CVE-2024-28728

Cross Site Scripting vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M1.34ME allows a local attacker to obtain sensitive information via a crafted payload to the WiFi SSID Name field...

CVE-2020-11926

An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Clients can authenticate themselves to the device using a username and password. These credentials can be obtained through an unauthenticated web request, e.g., for a JavaScript file. Also, the disclosed information...

CVE-2020-11917

An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. It uses a default SSID value, which makes it easier for remote attackers to discover the physical locations of many Siime Eye devices, violating the privacy of users who do not wish to disclose their ownership of this type of...

Svakom Siime Eye 安全漏洞

Svakom Siime Eye is a smart home device from Svakom, USA. A security vulnerability exists in Svakom Siime Eye version 14.1.00000001.3.330.0.0.3.14, which stems from the use of a default SSID value that makes it easier for a remote attacker to discover the physical location of the device, violatin...

CVE-2020-11917

An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. It uses a default SSID value, which makes it easier for remote attackers to discover the physical locations of many Siime Eye devices, violating the privacy of users who do not wish to disclose their ownership of this type of...

CVE-2020-11917

CVE-2020-11917 affects Siime Eye 14.1.00000001.3.330.0.0.3.14. The issue stems from a default SSID value, enabling remote attackers to map devices to physical locations and thus disclose ownership/privacy. Public details across multiple sources (Red Hat, CNNVD, NVD) describe the same privacy impa...

CVE-2020-11917

An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. It uses a default SSID value, which makes it easier for remote attackers to discover the physical locations of many Siime Eye devices, violating the privacy of users who do not wish to disclose their ownership of this type of...

CVE-2020-11926

An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Clients can authenticate themselves to the device using a username and password. These credentials can be obtained through an unauthenticated web request, e.g., for a JavaScript file. Also, the disclosed information...

CVE-2020-11926

CVE-2020-11926 affects Luvion Grand Elite 3 Connect (through 2020-02-25). The issue allows a client to authenticate with a username/password, with credentials retrievable via an unauthenticated web request (e.g., a JavaScript file). The disclosure also includes the device’s Wi‑Fi SSID and WPA2 ke...

CVE-2024-51022

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid parameter in bridgewirelessmain.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

NETGEAR XR300 安全漏洞

NETGEAR XR300 is a wireless router from NETGEAR. A security vulnerability exists in NETGEAR XR300 version v1.0.3.78, which stems from a buffer overflow vulnerability contained in the ssid parameter in the bridgewirelessmain.cgi component...

CVE-2024-51022

Netgear XR300, v1.0.3.78, contains a stack overflow in bridge_wireless_main.cgi when processing the ssid parameter, allowing a crafted POST to cause a Denial of Service. Public details across NVD/Red Hat/CVE records confirm the issue but do not provide an attacker’s exploit vector beyond the POST...

PT-2024-8266 · NetGear · Netgear Xr300

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue is related to a buffer overflow in the bridge wireless main.cgi script of Netgear XR300 routers, specifically when handling the ssid parameter. This can be exploited by sending a specially...

CVE-2024-51432

The CVE-2024-51432 entry concerns FiberHome HG6544C RP2743, where the SSID field in the WIFI Clients List is not properly sanitized, enabling Cross Site Scripting that can lead to arbitrary code execution. Affected component: SSID handling in the WIFI Clients List on FiberHome HG6544C RP2743. Roo...

CVE-2024-51432

Cross Site Scripting vulnerability in FiberHome HG6544C RP2743 allows an attacker to execute arbitrary code via the SSID field in the WIFI Clients List not being sanitized...

CVE-2024-31973

Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via the 'Network Name SSID' input fields to the /index.htmlwirelessbasic page...

CVE-2024-31975

EnGenius EWS356-Fit devices through 1.1.30 allow a remote attacker to conduct stored XSS attacks via the Wi-Fi SSID parameters. JavaScript embedded into a vulnerable field is executed when the user clicks the SSID field's corresponding EDIT button...

CVE-2024-31975

EnGenius EWS356-Fit devices through 1.1.30 allow a remote attacker to conduct stored XSS attacks via the Wi-Fi SSID parameters. JavaScript embedded into a vulnerable field is executed when the user clicks the SSID field's corresponding EDIT button...

CVE-2024-48214

CVE-2024-48214 affects the Kerui HD 3MP 1080P Tuya Camera (version 1.0.4). The vulnerability is a command injection in the QR code–based local network connection module. An attacker can craft an unauthenticated QR code and abuse a JSON parameter (SSID or PASSWORD) to execute arbitrary code on the...

EnGenius ESR580 安全漏洞

The EnGenius ESR580 is a series of wireless access points from EnGenius. A security vulnerability exists in the EnGenius ESR580 that originates from allowing remote attackers to conduct a stored cross-site scripting attack via the Wi-Fi SSID input field, which can lead to arbitrary JavaScript cod...