CVE-2024-11980

CVE-2024-11980 describes a Missing Authentication vulnerability in multiple Billion Electric WiFi routers. Attackers can remotely and unauthenticatedly access a specific router function to obtain partial device information, modify the WiFi SSID, and restart the device. The CVSS 3.1 vector (AV:N/A...

CVE-2024-11980: Missing Authentication for Critical Function

Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access the specific functionality to obtain partial device information, modify the WiFi SSID, and restart the device...

PT-2023-20923 · Tenda · Tenda V15V1.0

Name of the Vulnerable Software and Affected Versions: Tenda V15V1.0 version V15.11.0.141521 3190 1058 Description: A buffer overflow issue was discovered via the wifiFilterListRemark parameter in the modifyWifiFilterRules function, allowing attackers to cause a Denial of Service DoS via a crafte...