5608 matches found
Code injection
Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...
CVE-2022-35908
Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...
CVE-2022-35908
Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...
CVE-2022-35908
The CVE-2022-35908 affects Cambium Enterprise Wi‑Fi System Software prior to 6.4.2. Root cause: the device-agent does not sanitize the ping host argument. Impact is described as high (C, I, A all high) with Network attack vector and no user interaction required. Remediation: upgrade to version 6....
Amazon Linux 2 : microvm-kernel (ALASMICROVM-KERNEL-4.14-2023-003)
The version of microvm-kernel installed on the remote host is prior to 4.14.246-200.474. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2MICROVM-KERNEL-4.14-2023-003 advisory. A flaw was found in the Linux kernel's implementation of wireless drivers using the...
HP LaserJet Printers Multiple Vulnerabilities (HPSBPI03574)
The remote HP LaserJet printer is potentially affected by the following vulnerabilities: - Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Pairwise Transient Key PTK Temporal Key TK during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoo...
ASUS RT-AX55 Command Injection Vulnerability
The ASUS RT-AX55 is a dual-band Wi-Fi router from the Chinese company ASUS. A command injection vulnerability exists in ASUS RT-AX55 version v3.0.0.4.386.51598, which stems from the application failing to properly filter construct command special characters, commands, etc. An attacker can exploit...
CVE-2023-36161
An issue was discovered in Qubo Smart Plug 10A version HSP02010114SYSTEM-10A, allows attackers to cause a denial of service DoS via Wi-Fi deauthentication...
Design/Logic Flaw
An issue was discovered in Qubo Smart Plug 10A version HSP02010114SYSTEM-10A, allows attackers to cause a denial of service DoS via Wi-Fi deauthentication...
CVE-2023-40039
An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame...
CVE-2023-36161
An issue was discovered in Qubo Smart Plug 10A version HSP02010114SYSTEM-10A, allows attackers to cause a denial of service DoS via Wi-Fi deauthentication...
CVE-2023-40039
An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame...
CVE-2023-40039
The CVE-2023-40039 issue affects ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker within Wi‑Fi proximity can derive the default WPA2‑PSK by observing beacon frames, enabling potential unauthorized access to the network (impact described as total). Public details consistently identify ...
CVE-2023-40039
An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame...
CVE-2023-36161
The CVE-2023-36161 entry concerns the Qubo Smart Plug 10A, specifically version HSP02_01_01_14_SYSTEM-10A. The connected documents corroborate a vulnerability that enables an attacker to cause a denial of service (DoS) through Wi‑Fi deauthentication. The risk is tied to the product’s Wi‑Fi handli...
Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2021-9453)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-9453 advisory. - KVM: do not allow mapping valid but non-reference-counted pages Nicholas Piggin Orabug: 33054089 CVE-2021-22543 CVE-2021-22543 - Input: joydev -...
FreeBSD : FreeBSD -- Wi-Fi encryption bypass (924cb116-4d35-11ee-8e38-002590c1f29c)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 924cb116-4d35-11ee-8e38-002590c1f29c advisory. - The IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept...
Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9452)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9452 advisory. - KVM: do not allow mapping valid but non-reference-counted pages Nicholas Piggin Orabug: 33054089 CVE-2021-22543 CVE-2021-22543 - Input: joydev -...