Design/Logic Flaw

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705011; Issue ID: GN20220705011...

CVE-2022-32663

In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220720014; Issue ID: GN20220720014...

CVE-2022-32656

The CVE-2022-32656 entry concerns a local escalation of privilege in MediaTek Wi-Fi drivers. Affected components include MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7663, MT7668, MT7682, MT7686, MT7687, MT7697, MT7902, MT7915, MT7916, MT7921, MT7933, MT7981, MT7986, MT8167S, MT8175,...

CVE-2022-32655

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705028; Issue ID: GN20220705028...

CVE-2022-32656

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705035; Issue ID: GN20220705035...

CVE-2022-32663

In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220720014; Issue ID: GN20220720014...

PT-2023-13110 · Unknown · Wifi Driver

Name of the Vulnerable Software and Affected Versions: Wi-Fi driver affected versions not specified Description: The issue is related to incorrect error handling in the Wi-Fi driver, which could lead to local escalation of privilege. System execution privileges are needed for exploitation, and us...

CVE-2022-32656

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705035; Issue ID: GN20220705035...

CVE-2022-32654

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705011; Issue ID: GN20220705011...

CVE-2022-32654

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705011; Issue ID: GN20220705011...

CVE-2022-32663

CVE-2022-32663 concerns a vulnerability in a MediaTek Wi‑Fi driver where a null pointer dereference can crash the system, leading to a remote denial of service with no privileges or user interaction required. The CVE documentation (NVD/Red Hat entries) consistently describes the impact as a syste...

CVE-2022-32654

CVE-2022-32654 affects the Wi‑Fi driver, with the root cause described as undefined behavior from incorrect error handling. Impact is local escalation of privileges with System execution privileges required and no user interaction needed. Public details confirm affected devices in MediaTek MTK ch...

CVE-2022-32655

CVE-2022-32655 affects MediaTek Wi‑Fi driver components (e.g., MT5221, MT7603/7613, MT7615, MT7622/7628/7629, MT7663/7668, MT7682/7686/7687, MT7697, MT7902/7915/7916/7921, MT7981/7986, MT8167S, MT8175, MT8362A/8365, MT8385, MT8518S/8532, MT8695/8696/8788). The issue is reported as an undefined be...

CVE-2022-32655

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705028; Issue ID: GN20220705028...

Threat Source newsletter (Feb. 2, 2023): I bid you all adieu

Welcome to this weeks edition of the Threat Source newsletter. If you havent noticed yet weve had a few guest writers on this newsletter over the last few months. Alas my time covering the newsletter has ended and I leave you with one final edition. Have no fear, William Largent will be rounding...

Google Fi User Data Breached Through T-Mobile Hack

By Deeba Ahmed Google Fi customers are impacted by the recent T-Mobile breach, as Fi relies on T-Mobile and US Cellular for connectivity. This is a post from HackRead.com Read the original post: Google Fi User Data Breached Through T-Mobile Hack...

Huawei Data Communication: Information Disclosure Vulnerability (huawei-sa-20200527-01-wifi-en, Kr00k)

Huawei Data Communication devices are prone to an information disclosure vulnerability dubbed Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-late...

CVE-2022-47052

The web interface of the 'Nighthawk R6220 AC1200 Smart Wi-Fi Router' is vulnerable to a CRLF Injection attack that can be leveraged to perform Reflected XSS and HTML Injection. A malicious unauthenticated attacker can exploit this vulnerability using a specially crafted URL. This affects firmware...

CVE-2022-47052

CVE-2022-47052 affects NETGEAR Nighthawk R6220 AC1200 Smart Wi‑Fi Router. The web interface is vulnerable to a CRLF Injection that enables Reflected XSS and HTML Injection when a malicious, unauthenticated user requests a specially crafted URL. Impact is described as low confidentiality and integ...

Roaming Mantis Spreading Mobile Malware That Hijacks Wi-Fi Routers' DNS Settings

Threat actors associated with the Roaming Mantis attack campaign have been observed delivering an updated variant of their patent mobile malware known as Wroba to infiltrate Wi-Fi routers and undertake Domain Name System DNS hijacking. Kaspersky, which carried out an analysis of the malicious...