Multiple ARRIS Product Command Injection Vulnerabilities (CNVD-2022-68533)

ARRIS SBR-AC1900P, SBR-AC3200P and SBR-AC1200P is a Wi-Fi router from ARRIS, Inc. Multiple ARRIS products are vulnerable to a command injection vulnerability, which stems from the pppoeUserName, pppoePassword, and pppoeService parameters in the pppoe function failing to properly filter the...

ARRIS TR3300 Command Injection Vulnerability (CNVD-2022-68527)

ARRIS TR3300 is an 802.11ac Wi-Fi router from ARRIS U.S.A. A command injection vulnerability exists in ARRIS TR3300, which stems from the failure of the pptpfixip, pptpfixmask, pptpfixgw, and wandns1stat parameters in the pptp function. properly filter the construct command special characters,...

ARRIS TR3300 Command Injection Vulnerability (CNVD-2022-68529)

The ARRIS TR3300 is an 802.11ac Wi-Fi router from ARRIS, Inc. A command injection vulnerability exists in the ARRIS TR3300, which stems from the failure of the wanipstat, wanmaskstat, wangwstat, and wandns1stat parameters in the ip function to properly filter the construct command special...

ARRIS TR3300 Command Injection Vulnerability (CNVD-2022-68526)

ARRIS TR3300 is an 802.11ac Wi-Fi router from ARRIS U.S.A. A command injection vulnerability exists in ARRIS TR3300, which stems from the failure of the htimezone parameter in the time zone function to properly filter the construct command special characters, commands, etc. The vulnerability can ...

ARRIS TR3300 OS Command Injection Vulnerability

ARRIS TR3300 is an 802.11ac Wi-Fi router from ARRIS, Inc. ARRIS TR3300 v1.0.13 is vulnerable to an operating system command injection vulnerability that could be exploited by attackers to execute arbitrary commands via crafted requests...

PT-2022-18174 · Arris · Arris Tr3300

Name of the Vulnerable Software and Affected Versions: Arris TR3300 version 1.0.13 Description: The issue is related to a command injection vulnerability in the wps setting function. This vulnerability is exploited via the wps enrolee pin parameter, allowing attackers to execute arbitrary command...

Huawei Emui and Magic UI Wi-Fi module privilege control vulnerability

Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI Wi-Fi modules have a privilege control vulnerability that could be exploited by attackers to obtain sensitive information...

CVE-2021-40059

There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality...

Design/Logic Flaw

There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2021-40059

There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2021-40059

CVE-2021-40059 is linked to Huawei Huawei Emui and Magic UI Wi-Fi modules, with a privilege control vulnerability in the Wi‑Fi component. CNVD-2022-20299 describes a privilege control flaw that could be exploited by attackers to obtain sensitive information from these Wi‑Fi modules, indicating th...

SUSE SLES15 Security Update : kernel-firmware (SUSE-SU-2022:0721-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0721-1 advisory. - Update Intel Wireless firmware for 9xxx CVE-2021-0161, CVE-2021-0164,CVE-2021-0165,CVE-2021-0066,CVE-2021-0166,...

Alecto DVC-215IP Information Disclosure Vulnerability

Alecto DVC-215IP is a camera from Alecto.Alecto DVC-215IP 63.1.1.173 and earlier versions are vulnerable to an information disclosure vulnerability that stems from the camera's Wi-Fi password phrase being hidden, but by editing to remove the style of the password field, the password becomes visib...

Web Filtering & Compliances for Wi-Fi Providers

The demand for public Wi-Fi is increasing constantly due to the increase of smartphone owners and remote workers. Researchers at VPNMentor say that there are approximately 549 million Wi-Fi hotspots worldwide. Another survey by Semantic found that 87 percent of U.S. consumers have used the readil...

CVE-2022-24610

Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera...

Default credentials

Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera...

CVE-2022-24610

CVE-2022-24610 concerns the Alecto DVC-215IP camera (firmware 63.1.1.173 and earlier). The issue is an information disclosure: the Wi‑Fi passphrase is hidden in Settings, but manipulating the style/DOM of the password field reveals the password, enabling access to the camera’s internal network. T...

CVE-2022-24610

Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera...

Code injection

TP-Link TL-WA850RE Wi-Fi Range Extender before v6200923 was discovered to use highly predictable and easily detectable session keys, allowing attackers to gain administrative privileges...

CVE-2022-22922

The CVE-2022-22922 entry concerns the TP-Link TL-WA850RE Wi‑Fi Range Extender. Affected version: v6_200923 and earlier. Root cause: usage of highly predictable and easily detectable session keys, enabling a remote attacker to gain administrative privileges. Impact: administrative access compromis...