TOTOLINK A7000R 安全漏洞

TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK that supports WiFi7 technology for home or small business network environments. The TOTOLINK A7000R suffers from a stack buffer overflow vulnerability, which stems from the ssid5g parameter in the sub4222E0 function faili...

kernel: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in cfg80211connectresult If the ssid-datalen is more than IEEE80211MAXSSIDLEN 32 it would lead to memory corruption so add some bounds checking...

ath11k: Change max no of active probe SSID and BSSID to fw capability

...

SUSE CVE-2023-53540

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject auth/assoc to AP with our address If the AP uses our own address as its MLD address or BSSID, then clearly something's wrong. Reject such connections so we don't try and fail later...

PT-2025-40682

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the wifi subsystem, specifically in the cfg80211 component. The issue involves accepting authentication or association requests from an Access Poi...

wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()

...

CVE-2025-39849

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in cfg80211connectresult If the ssid-datalen is more than IEEE80211MAXSSIDLEN 32 it would lead to memory corruption so add some bounds checking...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unrestricted SSID length that could lead to memory corruption...

PT-2025-34154

Name of the Vulnerable Software and Affected Versions: Linksys RE6250 versions 1.0.013.001 through 1.2.07.001 Linksys RE6300 versions 1.0.013.001 through 1.2.07.001 Linksys RE6350 versions 1.0.013.001 through 1.2.07.001 Linksys RE6500 versions 1.0.013.001 through 1.2.07.001 Linksys RE7000 version...

CVE-2025-8958

A vulnerability was identified in Tenda TX3 16.03.13.11multiTDE01. Affected by this vulnerability is an unknown functionality of the file /goform/fastsettingwifiset. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has be...

CVE-2025-43984

An issue was discovered on KuWFi GC111 devices Hardware Version: CPE-LM321V3.2, Software Version: GC111-GL-LM321V3.020191211. They are vulnerable to unauthenticated /goform/goformsetcmdprocess requests. A crafted POST request, using the SSID parameter, allows remote attackers to execute arbitrary...

CVE-2025-8765

A vulnerability classified as problematic was found in Datacom DM955 5GT 1200 825.8010.00. Affected by this vulnerability is an unknown functionality of the component Wireless Basic Settings. The manipulation of the argument SSID leads to cross site scripting. The attack can be launched remotely...

CVE-2025-8765

A vulnerability classified as problematic was found in Datacom DM955 5GT 1200 825.8010.00. Affected by this vulnerability is an unknown functionality of the component Wireless Basic Settings. The manipulation of the argument SSID leads to cross site scripting. The attack can be launched remotely...

Linux Distros Unpatched Vulnerability : CVE-2019-17133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel through 5.3.2, cfg80211mgdwextgiwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow. CVE-2019-171...

Itemir M300 Wi-Fi Repeater 安全漏洞

The Itemir M300 Wi-Fi Repeater is a wireless repeater from China-based Itemir. A security vulnerability exists in the Itemir M300 Wi-Fi Repeater that stems from an uncleared ssid parameter, which could lead to an unauthenticated remote command injection attack...

The vulnerability of the microprogramming software of the Aitemi M300 wireless signal amplifiers (MT02) arises from the lack of measures taken to neutralize special elements used in the operating system’s command structure. This allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the microprogramming software of the Aitemi M300 MT02 wireless signal amplifiers is related to the lack of measures taken to neutralize special elements used in the operating system’s processing of the SSID identifier. Exploiting this vulnerability can allow a remote attacker...

UTT 750W 安全漏洞

The UTT Progress 750W is an enterprise-grade dual-band wireless router from Atech Technology UTT, which is aimed at SMB network environments. The UTT Progress 750W suffers from a buffer overflow vulnerability that originates from improper handling of the parameter ssid in the file...

Intellian Iridium Certus 700 输入验证错误漏洞

Intellian Iridium Certus 700 is a marine satellite Internet system from Intellian Corporation in South Korea. An input validation error vulnerability exists in Intellian Iridium Certus 700 version 1.0.1, which stems from incorrect parsing of the SSID field and could lead to the injection of...

The vulnerability of the setWiFiEasyCfg function in the microprogramming software for TOTOLINK NR1800X allows a hacker to cause a service failure.

The vulnerability of the setWiFiEasyCfg function in the microprogramming software for TOTOLINK NR1800X routers is related to buffer overflows in the stack when processing parameters ssid and ssid5g. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability in the sysinfo.asp script of ASUS RT-N12E router microprogramming software allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the sysinfo.asp script in ASUS RT-N12E router microprogramming software is related to the lack of measures taken to protect the website structure when processing SSID identifiers. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks X...