DAP-2020 webproc getpage Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of CGI scripts. When parsing the getpage...

Command Execution Vulnerability in Samsung Router WLAN APs

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. A command execution vulnerability...

Samsung router WLAN APs suffer from arbitrary file read vulnerability

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. An arbitrary file read vulnerability...

Weak password vulnerability in Samsung WLAN APs

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. A weak password vulnerability exists ...

Secret Backdoor Account Found in Several Zyxel Firewall, VPN Products

Zyxel has released a patch to address a critical vulnerability in its firmware concerning a hardcoded, undocumented secret account that could be abused by an attacker to login with administrative privileges and compromise its networking devices. The flaw, tracked as CVE-2020-29583 CVSS score 7.8,...

Security Advisory 0058

Security Advisory 0058 PDF Date: December 16th, 2020 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | December 16th, 2020 | Initial Release The CVE-ID tracking this issue is: CVE-2020-3702 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Description This advisory...

Weak password vulnerability in enterprise-class wireless APs from multiple vendors

An enterprise-class wireless AP is a network device. A weak password vulnerability exists in enterprise-class wireless APs from multiple vendors. An attacker can exploit the vulnerability to gain access to sensitive information by logging in with a weak password...

CVE-2020-24633

There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI Aruba Networks AP management protocol UDP port 8211 of access-points or controllers in Aruba 9000 Gateway; Aruba 7000 Series...

CVE-2020-24633

CVE-2020-24633: Multiple buffer-overflow flaws in Aruba’s PAPI over UDP port 8211 allow unauthenticated remote code execution on ArubaOS devices. Affected are Aruba 9000 Gateway, Aruba 7000 Series Mobility Controllers, and Aruba 7200 Series Mobility Controllers with versions: 2.1.0.1, 2.2.0.0 and...

CVE-2020-24634

The CVE-2020-24634 vulnerability affects ArubaOS/PAPI on Aruba AP management UDP port 8211 (Aruba 9000 Gateway, Aruba 7000 and 7200 series mobility controllers). A remote attacker can inject arbitrary commands by sending specially crafted packets. Affected versions include Aruba 9000 gateway, and...