Lucene search
+L

342 matches found

CNVD
CNVD
added 2025/05/20 12:00 a.m.8 views

TOTOLINK NR1800X setWiFiBasicCfg function ssid parameter buffer overflow vulnerability

TOTOLINK NR1800X is an outstanding 5G NR indoor Wi-Fi and SIP CPE from China's Gion Electronics TOTOLINK. The TOTOLINK NR1800X suffers from a buffer overflow vulnerability that stems from the ssid parameter in the setWiFiBasicCfg function failing to properly validate the length size of the input...

8.8CVSS8.5AI score0.0068EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/10 12:20 a.m.37 views

CVE-2025-45844

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function...

8.8CVSS7.7AI score0.0068EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/08 4:15 p.m.11 views

CVE-2025-45844

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function...

8.8CVSS5.8AI score0.0068EPSS
SaveExploits1References3
NVD
NVD
added 2025/05/08 4:15 p.m.36 views

CVE-2025-45844

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function...

8.8CVSS0.0068EPSS
SaveExploits1References3
CVE
CVE
added 2025/05/08 12:00 a.m.80 views

CVE-2025-45844

CVE-2025-45844 affects the TOTOLINK NR1800X, specifically firmware version 9.1.0u.6681_B20230703. The vulnerability is an authenticated stack/ buffer overflow in the setWiFiBasicCfg function, triggered by a crafted ssid parameter that fails to validate input length, enabling arbitrary code execut...

8.8CVSS7.3AI score0.0068EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2025/05/08 12:00 a.m.33 views

CVE-2025-45844

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function...

0.0068EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/05/08 12:00 a.m.10 views

CVE-2025-45844

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function...

7.9AI score0.0068EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/03/20 12:00 a.m.12 views

Tenda W18E 安全漏洞

The Tenda W18E is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda W18E /goform/setModules handling of the wifiSSID parameter, which can be exploited by an attacker to submit a special request that can crash the application and cause a denial of...

6.5CVSS7AI score0.00495EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2025/03/10 12:00 a.m.14 views

The vulnerability of TP-LINK TL-WR841ND router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to cause a malfunction in the device.

The vulnerability of TP-LINK’s TL-WR841ND router’s microprogramming software lies in the fact that the operation is performed outside the buffer in memory when processing the ssid parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending specially craft...

6.8CVSS6.8AI score0.00976EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2025/03/07 12:00 a.m.50 views

Tenda AC10 Buffer Overflow Vulnerability (CNVD-2025-09218)

The Tenda AC10 is a wireless router from the Chinese company Tenda. Tenda AC10 suffers from a buffer overflow vulnerability, which originates from the ssid parameter of formfastsettingwifiset contains a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

9.8CVSS7.8AI score0.00441EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/24 3:15 a.m.11 views

CVE-2025-1612

A vulnerability was found in Edimax BR-6288ACL 1.30. It has been declared as problematic. This vulnerability affects unknown code of the file wireless5gbasic.asp. The manipulation of the argument SSID leads to cross site scripting. The attack can be initiated remotely. The vendor was contacted...

6.1CVSS3.7AI score0.00441EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/02/24 12:00 a.m.14 views

PT-2025-7698 · Edimax · Edimax Br-6288Acl

Name of the Vulnerable Software and Affected Versions: Edimax BR-6288ACL version 1.30 Description: A vulnerability was found in the Edimax BR-6288ACL, affecting unknown code of the file wireless5g basic.asp. The manipulation of the SSID argument leads to cross-site scripting. The attack can be...

6.1CVSS6.8AI score0.00441EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/02/24 12:00 a.m.13 views

Netis WF2780 代码注入漏洞

Netis WF2780 is a networking device from Netis Inc. Provides AC routers to deliver next-generation Wi-Fi at gigabit speeds. A code injection vulnerability exists in the Netis WF2780 version 2.1.41925, which stems from a cross-site scripting issue contained in the SSID parameter of the Wireless 2....

4.8CVSS4.4AI score0.00303EPSS
SaveExploits0References4
OSV
OSV
added 2025/02/20 11:15 p.m.12 views

CVE-2025-25674

Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in formfastsettingwifiset via the parameter ssid...

9.8CVSS5.8AI score0.00441EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/20 12:00 a.m.11 views

CVE-2025-25674

Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in formfastsettingwifiset via the parameter ssid...

9.5AI score0.00441EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/20 12:00 a.m.18 views

PT-2025-7566 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 V1.0 V15.03.06.23 Description: The issue is related to a buffer overflow in form fast setting wifi set via the ssid parameter. This can potentially be exploited, although specific details about the number of affected devices or...

9.8CVSS7.6AI score0.00441EPSS
SaveExploits0References5
CNVD
CNVD
added 2025/02/19 12:00 a.m.19 views

ASUS RT-N12E Cross-Site Scripting Vulnerability

The ASUS RT-N12E is a wireless router from the Chinese company ASUS. A cross-site scripting vulnerability exists in ASUS RT-N12E version 2.0.0.19, which stems from the lack of effective filtering and escaping of user-supplied data in the SSID parameter of the sysinfo.asp file, which can be...

4.8CVSS6.2AI score0.00452EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/16 12:00 a.m.11 views

ASUS RT-N12E 代码注入漏洞

The ASUS RT-N12E is a wireless router from the Chinese company ASUS. A cross-site scripting vulnerability exists in ASUS RT-N12E version 2.0.0.19, which stems from the lack of effective filtering and escaping of user-supplied data in the SSID parameter of the sysinfo.asp file, which can be...

4.8CVSS6AI score0.00452EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:00 a.m.21 views

The vulnerability of the form_fast_setting_wifi_set function in the microprogramming software for Tenda AC18 allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the formfastsettingwifiset function in the Tenda AC18 router’s microprogramming software is related to buffer overflow during the processing of the ssid parameter. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary codes...

10CVSS6.2AI score0.00792EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2025/01/16 9:15 p.m.5 views

CVE-2024-57575

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the formfastsettingwifiset function...

9.8CVSS5.9AI score0.00792EPSS
SaveExploits0References1
Rows per page
Query Builder