CVE-2022-23746

The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender SNX. If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords...

Authentication flaw

The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender SNX. If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords...

CVE-2022-23746

The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender SNX. If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords...

com.liferay:com.liferay.css.builder (>=1.0.8 <=1.0.14), com.liferay:com.liferay.deployment.helper (>=1.0.0 <=1.0.2) +8 more potentially affected by CVE-2022-41414 via com.liferay.portal:portal-impl (=7.0.0-nightly)

com.liferay.portal:portal-impl MAVEN version =7.0.0-nightly is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:portal-impl and may be impacted: - com.liferay:com.liferay.css.builder =1.0.8, =1.0.0, =1.0.6, =1.0.3, =1.0.3, =1.0.47,...

Security Bulletin: IBM MaaS360 Cloud Extender Agent and Base Module use libcurl with multiple known vulnerabilities

Summary Vulnerabilities contained within libcurl a 3rd party component were identified and remediated in the IBM MaaS360 Cloud Extender Agent and Base Module. Vulnerability Details CVEID:CVE-2022-27780 DESCRIPTION: cURL libcurl could allow a remote attacker to bypass security restrictions, caused...

Security Bulletin: IBM MaaS360 Cloud Extender Agent and Base Module uses libcurl with multiple known vulnerabilities (CVE-2022-32205, CVE-2022-32206, CVE-2022-32207, CVE-2022-32208)

Summary Vulnerabilities contained within libcurl a 3rd party component were identified and remediated in the IBM MaaS360 Cloud Extender Agent and Base Module. Vulnerability Details CVEID:CVE-2022-32205 DESCRIPTION: cURL libcurl is vulnerable to a denial of service, caused by an issue with the...

CVE-2022-38956

An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to replace the user-uploaded firmware image with an original old firmware image. This affects Firmware 1.1.11.1.9 and earlier...

CVE-2022-38955

An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the CRC check. A successful attack can either introduce a backdoor to the device or make the...

CVE-2022-38956

The CVE-2022-38956 issue affects Netgear WPN824EXT WiFi Range Extender, specifically firmware versions 1.1.1 through 1.1.9 and earlier. The root cause is lack of integrity checks in the firmware update path, enabling a MITM attacker to downgrade the firmware by replacing the user-uploaded image w...

PT-2022-4966 · NetGear · Netgear Wpn824Ext Wifi Range Extender

Name of the Vulnerable Software and Affected Versions: Netgear WPN824EXT WiFi Range Extender versions 1.1.1 through 1.1.9 and earlier Description: The issue is related to a lack of integrity check in the firmware of the Netgear WPN824EXT WiFi Range Extender. An attacker can exploit this by...

Security Bulletin: Apache Log4j Vulnerability Affects IBM Sterling Transformation Extender (CVE-2021-44228)

Summary IBM Sterling Transformation Extender is impacted by Log4j2 security vulnerability, CVE-2021-44228, where an attacker can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. Vulnerability Details...

WAVLINK WiFi-Repeater 安全漏洞

WAVLINK WiFi-Repeater is a WiFi range extender from China RuiYin Technology WAVLINK. A security vulnerability exists in WAVLINK WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 version. An attacker exploited the vulnerability to obtain the telnet password by accessing the tftp.txt page...

Wavlink WL-WN575A3 命令注入漏洞

Wavlink WL-WN575A3 is a wireless network signal extender from China RuiYin Technology Wavlink. A security vulnerability exists in the Wavlink WL-WN575A3 RPT75A3.V4300.201217 version, which stems from a command injection vulnerability discovered via the obtw function. An attacker could use this...

Multiple TP-Link Wireless Extender Remote Command Execution Vulnerabilities

TP-Link WA850RE and others are all TP-Link's wireless extenders. A number of wireless extenders have remote command execution vulnerabilities, which can be exploited by attackers to execute unauthorized remote commands...

WAVLINK AERIAL X 1200M Command Injection Vulnerability

WAVLINK AERIAL X 1200M, a WiFi extender from WAVLINK China, is vulnerable to a command injection vulnerability in version M79X3.V5030.180719, which stems from the execution of a POST received in adm.cgi spliced directly into a system function, which can be exploited by an attacker to exploit this...

WAVLINK AERIAL X 1200M Information Disclosure Vulnerability (CNVD-2022-61032)

WAVLINK AERIAL X 1200M, a WiFi extender from WAVLINK China, is vulnerable to an information disclosure vulnerability in version M79X3.V5030.180719, which stems from improper authorization management on the livecheck.shtml page, and could be exploited by an attacker to The vulnerability is caused ...

TOTOLINK EX1200T setNoticeCfg function command injection vulnerability

TOTOLINK EX1200T is a Wi-Fi range extender from China-based Gion Electronics TOTOLINK.A command injection vulnerability exists in TOTOLINK EX1200T V4.1.2cu.5215, which originates from the file lib/cstemodules/system in the setNoticeCfg function in the file lib/cstemodules/system fails to properly...

TOTOLINK EX1200T Information Disclosure Vulnerability (CNVD-2022-53566)

TOTOLINK EX1200T is a Wi-Fi range extender from China-based Gion Electronics TOTOLINK.TOTOLINK EX1200T is vulnerable to information disclosure, which can be exploited by attackers to obtain sensitive information wifikey, etc. without authorization...

TOTOLINK EX1200T Information Disclosure Vulnerability (CNVD-2022-53565)

TOTOLINK EX1200T is a Wi-Fi range extender from China-based Gion Electronics TOTOLINK.TOTOLINK EX1200T is vulnerable to information disclosure, which can be exploited by attackers to obtain sensitive information wifikey, wifiname, etc. without authorization...

TOTOLINK EX1200T Information Disclosure Vulnerability (CNVD-2022-53567)

TOTOLINK EX1200T is a Wi-Fi range extender from China-based Gion Electronics TOTOLINK.TOTOLINK EX1200T is vulnerable to information disclosure, which can be exploited by attackers to obtain sensitive information wifikey, etc. without authorization via getSysStatusCfg...