CVE-2023-32138

CVE-2023-32138 affects D-Link DAP-1360 (and related DAP-2020 devices per sources). The vulnerability is a heap-based buffer overflow in the webproc handler for the "/cgi-bin/webproc" endpoint, caused by improper validation of the length of user-supplied data copied into a fixed‑length heap buffer...

CVE-2023-27358 NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability

NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2023-27357

NETGEAR RAX30 exposes a Missing Authentication Information Disclosure vulnerability in the SOAP handling path (GetInfo). The flaw allows network-adjacent attackers to access functionality without authentication and disclose sensitive information, with pre-authentication access implied. The primar...

CVE-2023-27349 BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability

BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the...

CVE-2023-27349 BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability

BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the...

CVE-2023-27349 BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability

BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the...

CVE-2023-27346 TP-Link AX1800 Firmware Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

TP-Link AX1800 Firmware Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AX1800 routers. Authentication is not required to exploit this vulnerability. The...

CVE-2023-27346

CVE-2023-27346 affects TP-Link AX1800 (Archer AX1800) routers. Root cause: a stack-based buffer overflow in the firmware image parsing due to insufficient validation of the length of user-supplied data before copying into a fixed-length stack buffer. Impact: network-adjacent attackers can run arb...

CVE-2023-27332

CVE-2023-27332 relates to TP-Link Archer AX21, where the tdpServer logging component, listening on UDP port 20002, has a stack-based buffer overflow due to improper validation of user-supplied data length. This allows network-adjacent attackers to achieve remote code execution with root privilege...

CVE-2023-27332 TP-Link Archer AX21 tdpServer Logging Stack-based Buffer Overflow Remote Code Execution Vulnerability

TP-Link Archer AX21 tdpServer Logging Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer AX21 routers. Authentication is not required to exploit this...

BlueZ 安全漏洞

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layer and protocol. A security vulnerability exists in BlueZ that stems from the presence of an out-of-bounds read information disclosure vulnerability that allows network-adjacent...

BlueZ 安全漏洞

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layer and protocol. A security vulnerability exists in BlueZ that stems from the presence of a stack-based buffer overflow remote code execution vulnerability that could allow a...

ASUS RT-AX92U 安全漏洞

ASUS RT-AX92U is a wireless router from Asus China. A security vulnerability exists in the ASUS RT-AX92U that stems from the presence of a SQL injection information disclosure vulnerability that allows network-adjacent attackers to disclose sensitive information on the affected router...

CVE-2024-32051

Insertion of sensitive information into log file issue exists in RoamWiFi R10 prior to 4.8.45. If this vulnerability is exploited, a network-adjacent unauthenticated attacker with access to the device may obtain sensitive information...

CVE-2024-31406

Active debug code vulnerability exists in RoamWiFi R10 prior to 4.8.45. If this vulnerability is exploited, a network-adjacent unauthenticated attacker with access to the device may perform unauthorized operations...

CVE-2024-31406

RoamWiFi R10 firmware before 4.8.45 contains an Active debug code vulnerability (CWE-489). A network-adjacent, unauthenticated attacker with access to the device can perform unauthorized operations. Affected products are RoamWiFi R10 versions prior to 4.8.45; remediation is to update to 4.8.45 or...

CVE-2024-31406

Active debug code vulnerability exists in RoamWiFi R10 prior to 4.8.45. If this vulnerability is exploited, a network-adjacent unauthenticated attacker with access to the device may perform unauthorized operations...

CVE-2024-31406

Active debug code vulnerability exists in RoamWiFi R10 prior to 4.8.45. If this vulnerability is exploited, a network-adjacent unauthenticated attacker with access to the device may perform unauthorized operations...

CVE-2024-32051

CVE-2024-32051 affects RoamWiFi R10 prior to firmware version 4.8.45. The issue is the insertion of sensitive information into log files due to a vulnerability in the device’s logging behavior. Attackers with network-adjacent access and no authentication could potentially obtain sensitive informa...

PT-2024-24378 · Unknown · Roamwifi R10

Name of the Vulnerable Software and Affected Versions: RoamWiFi R10 versions prior to 4.8.45 Description: The issue allows an unauthenticated attacker with network-adjacent access to the device to obtain sensitive information. This is due to the insertion of sensitive information into a log file...