PT-2018-17468

Name of the Vulnerable Software and Affected Versions Foxconn femtocell FEMTO AP-FC4064-T version AP GT B38 5.8.3lb15-W47 LTE Build 15 Description A default weak password in a privileged account can be exploited to enable the TELNET service through the web interface, allowing root login without a...

PT-2018-17467

Name of the Vulnerable Software and Affected Versions Foxconn femtocell FEMTO AP-FC4064-T version AP GT B38 5.8.3lb15-W47 LTE Build 15 Description The issue allows an attacker to gain root access to the system via UART pins without any restrictions, leading to full system compromise and potential...

CVE-2018-6311: Undefined Security Weakness

One can gain root access on the Foxconn femtocell FEMTO AP-FC4064-T version APGTB385.8.3lb15-W47 LTE Build 15 via UART pins without any restrictions, which leads to full system compromise and disclosure of user communications...

CVE-2018-6312: Weak Password Requirements

A privileged account with a weak default password on the Foxconn femtocell FEMTO AP-FC4064-T version APGTB385.8.3lb15-W47 LTE Build 15 can be used to turn on the TELNET service via the web interface, which allows root login without any password. This vulnerability will lead to full system...

Targeted Evil Twin Wireless Access Point Attack Toolkit: The Rogue Toolkit

The Rogue Toolkit is an extensible toolkit aimed at providing penetration testers an easy-to-use platform to deploy software-defined Access Points AP for the purpose of conducting penetration testing and red team engagements. By using Rogue, penetration testers can easily perform targeted evil tw...

CVE-2017-6229

The CVE-2017-6229 issue affects Ruckus Networks devices: Unleashed AP firmware prior to 200.6.10.1.x and ZoneDirector firmware prior to 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, or 10.0.1.0.x. The root cause is an authenticated root command injection in the CLI that allows an authenticated ...

CVE-2017-6229: Improper Neutralization of Special Elements used in an OS Command

Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute...

PT-2018-8324

Name of the Vulnerable Software and Affected Versions Ruckus Networks Unleashed AP firmware versions prior to 200.6.10.1.x Ruckus Networks Zone Director firmware versions 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x Description The issue concerns an authenticated Root Command...

Extreme Networks ExtremeWireless WiNG stack overflow vulnerability (CNVD-2018-03317)

Extreme Networks ExtremeWireless WiNG is a wireless access solution from Extreme Networks, Inc. The WiNG Access Point AP is one of the wireless access point devices. A stack overflow vulnerability exists in the RIM Radio Interface Module process of the WiNG AP in Extreme Networks ExtremeWireless...

The vulnerability of the ap_limit_section function in the Apache HTTP Server’s httpd daemon allows a hacker to gain access to data from the process’s memory.

The vulnerability of the aplimitsection function in the Apache HTTP Server’s httpd daemon is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to access data from the process’s memory through a specially crafted HTTP request...

HikVision Wi-Fi IP Camera Wireless Access Point State

Hikvision Wi-Fi IP Cameras associate to a default unencrypted rogue SSIDs in a wired configuration Full disclosure Nov 27, 2017 Synopsis: --- HikVision Wi-Fi IP cameras come with a default SSID "davinci", with a setting of no WiFi encryption or authentication. Depending on the firmware version,...

httpd: ap_find_token() buffer overread

A buffer over-read flaw was found in the httpd's apfindtoken function. A remote attacker could use this flaw to cause httpd child process to crash via a specially crafted HTTP request...

CVE-2017-11177

TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory...

Directory traversal

TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory...

CVE-2017-11177

TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory...

CVE-2017-11177

TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory...

CVE-2017-11177

The CVE-2017-11177 issue affects TRITON AP-EMAIL: Websense TRITON AP-EMAIL 8.2 IB prior to version 8.2 suffers from improper file-access restriction in an unspecified directory. Affected component is the file access mechanism that allows unauthorized access to files, described across multiple sou...

PT-2017-11798

Name of the Vulnerable Software and Affected Versions TRITON AP-EMAIL version 8.2 before 8.2 IB Description The issue is related to improper restriction of file access in an unspecified directory. Recommendations For TRITON AP-EMAIL version 8.2 before 8.2 IB, update to version 8.2 IB or later to...

CVE-2017-11177: Improper Input Validation

TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory...

CVE-2017-12273

A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency RF adjacent attacker to cause the Access Point AP to reload, resulting in a denial of service DoS condition. The...