PT-2024-31805 · Sharp +1 · Sharp Mfps +1

Name of the Vulnerable Software and Affected Versions: Sharp and Toshiba Tec MFPs affected versions not specified Description: The issue is related to the improper processing of URI data in HTTP PUT requests, resulting in a path traversal vulnerability. This allows unintended internal files to be...

Sharp MFP 安全漏洞

Sharp MFP is a series of multifunction printers from Sharp Japan. A security vulnerability exists in Sharp MFP that originates from providing a web page to download data, where improper handling of query parameters in the HTTP request results in an out-of-bounds read vulnerability, and a crafted...

Sharp MFP 安全漏洞

Sharp MFP is a series of multifunction printers from Sharp Japan. A security vulnerability exists in Sharp MFP that stems from mishandling of keyword search inputs and SOAP messages, contains multiple out-of-bounds read vulnerabilities, and a carefully crafted HTTP request could cause the affecte...

PT-2024-33252 · Sharp +1 · Sharp Mfps +1

Name of the Vulnerable Software and Affected Versions: Sharp and Toshiba Tec MFPs affected versions not specified Description: The issue is related to improper validation of input data in URI data registration, resulting in a stored cross-site scripting vulnerability. If crafted input is stored b...

Malicious code in mfp-config-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f798a6fe7590d0ef3066f87c5397720bbb22a579e8355e0893963a212454df4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8918 Malicious code in mfp-config-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f798a6fe7590d0ef3066f87c5397720bbb22a579e8355e0893963a212454df4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Canon IR-Adv Password Extractor

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Canon IR-Adv Password Extractor', 'Description' = %q This module will extract the passwords from address books on various Canon IR-Adv mfp device...

kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK

CVE-2024-27434 is a flaw in the Linux kernel’s iwlwifi driver related to handling Management Frame Protection MFP in certain Wi-Fi configurations. When connecting to an access point using TKIP as the group cipher, the driver incorrectly applies the MFP flag to the Group Temporal Key GTK, which is...

Ricoh MFP and Printer Products Buffer Overflow (ricoh-2024-000008)

The remote Ricoh MFP or printer is affected by a buffer overflow: - There is a possibility of a denial of service DoS attack or partial data destruction caused by a remote attacker. No arbitrary code can be executed. CVE-2024-39927 %NASLMINLEVEL 80900 C Tenable Network Security, Inc...

Sharp MFP Security Vulnerability

Sharp MFP is a series of multifunction printers from Sharp Japan. A security vulnerability exists in Sharp MFP that originates from an out-of-bounds memory reference, and certain device web pages may cause the device to hang...

CVE-2024-27434

CVE-2024-27434 is a flaw in the Linux kernel’s iwlwifi driver related to handling Management Frame Protection MFP in certain Wi-Fi configurations. When connecting to an access point using TKIP as the group cipher, the driver incorrectly applies the MFP flag to the Group Temporal Key GTK, which is...

CVE-2024-27434

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK The firmware doesn't need the MFP flag for the GTK, it can even make the firmware crash. in case the AP is configured with: group cipher TKIP and MFPC. We would send the GTK...

CVE-2024-27434

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK The firmware doesn't need the MFP flag for the GTK, it can even make the firmware crash. in case the AP is configured with: group cipher TKIP and MFPC. We would send the GTK...

CVE-2024-27434 wifi: iwlwifi: mvm: don't set the MFP flag for the GTK

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK The firmware doesn't need the MFP flag for the GTK, it can even make the firmware crash. in case the AP is configured with: group cipher TKIP and MFPC. We would send the GTK...

CVE-2024-27434

CVE-2024-27434 : In the Linux kernel, the wifi driver iwlwifi/mvm incorrectly set the MFP flag for GTK, which could crash the firmware when an AP uses TKIP with MFPC. The patch ensures GTK is not marked with MFP, mitigating the issue. CVSS v3.1 base score 5.5 (LOCAL, LOW attack complexity, LOW pr...

PT-2024-21566

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak has been identified in the Linux kernel when starting an Access Point AP. The issue is related to the wfx set mfp ap function, where memory allocated by ieee80211 beacon ge...

DEBIAN-CVE-2023-52593

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix possible NULL pointer dereference in wfxsetmfpap Since 'ieee80211beaconget' can return NULL, 'wfxsetmfpap' should check the return value before examining skb data. So convert the latter to return an appropriate err...

AZL-54262 CVE-2023-52593 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix possible NULL pointer dereference in wfxsetmfpap Since 'ieee80211beaconget' can return NULL, 'wfxsetmfpap' should check the return value before examining skb data. So convert the latter to return an appropriate err...

RICOH MP C307 Cross-site Scripting (CVE-2018-17313)

On the RICOH MP C307 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi. This plugin only works with Tenable.ot. Please visit...

RICOH SP 4510DN Cross-site Scripting (CVE-2019-11845)

An HTML Injection vulnerability has been discovered on the RICOH SP 4510DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenabl...