June 14, 2022—KB5014678 (OS Build 20348.768)

None None...

Researchers Find Bluetooth Signals Can be Fingerprinted to Track Smartphones

A new research undertaken by a group of academics from the University of California San Diego has revealed for the first time that Bluetooth signals can be fingerprinted to track smartphones and therefore, individuals. The identification, at its core, hinges on imperfections in the Bluetooth...

TOTOLINK EX1200T setNoticeCfg function command injection vulnerability

TOTOLINK EX1200T is a Wi-Fi range extender from China-based Gion Electronics TOTOLINK.A command injection vulnerability exists in TOTOLINK EX1200T V4.1.2cu.5215, which originates from the file lib/cstemodules/system in the setNoticeCfg function in the file lib/cstemodules/system fails to properly...

TOTOLINK EX1200T Information Disclosure Vulnerability (CNVD-2022-53566)

TOTOLINK EX1200T is a Wi-Fi range extender from China-based Gion Electronics TOTOLINK.TOTOLINK EX1200T is vulnerable to information disclosure, which can be exploited by attackers to obtain sensitive information wifikey, etc. without authorization...

TOTOLINK EX1200T Information Disclosure Vulnerability (CNVD-2022-53565)

TOTOLINK EX1200T is a Wi-Fi range extender from China-based Gion Electronics TOTOLINK.TOTOLINK EX1200T is vulnerable to information disclosure, which can be exploited by attackers to obtain sensitive information wifikey, wifiname, etc. without authorization...

TOTOLINK EX1200T has unspecified vulnerabilities

TOTOLINK EX1200T is a Wi-Fi range extender from China-based Gion Electronics TOTOLINK.A security vulnerability exists in TOTOLINK EX1200T V4.1.2cu.5215, which can be exploited by attackers to send specific requests to bypass login via formLoginAuth.htm...

TOTOLINK EX1200T Information Disclosure Vulnerability (CNVD-2022-53567)

TOTOLINK EX1200T is a Wi-Fi range extender from China-based Gion Electronics TOTOLINK.TOTOLINK EX1200T is vulnerable to information disclosure, which can be exploited by attackers to obtain sensitive information wifikey, etc. without authorization via getSysStatusCfg...

CVE-2022-30729

Implicit Intent hijacking vulnerability in Settings prior to SMR Jun-2022 Release 1 allows attackers to get Wi-Fi SSID and password via a malicious QR code scanner...

Information disclosure

Implicit Intent hijacking vulnerability in Settings prior to SMR Jun-2022 Release 1 allows attackers to get Wi-Fi SSID and password via a malicious QR code scanner...

CVE-2022-30729

CVE-2022-30729: Implicit Intent hijacking vulnerability in Samsung Settings prior to SMR Jun-2022 Release 1 enables retrieval of Wi‑Fi SSID and passwords via a malicious QR scanner. Affected component: Samsung Settings; root cause is misuse of implicit intents that can be hijacked by unprivileged...

CVE-2022-30729

Implicit Intent hijacking vulnerability in Settings prior to SMR Jun-2022 Release 1 allows attackers to get Wi-Fi SSID and password via a malicious QR code scanner...

Samsung mobile 安全漏洞

Samsung Settings is a settings feature for Samsung Samsung mobile devices.An implicit intent hijacking vulnerability exists in Samsung Settings. The vulnerability stems from hijacking of unprivileged applications and can be exploited by attackers to obtain Wi-Fi SSIDs and passwords using a...

TOTOLINK EX1200T Command Injection Vulnerability

TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK.A command injection vulnerability exists in TOTOLINK EX1200T, which stems from a remote command injection issue in the setDeviceName function of the global.so file, which could be exploited to control the device nam...

TOTOLINK EX1200T Command Injection Vulnerability (CNVD-2022-53572)

TOTOLINK EX1200T is a Wi-Fi range extender from China-based TOTOLINK, and a command injection vulnerability exists in TOTOLINK EX1200T. deviceName to conduct attacks...

TOTOLINK EX1200T Command Injection Vulnerability (CNVD-2022-53570)

TOTOLINK EX1200T is a Wi-Fi range extender from China-based TOTOLINK, and a command injection vulnerability exists in TOTOLINK EX1200T. langType to conduct attacks...

TOTOLINK EX1200T Denial of Service Vulnerability

TOTOLINK EX1200T is a Wi-Fi range extender from China-based Gion Electronics TOTOLINK.A denial of service vulnerability exists in TOTOLINK EX1200T, which can be exploited by attackers to cause a denial of service or reboot the system...

CVE-2022-30521

The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1FW107b09.bin and previous versions. The function created at 0x17958 of /htdocs/cgibin will call sprintf without checking the length of strings in parameters...

Stack overflow

The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1FW107b09.bin and previous versions. The function created at 0x17958 of /htdocs/cgibin will call sprintf without checking the length of strings in parameters...

ASB-A-228972609

In WIFI Firmware, there is a possible memory corruption due to a use after free. This could lead to remote code execution, when devices are connecting to the attacker-controllable Wi-Fi hotspot, with no additional execution privileges needed. User interaction is not needed for exploitation...

FreeBSD 802.11 Network Subsystem Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of FreeBSD Kernel. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of 802.11 Wi-Fi beacon frames. The issue results from the lack of...