71 matches found
PT-2024-38140 · Totolink · Totolink A3600R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3600R version 4.1.2cu.5182 B20201102 Description: A critical issue has been found, affecting the function setMacQos of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument priority/macAddress leads to buffer overflow. Thi...
Ruckus Wireless Ruckus CloudPath Cross-Site Scripting Vulnerability
Ruckus Wireless Ruckus CloudPath is a network access control NAC solution for managing the identity and access rights of network users, especially in Wi-Fi networks. Its goal is to provide advanced network access management and security features to ensure that users can securely connect to the...
PT-2023-29783 · Ruckus · Ruckus Cloudpath
Name of the Vulnerable Software and Affected Versions: RUCKUS Cloudpath version 5.12 build 5538 or before Description: A vulnerability in the web-based interface of the RUCKUS Cloudpath product could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a use...
D-Link DIR-823G MacAddress Parameter Buffer Overflow Vulnerability
The D-Link DIR-823G is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-823G MacAddress parameter due to incorrect boundary checking in the SetWanSettings function. An attacker could exploit the vulnerability to cause a denial of service...
The vulnerability of the SetWanSettings() function in D-Link DIR-823G router software allows a hacker to cause a service failure.
The vulnerability of the SetWanSettings function in the microprogramming software for D–Link DIR-823G routers is related to the issue where the operation’s output escapes the buffer in memory when processing the MacAddress parameter. Exploiting this vulnerability can allow a remote attacker to...
CVE-2023-44832
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress parameter in the SetWanSettings function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
Buffer overflow
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress parameter in the SetWanSettings function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2023-44832: Buffer Copy without Checking Size of Input
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress parameter in the SetWanSettings function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
Design/Logic Flaw
Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connected BT macAddress via Settings.Gloabal...
CVE-2022-33728
Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connected BT macAddress via Settings.Gloabal...
CVE-2022-33728
CVE-2022-33728 concerns Samsung Mobile devices where Bluetooth before SMR Aug-2022 Release 1 exposes the connected Bluetooth MAC address via Settings.Global. The issue is local: an attacker on the device can access the MAC address without user interaction. Root cause is a leakage in Bluetooth set...
CVE-2022-33728: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connected BT macAddress via Settings.Gloabal...
PT-2022-21845 · Bluetooth · Bluetooth
Name of the Vulnerable Software and Affected Versions: Bluetooth versions prior to SMR Aug-2022 Release 1 Description: The issue allows local attackers to access the connected Bluetooth macAddress via Settings.Global. Recommendations: For Bluetooth versions prior to SMR Aug-2022 Release 1, update...
CVE-2022-29643
TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
Stack overflow
TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2022-29643
TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
PT-2022-19747
Name of the Vulnerable Software and Affected Versions TOTOLINK A3100R versions V4.1.2cu.5050 B20200504 through V4.1.2cu.5247 B20211129 Description The issue is a stack overflow that occurs via the macAddress parameter in the setMacQos function, allowing attackers to cause a Denial of Service DoS...
CVE-2022-29643: Out-of-bounds Write
TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50675)
TOTOLINK N600R is a wireless router from TOTOLINK, Taiwan, China. buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which originates from the lack of length validation of the macAddress parameter in the FUN0041b448 function . An attacker could exploit this vulnerabili...