1652 matches found
CVE-2020-12734
DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful device owner, because there is no way to reset to Factory Default settings...
Design/Logic Flaw
DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful device owner, because there is no way to reset to Factory Default settings...
CVE-2020-12732
The CVE-2020-12732 entry concerns DEPSTECH WiFi Digital Microscope 3, which ships with a default SSID Jetion_xxxxxxxx and a default password 12345678. Multiple connected sources (Red Hat, CNVD, CVE lists, etc.) confirm a vulnerability tied to these default credentials enabling access to sensitive...
CVE-2020-12732
DEPSTECH WiFi Digital Microscope 3 has a default SSID of Jetionxxxxxxxx with a password of 12345678...
CVE-2020-12734
DEPSTECH WiFi Digital Microscope 3 is affected. The vulnerability allows remote attackers to change the device’s SSID and password and potentially demand a ransom because there is no way to reset to Factory Default settings. The available documents describe the product and the insecure behavior b...
CVE-2020-12734
DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful device owner, because there is no way to reset to Factory Default settings...
CVE-2021-0590
In sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a privileged app to receive WiFi BSSID and SSID without location permissions due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User...
CVE-2021-0590
In sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a privileged app to receive WiFi BSSID and SSID without location permissions due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User...
Information disclosure
In sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a privileged app to receive WiFi BSSID and SSID without location permissions due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User...
CVE-2021-0590
In sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a privileged app to receive WiFi BSSID and SSID without location permissions due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User...
How one word can disable an iPhone’s WiFi functionality
A researcher has found a way to disable the WiFi functionality on iPhones by getting them to join a WiFi hotspot with a weird name. This shouldnt be happening. The first thing you learn in coding school when it comes to input which is literally any data a device has to do something with is to...
ASB-A-175213041
In sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a privileged app to receive WiFi BSSID and SSID without location permissions due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User...
Beware! Connecting to This Wireless Network Can Break Your iPhone's Wi-Fi Feature
A wireless network naming bug has been discovered in Apple's iOS operating system that effectively disables an iPhone's ability to connect to a Wi-Fi network. The issue was spotted by security researcher Carl Schou, who found that the phone's Wi-Fi functionality gets permanently disabled after...
RaspAP 操作系统命令注入漏洞
RaspAP is a simple wireless AP setup and management for Debian-based devices. An operating system command injection vulnerability exists in RaspAP, which stems from the failure to properly filter "interface", "ssid" in /hostapd in RaspAP versions 2.6 through 2.6.5, ";", "$" and other special...
Shenzhen Skyworth RN510 Information Disclosure Vulnerability
Overview ======== Title:- UnAuthenticated Sensitive information Discloser in RN510 Mesh Extender. CVE-ID :- CVE-2021-25326 Author: Kaustubh G. Padwad Vendor: Shenzhen Skyworth Digital Technology Company Ltd.http://www.skyworthdigital.com/products Products: 1. RN510 with firmware V.3.1.0.4 Tested...
TP-Link WR2041 缓冲区错误漏洞
TP-Link WR2041 is a wireless WIFI from TP-Link. A buffer error vulnerability exists in the TP-Link WR2041 v1 firmware, which can be exploited to cause a denial of service by sending an HTTP request with a long "ssid" parameter to the "userRpm The vulnerability can be exploited to cause a Denial o...
Skyworth Digital Technology RN510 Access Control Error Vulnerability
The RN510 is a dual-band wireless AC2100 access point from Skyworth Digital Technology. An access control error vulnerability exists in /cgi-bin/testversion.asp in the Skyworth Digital Technology RN510 version V.3.1.0.4. An attacker can exploit the vulnerability to obtain the SSID password and We...
CVE-2021-25326
Skyworth Digital Technology RN510 V.3.1.0.4 is affected by an incorrect access control vulnerability in/cgi-bin/testversion.asp. If Wi-Fi is connected but an unauthenticated user visits a URL, the SSID password and web UI password may be disclosed...
CVE-2021-25326
Skyworth Digital Technology RN510 V.3.1.0.4 is affected by an incorrect access control vulnerability in/cgi-bin/testversion.asp. If Wi-Fi is connected but an unauthenticated user visits a URL, the SSID password and web UI password may be disclosed...
CVE-2021-25326
Skyworth Digital Technology RN510 V.3.1.0.4 is affected by an incorrect access control vulnerability in/cgi-bin/testversion.asp. If Wi-Fi is connected but an unauthenticated user visits a URL, the SSID password and web UI password may be disclosed...