CVE-2025-1814

A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is some unknown functionality of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to stack-based buffer overflow. The attack may be launched remotel...

PT-2025-7562 · Tenda · Tenda Ac8V4

Name of the Vulnerable Software and Affected Versions: Tenda AC8V4 version V16.03.34.06 Description: A vulnerability was found in the function SUB 0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk crypto leads to a stack-based buffer overflow. Recommendations: For...

D-Link DIR-853 PSK Parameter Buffer Overflow Vulnerability

The D-Link DIR-853 is a dual-band wireless router that supports the 802.11ac protocol and provides dual-band 2.4GHz up to 400Mbps and 5GHz up to 867Mbps network connectivity for HD video streaming and online gaming. The D-Link DIR-853 suffers from a buffer overflow vulnerability that originates...

libreswan: Missing PreSharedKey for connection can cause crash

A flaw was found in Libreswan. This issue causes Libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys authby=secret, and the connection cannot find a matching configured secret. When automatically added on startup using the auto= keyword,...

TLS 1.3 client issue handling malicious server when not including a KSE and PSK extension

...

libreswan: Missing PreSharedKey for connection can cause crash

A flaw was found in Libreswan. This issue causes Libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys authby=secret, and the connection cannot find a matching configured secret. When automatically added on startup using the auto= keyword,...

Victure RX1800 WiFi 6 安全漏洞

The Victure RX1800 WiFi 6 is a wireless router from Victure. A security vulnerability exists in the Victure RX1800 WiFi 6 that originates from an attacker being able to obtain the default Wi-Fi PSK value via the last 4 octets of the BSSID...

CVE-2023-37822

The Eufy Homebase 2 before firmware version 3.3.4.1h creates a dedicated wireless network for its ecosystem, which serves as a proxy to the end user's primary network. The WPA2-PSK generation of this dedicated network is flawed and solely based on the serial number. Due to the flawed generation...

CVE-2023-6324

ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity...

PT-2024-5067 · Owlet +3 · Owlet Cam V1 +4

Name of the Vulnerable Software and Affected Versions: ThroughTek Kalay SDK versions used in Owlet Cam v1, Owlet Cam v2, Wyze Cam v3, and Roku Indoor Camera SE Description: The issue is related to the use of uninitialized variables in the Kalay SDK, which can be exploited by a remote attacker to...

ThroughTek Kalay Platform 安全漏洞

Throughtek ThroughTek Kalay Platform is an application from China's IOT Intelligence throughtek. The Kalay Cloud Platform service is enabled using P2P technology. A security vulnerability exists in ThroughTek Kalay Platform, which stems from an issue where there is an error in handling PSK...

CVE-2023-33548

Cross Site Scripting XSS vulnerability in ASUS RT-AC51U with firmware versions up to and including 3.0.0.4.380.8591 allows attackers to run arbitrary code via the WPA Pre-Shared Key field...

CVE-2023-33548

CVE-2023-33548 affects ASUS RT-AC51U firmware up to 3.0.0.4.380.8591. The vulnerability is described as a Cross Site Scripting (XSS) flaw that allows an attacker to run arbitrary code via the WPA Pre-Shared Key field. Key details from connected documents indicate the CVSS v3.1 base score is 6.8 (...

CVE-2023-33548

Cross Site Scripting XSS vulnerability in ASUS RT-AC51U with firmware versions up to and including 3.0.0.4.380.8591 allows attackers to run arbitrary code via the WPA Pre-Shared Key field...

CVE-2023-33548

Cross Site Scripting XSS vulnerability in ASUS RT-AC51U with firmware versions up to and including 3.0.0.4.380.8591 allows attackers to run arbitrary code via the WPA Pre-Shared Key field...

D-Link DAP-2622 安全漏洞

The D-Link DAP-2622 is a wireless access point Access Point device from D-Link, a Chinese company. A security vulnerability exists in the D-Link DAP-2622, which originates from a DDP Get SSID List WPA PSK Information Disclosure vulnerability...

libreswan: Missing PreSharedKey for connection can cause crash

A flaw was found in Libreswan. This issue causes Libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys authby=secret, and the connection cannot find a matching configured secret. When automatically added on startup using the auto= keyword,...

libreswan: Missing PreSharedKey for connection can cause crash

A flaw was found in Libreswan. This issue causes Libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys authby=secret, and the connection cannot find a matching configured secret. When automatically added on startup using the auto= keyword,...

The vulnerability of the VPN protocol library using “IPsec” in libreswan, related to the use of the PreSharedKey secret for creating the AUTH payload in IKEAuth Exchange, allows a attacker to perform a type of “Denial-of-Service” attack. [source-iocs-preserved const=IKE_AUTH]

The vulnerability of the VPN protocol using “IPsec” with libreswan is related to the use of the PreSharedKey secret for generating the AUTH payload in IKE Auth Exchange. Exploiting this vulnerability allows a remote attacker to perform a type of “denial-of-service” attack. source-iocs-preserved...

libreswan: Missing PreSharedKey for connection can cause crash

A flaw was found in Libreswan. This issue causes Libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys authby=secret, and the connection cannot find a matching configured secret. When automatically added on startup using the auto= keyword,...