Memory corruption

Memory corruption while sending SMS from AP firmware...

CVE-2023-33083

CVE-2023-33083 concerns memory corruption in the WLAN Host when processing RRM beacons on the AP, attributed to a classic buffer overflow (buffer copy without checking size). Reported across multiple sources tied to Qualcomm chipsets, with CVSSv3.1 base score 9.8 (CRITICAL), indicating network-le...

CVE-2023-33083 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Memory corruption in WLAN Host while processing RRM beacon on the AP...

CVE-2023-33024 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Radio Interface Layer

Memory corruption while sending SMS from AP firmware...

CVE-2023-33024

CVE-2023-33024 : The issue is a classic buffer overflow in the Radio Interface Layer, caused by a buffer copy without checking input size, leading to memory corruption when processing SMS from AP firmware. Connected documents corroborate memory corruption in AP firmware SMS handling; the CVE titl...

Zyxel Releases Patches to Fix 15 Flaws in NAS, Firewall, and AP Devices

Zyxel has released patches to address 15 security issues impacting network-attached storage NAS, firewall, and access point AP devices, including three critical flaws that could lead to authentication bypass and command injection. The three vulnerabilities are listed below - CVE-2023-35138 CVSS...

CommScope AP Solo, SmartZone, ZoneDirector Cross-Site Scripting Vulnerabilities

CommScope AP Solo is a series of wireless access points from CommScope, Inc. A security vulnerability exists in CommScope AP Solo, SmartZone, and ZoneDirector. An attacker could exploit the vulnerability to execute arbitrary scripts on a user's web browser...

JVN#45891816: Ruckus Access Point vulnerable to cross-site scripting

Ruckus Access Point provided by CommScope, Inc. contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who is logging in the product. Solution Update the Software Update the software to the latest version according to the...

CVE-2023-45624

An unauthenticated Denial-of-Service DoS vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point...

Denial of service

An unauthenticated Denial-of-Service DoS vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point...

CVE-2023-45624

CVE-2023-45624 is an unauthenticated Denial-of-Service affecting the soft ap daemon accessible via the PAPI protocol. The Red Hat cve entry confirms the DoS effect: exploitation interrupts normal operation of the affected access point. No concrete vulnerability details (vendor, product version, a...

CVE-2023-45624

An unauthenticated Denial-of-Service DoS vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point...

Aruba Networks ArubaOS and InstantOS Security Vulnerabilities

Aruba Networks ArubaOS and Aruba Networks InstantOS are both products of Aruba Networks, Inc. Aruba Networks InstantOS is an Arch Linux-based distribution. A security vulnerability exists in Aruba Networks ArubaOS and InstantOS due to an unauthenticated denial of service DoS vulnerability in the...

PT-2023-29604 · Unknown · Soft Ap Daemon

Name of the Vulnerable Software and Affected Versions: Soft AP daemon affected versions not specified Description: An unauthenticated Denial-of-Service DoS issue exists in the soft ap daemon, which is accessed via the PAPI protocol. This allows for the interruption of normal operation of the...

kernel: s390/vfio-ap: fix memory leak in vfio_ap device driver

In the s390 VFIO-AP driver, memory allocated for the vfiomatrixdev structure is never released during device cleanup. The release callback incorrectly uses devgetdrvdata to locate the object, but since it was never stored there, the function returns NULL and kfree silently accepts it. The correct...

CVE-2023-35803

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow...

CVE-2023-35803

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow...

CVE-2023-35803

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow...

CVE-2023-35803

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow...

CVE-2023-35803

CVE-2023-35803 affects Extreme Networks IQ Engine on AP devices (pre-10.6r2). The root cause is a buffer overflow in the ah_acsd service, which can be exploited by a remote attacker to achieve arbitrary code execution with root privileges, over the network (no user interaction required per ZDI ad...