PT-2018-2128 · Cisco · Cisco Wireless Lan Controller +1

Name of the Vulnerable Software and Affected Versions: Cisco Wireless LAN Controller Software affected versions not specified Description: The issue is due to improper sanitization of user-supplied input in HTTP request parameters that describe filenames and pathnames, allowing an authenticated,...

PT-2018-1814

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller Software affected versions not specified Description The issue is related to incomplete input and validation checking mechanisms in the web-based interface URL request of Cisco Wireless LAN Controller Software. Th...

PT-2018-2129 · Cisco · Cisco Wireless Lan Controller +1

Name of the Vulnerable Software and Affected Versions: Cisco Wireless LAN Controller WLC Software affected versions not specified Description: A vulnerability in TACACS authentication could allow an authenticated, local attacker to perform certain operations within the GUI that are not normally...

PT-2018-2126

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC Software affected versions not specified Description A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol component could allow an unauthenticated, remote attacker to cause...

CVE-2018-0420: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web-based interface of Cisco Wireless LAN Controller Software could allow an authenticated, remote attacker to view sensitive information. The issue is due to improper sanitization of user-supplied input in HTTP request parameters that describe filenames and pathnames. An...

PT-2018-2131

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC Software affected versions not specified Description A vulnerability in the authentication and authorization checking mechanisms could allow an authenticated, adjacent attacker to gain network access to a Cisc...

CVE-2018-0417: Undefined Security Weakness

A vulnerability in TACACS authentication with Cisco Wireless LAN Controller WLC Software could allow an authenticated, local attacker to perform certain operations within the GUI that are not normally available to that user on the CLI. The vulnerability is due to incorrect parsing of a specific...

CVE-2018-15395: Improper Access Control

A vulnerability in the authentication and authorization checking mechanisms of Cisco Wireless LAN Controller WLC Software could allow an authenticated, adjacent attacker to gain network access to a Cisco TrustSec domain. Under normal circumstances, this access should be prohibited. The...

CVE-2018-0443: Improper Input Validation

A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol component of Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper input validation on...

CVE-2018-5400

The Auto-Maskin products utilize an undocumented custom protocol to set up Modbus communications with other devices without validating those devices. The originating device sends a message in plaintext, 48:65:6c:6c:6f:20:57:6f:72:6c:64, "Hello World" over UDP ports 44444-44446 to the broadcast...

Code injection

The Auto-Maskin products utilize an undocumented custom protocol to set up Modbus communications with other devices without validating those devices. The originating device sends a message in plaintext, 48:65:6c:6c:6f:20:57:6f:72:6c:64, "Hello World" over UDP ports 44444-44446 to the broadcast...

CVE-2018-5400

CVE-2018-5400 describes an origin validation error in Auto‑Maskin DCU-210E and RP‑210E devices (ARMv7, prior to 3.7) where an undocumented Modbus setup protocol over UDP broadcast allows devices to be paired without validating the peer, enabling an attacker on the same network to spoof or replay ...

CVE-2018-15700

The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Referer field...

CVE-2018-15700: Improper Input Validation

The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Referer field...

CVE-2018-15701: Improper Input Validation

The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Cookie field...

PT-2018-13152

Name of the Vulnerable Software and Affected Versions TP-Link TL-WRN841N version 0.9.1 4.16 v0348.0 Description The web interface is susceptible to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Referer field. Recommendations For TP-Link...

Google Android WLAN Buffer Overflow Vulnerability (CNVD-2019-27649)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and WLAN is a wireless connection module used in it. A buffer overflow vulnerability exists in WLAN in Android. An attacker could exploit this vulnerability to cause a denial of...

Google Android WLAN Buffer Overflow Vulnerability (CNVD-2019-27648)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and WLAN is a wireless connection module used in it. WLAN in Android suffers from a buffer overflow vulnerability that arises from a program performing improper length detection. ...

Google Android WLAN suffers from an unspecified vulnerability (CNVD-2019-28608)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and WLAN is a wireless connection module used in it. There is a security vulnerability in WLAN in Android. An attacker can exploit this vulnerability to execute arbitrary code on...

Google Android WLAN Buffer Overflow Vulnerability (CNVD-2019-27650)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and WLAN is a wireless connection module used in it. A buffer overflow vulnerability exists in WLAN in Android. An attacker could exploit this vulnerability to execute code or cau...