18 matches found
CVE-2020-37097
The CVE-2020-37097 entry concerns Edimax EW-7438RPn v1.13. The core issue is an information disclosure vulnerability exposed via the wlencrypt_wiz.asp script, which allows retrieval of sensitive configuration data including the WiFi network name and plaintext password stored in device configurati...
CVE-2023-31478
An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSID and key...
EUVD-2001-0610
Malware in sbrugna...
EUVD-2019-7858
Malware in sbrugna...
EUVD-2020-1955
Malware in sbrugna...
EUVD-2017-17818
Malware in sbrugna...
EUVD-2025-8101
Malicious code in bioql PyPI...
CVE-2023-21230
In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadcast about WiFi access point change and its BSSID or SSID due to a precondition check failure. This could lead to local information disclosure with no additional execution...
CVE-2023-21429
Improper usage of implict intent in ePDG prior to SMR JAN-2023 Release 1 allows attacker to access SSID...
CVE-2011-4872
Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a craft...
CVE-2025-30118
An issue was discovered on the Audi Universal Traffic Recorder 2.88. It has Susceptibility to denial of service. It uses the same default credentials for all devices and does not implement proper multi-device authentication, allowing attackers to deny the owner access by occupying the only...
CVE-2025-30118
CVE-2025-30118 affects the Audi Universal Traffic Recorder (version/variant 2.88). The issue arises from use of the same default credentials across all devices and lack of proper multi-device authentication, enabling a denial of service by an attacker who can occupy the only available connection....
CVE-2025-30118
An issue was discovered on the Audi Universal Traffic Recorder 2.88. It has Susceptibility to denial of service. It uses the same default credentials for all devices and does not implement proper multi-device authentication, allowing attackers to deny the owner access by occupying the only...
CVE-2023-46889
Meross MSH30Q 4.5.23 is vulnerable to Cleartext Transmission of Sensitive Information. During the device setup phase, the MSH30Q creates an unprotected Wi-Fi access point. In this phase, MSH30Q needs to connect to the Internet through a Wi-Fi router. This is why MSH30Q asks for the Wi-Fi network...
CVE-2017-9476
The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST; Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST; and Arris TG1682G eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG16822.2p7s2PRODsey devices makes it easy for...
Yamaha MusicCAST MCX-1000 wireless network interface operates in Access Point mode by default
Overview The Yamaha MusicCAST MCX-1000 server wireless networking interface is enabled by default, cannot be disabled, and operates in Access Point mode. A remote attacker could access the MusicCAST wireless network and potentially any other network connected to the MusicCAST. Description The...
CVE-2001-0618
Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the 'Network Name' or SSID as the default Wired Equivalent Privacy WEP encryption key. Since the SSID occurs in the clear during communications, a remote attacker could determine the WEP key and decrypt RG-1000 traffic...
Design Flaw in Lucent/Orinoco 802.11 proprietary access control- closed network
Name: Lucent/Orinoco Closed Network design flaw Products: Most access points based on Orinoco wireless cards. Severity: An attacker can determine the network name, or SSID, which controls access to the network. Knowledge of the SSID permits a client to associate/join the network. If WEP is not...