CVE-2020-25856

Summary: CVE-2020-25856 affects Realtek RTL8195A Wi‑Fi Module. A stack buffer overflow exists in DecWPA2KeyData() due to unvalidated size in an rtl_memcpy() call for versions released before April 2020 (up to and excluding 2.08). This can be exploited to achieve remote code execution or denial of...

CVE-2020-25856

The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of...

CVE-2020-25857

The function ClientEAPOLKeyRecvd in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for denial of service. An attacker c...

CVE-2020-25857

Realtek RTL8195A Wi‑Fi Module is affected: the function ClientEAPOLKeyRecvd() fails to validate the size parameter for an rtl_memcpy(), causing a stack buffer overflow in versions prior to 2.08 (released by April 2020). This can allow a remote attacker to impersonate an Access Point and inject a ...

CVE-2020-25035

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with root privileges using chrootholeclient's PHP call, a related issue to CVE-2017-11322...

CVE-2020-25036

UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, and access a shell with admin user rights, via an unprotected less command...

Command injection

UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, and access a shell with admin user rights, via an unprotected less command...

Design/Logic Flaw

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with root privileges using chrootholeclient's PHP call, a related issue to CVE-2017-11322...

CVE-2020-25037

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command...

Command injection

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command...

CVE-2020-25035

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with root privileges using chrootholeclient's PHP call, a related issue to CVE-2017-11322...

CVE-2020-25035

CVE-2020-25035 affects UCOPIA Wireless Appliance; the vulnerability lies in the chroothole_client executable, where a dollar-sign metacharacter in the argument can lead to root code execution . Related entries (e.g., CVE-2017-11322) describe remote privilege escalation via the same component befo...

CVE-2020-25036

CVE-2020-25036 affects UCOPIA Wi‑Fi appliances 6.0.5. An authenticated attacker can escape the restricted administration shell (CLI) and obtain a shell with admin rights via an unprotected less command. The available documents do not specify a patch/version to remediate or details about in‑the‑wi...

CVE-2020-25036

UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, and access a shell with admin user rights, via an unprotected less command...

CVE-2020-25037

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command...

CVE-2020-25037

CVE-2020-25037 affects UCOPIA Wi‑Fi appliances 6.0.5, where an escape from a restricted command allows arbitrary code execution with admin privileges. The underlying cause is a command‑injection style path enabling elevation to admin level. Exploitation status is not detailed in the provided docu...

ASB-A-172937525

In p2pcopyclientinfo of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation...

European Authorities Disrupt Emotet — World's Most Dangerous Malware

Law enforcement agencies from as many as eight countries dismantled the infrastructure of Emotet, a notorious email-based Windows malware behind several botnet-driven spam campaigns and ransomware attacks over the past decade. The coordinated takedown of the botnet on Tuesday — dubbed "Operation...

ADT Security Camera Flaws Open Homes to Eavesdropping

UPDATE Researchers have publicly disclosed security flaws found in ADT-owned LifeShield security cameras, which, if exploited, could have allowed a local attacker to eavesdrop on victims’ conversations or tap into a live video feed. The LifeShield brand is owned by security giant ADT. Specificall...

Denial of Service Vulnerability in FAX1800R Gigabit Edition

The FAX1800R Gigabit Edition is a Wi-Fi 6 wireless router. A denial of service vulnerability exists in FAX1800R Gigabit Edition, which can be exploited by attackers to cause a denial of service attack...