1520 matches found
CVE-2019-19226
A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface Firmware EU1.03 allows an attacker to enable or disable MAC address filtering by submitting a crafted Forms/WlanMacFilter1 POST request without being authenticated on the admin interface...
CVE-2019-8854
A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in macOS Catalina 10.15, watchOS 6, iOS 13, tvOS 13. A device may be passively tracked by its Wi-Fi MAC address...
CVE-2019-8620
A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A device may be passively tracked by its WiFi MAC address...
CVE-2019-8567
A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.2. A device may be passively tracked by its WiFi MAC address...
CVE-2017-17877
An issue was discovered in Valve Steam Link build 643. When the SSH daemon is enabled for local development, the device is publicly available via IPv6 TCP port 22 over the internet with stateless address autoconfiguration by default, which makes it easier for remote attackers to obtain access by...
CVE-2002-2371
Linksys WET11 firmware 1.31 and 1.32 allows remote attackers to cause a denial of service crash via a packet containing the device's hardware address as the source MAC address in the DLC header...
CVE-2002-2316
Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing...
CVE-2002-1937
Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the administrator's MAC address and perform an ARP poisoning man-in-the-middle attack to obtain the administrator's password...
๐ ABB Cylon FLXeon 9.3.5 variant.js Information Disclosure
The ABB Cylon FLXeon BACnet controller's /api/variant endpoint exposes sensitive system information, including the internal IP address, MAC address, device model, and build type, without requiring authentication. The get function gathers network interface data using the os.networkInterfaces API a...
The vulnerability of the wake_on_lan function in D-Link DIR-619L router software allows a hacker to execute arbitrary code.
The vulnerability of the wakeonlan function in D-Link DIR-619L router software lies in the lack of measures taken to clean data at the control level when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2025-28200
Victure RX1800 ENV1.0.0r12110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address...
CVE-2025-28200
Victure RX1800 ENV1.0.0r12110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address...
CVE-2025-28200
Victure RX1800 ENV1.0.0r12110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address...
CVE-2025-28200
Victure RX1800 ENV1.0.0r12110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address...
CVE-2025-28200
The CVE-2025-28200 entry concerns the Victure RX1800 router (EN_V1.0.0_r12_110933). The underlying issue is a weak default password that uses the last 8 digits of the MAC address, exposing the device to credential guessing with network access. According to the provided metrics, the severity is cr...
CVE-2025-45847
ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the targetAPMac parameter in the formWsc function...
Tenda RX3 ๅฎๅ จๆผๆด
The Tenda RX3 is a home wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda RX3 GetParentControlInfo function when handling the mac parameter, no detailed vulnerability details are provided at this time...
CVE-2025-46627
Use of weak credentials in the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated attacker to authenticate to the telnet service by calculating the root password based on easily-obtained device information. The password is based on the last two digits/octets of the MAC address...
CVE-2025-46627
CVE-2025-46627 concerns a weak-credentials issue in the Tenda RX2 Pro. Affected: Tenda RX2 Pro with firmware 16.03.30.14. Description from multiple sources: an unauthenticated attacker can authenticate to the Telnet service by deriving the root password from easily obtainable device information, ...
CVE-2025-46627
Use of weak credentials in the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated attacker to authenticate to the telnet service by calculating the root password based on easily-obtained device information. The password is based on the last two digits/octets of the MAC address...