EUVD-2020-24922

Malware in sbrugna...

CVE-2020-3651

Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...

CVE-2024-30656

An issue in Fireboltt Dream Wristphone BSW202FBAACv2.020240110-20240110-1956 allows attackers to cause a Denial of Service DoS via a crafted deauth frame...

CVE-2024-30656

An issue in Fireboltt Dream Wristphone BSW202FBAACv2.020240110-20240110-1956 allows attackers to cause a Denial of Service DoS via a crafted deauth frame...

CVE-2024-30656

An issue in Fireboltt Dream Wristphone BSW202FBAACv2.020240110-20240110-1956 allows attackers to cause a Denial of Service DoS via a crafted deauth frame...

CVE-2024-30656

CVE-2024-30656 concerns Fireboltt Dream Wristphone BSW202_FB_AAC_v2.0_20240110-20240110-1956. Connected sources confirm a Denial of Service (DoS) can be caused by a crafted deauth frame via the affected Wi‑Fi frame handling, with CVSS metrics indicating high impact to availability (NVD: AV:N/AC:L...

Fireboltt Dream Wristphone 安全漏洞

Fireboltt Dream Wristphone is a smartwatch phone from Fireboltt. A security vulnerability exists in Fireboltt Dream Wristphone version BSW202FBAACv2.020240110-20240110-1956, which stems from a vulnerability that allows an attacker to cause a denial of service via a crafted de-authentication frame...

CVE-2024-30656: Undefined Security Weakness

An issue in Fireboltt Dream Wristphone BSW202FBAACv2.020240110-20240110-1956 allows attackers to cause a Denial of Service DoS via a crafted deauth frame...

PT-2024-23544 · Fireboltt · Fireboltt Dream Wristphone

Name of the Vulnerable Software and Affected Versions: Fireboltt Dream Wristphone version BSW202 FB AAC v2.0 20240110-20240110-1956 Description: The issue allows attackers to cause a Denial of Service DoS via a crafted deauth frame. Recommendations: For Fireboltt Dream Wristphone version BSW202 F...

Code injection

In the 3.1.3.64296 and lower version of 360F5, the third party can trigger the device to send a deauth frame by constructing and sending a specific illegal 802.11 Null Data Frame, which will cause other wireless terminals connected to disconnect from the wireless, so as to attack the router...

Input validation

Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue deauth/disassoc frames due to improper enum values used to check the frame subtype in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer...

CVE-2020-3651

Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...

Command injection

Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...

WiFi-Pumpkin v0.8.7 - Framework for Rogue Wi-Fi Access Point Attack

The WiFi-Pumpkin is a rogue AP framework to easily create these fake networks, all while forwarding legitimate traffic to and from the unsuspecting target. It comes stuffed with features, including rogue Wi-Fi access points, deauth attacks on client APs, a probe request and credentials monitor,...

Framework for Rogue Wi-Fi Access Point Attack: WiFi-Pumpkin

The WiFi-Pumpkin is a rogue AP framework to easily create these fake networks, all while forwarding legitimate traffic to and from the unsuspecting target. It comes stuffed with features, including rogue Wi-Fi access points, deauth attacks on client APs, a probe request and credentials monitor,...

CVE-2017-12095

An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A series of WiFi packets can force Circle to setup an Access Point with default credentials. An attacker needs to send a series of spoofed "de-auth" packets to trigger this...

CVE-2017-12096

An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same name as the legitimate one can be used to make Circle connect to an untrusted network. An attacker needs to setup an Access Point reachable by the device and to send a series of...

CVE-2017-12096

An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same name as the legitimate one can be used to make Circle connect to an untrusted network. An attacker needs to setup an Access Point reachable by the device and to send a series of...

PT-2017-12349 · Disney · Circle With Disney

Name of the Vulnerable Software and Affected Versions: Circle with Disney affected versions not specified Description: A vulnerability exists in the WiFi management of Circle with Disney, allowing an attacker to connect the device to an untrusted network. This can be achieved by setting up a...

Circle with Disney WiFi Security Downgrade Vulnerability

Summary An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same name as the legitimate one, can be used to make Circle connect to an untrusted network. An attacker needs to setup an Access Point reachable by the device and to send a...