Lucene search
+L

902 matches found

Talos Blog
Talos Blog
added 2024/06/26 4:00 p.m.87 views

Multiple vulnerabilities in TP-Link Omada system could lead to root access

The TP-Link Omada system is a software-defined networking solution for small to medium-sized businesses. It touts cloud-managed devices and local management for all Omada devices. The supported devices in this ecosystem vary greatly but include wireless access points, routers, switches, VPN devic...

8.1CVSS9.4AI score0.13479EPSS
SaveExploits14
Arista
Arista
added 2024/06/25 12:00 a.m.55 views

Security Advisory 0098

Security Advisory 0098 . CSAF PDF Date: June 25, 2024 Revision | Date | Changes ---|---|--- 1.0 | June 25, 2024 | Initial release The CVE-ID tracking this issue: CVE-2024-4578 CVSSv3.1 Base Score: 8.4 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H Common Weakness Enumeration: CWE-77 Improper...

8.4CVSS6.7AI score0.00487EPSS
SaveExploits0
CNVD
CNVD
added 2024/06/21 12:00 a.m.15 views

TRENDnet TEW-814DAP Stack Buffer Overflow Vulnerability (CNVD-2025-17862)

The TRENDnet TEW-814DAP is a wireless access point from TRENDnet. The TRENDnet TEW-814DAP suffers from a stack buffer overflow vulnerability that stems from the submit-url parameter at /formSysLog failing to properly validate the length of the input data, which could be exploited by an attacker t...

8.8CVSS7.2AI score0.00683EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/06/17 12:00 a.m.16 views

PT-2024-27703 · Xiaomi · Redmi Router Rb03

Name of the Vulnerable Software and Affected Versions: Redmi router RB03 version 1.0.57 Description: The issue allows an attacker in the same WLAN as the victim to disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mapping...

5.2CVSS7.4AI score0.00374EPSS
SaveExploits1References3
Arista
Arista
added 2024/05/24 12:00 a.m.58 views

Security Advisory 0097

Security Advisory 0097 PDF Date: May 24, 2024 Revision | Date | Changes ---|---|--- 1.0 | May 24, 2024 | Initial release The CVE-ID tracking this issue: CVE-2023-52424 CVSSv3.1 Base Score: Not indicated by NVD as of 5/23/2024 Description Arista Networks is providing this security update in respon...

7.4CVSS7.3AI score0.00716EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:00 a.m.10 views

The vulnerability of the DDP microprogramming software-based wireless access point D-Link DAP-2622 allows a intruder to execute arbitrary code.

The vulnerability of the DDP microprogramming software-based wireless access point D-Link DAP-2622 lies in buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8.3AI score0.00605EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:00 a.m.11 views

The vulnerability of the DDP microprogramming software-based wireless access point D-Link DAP-2622 allows a intruder to make unauthorized changes to the device’s configuration.

The vulnerability of the DDP microprogramming software-based wireless access point D-Link DAP-2622 lies in the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to remotely make unauthorized changes to device configurations...

5.4CVSS5.9AI score0.00335EPSS
SaveExploits0References5
CNVD
CNVD
added 2024/05/10 12:00 a.m.52 views

Unspecified Vulnerability in D-Link DAP-2622 (CNVD-2024-24417)

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 that stems from a lack of authentication in the DDP Settings SSID list. No details of the vulnerability are provided at this time...

5.4CVSS7AI score0.00335EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/05/10 12:00 a.m.53 views

Unspecified Vulnerability in D-Link DAP-2622

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 due to a stack-based buffer overflow remote code execution vulnerability in the DDP firmware upgrade file name. An attacker could exploit the vulnerabilit...

8.8CVSS8.3AI score0.00605EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/05/08 12:00 a.m.39 views

Tenda i21 formWifiMacFilterSet function buffer overflow vulnerability

Tenda i21 is a wireless access point from Tenda China. A buffer overflow vulnerability exists in Tenda i21 version 1.0.0.144656, which originates from the parameter ssidIndex of the function formWifiMacFilterSet that fails to correctly validate the length of the input data, and can be exploited b...

9CVSS8.3AI score0.01453EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/05/08 12:00 a.m.13 views

Tenda i21 formsetStaOffline function buffer overflow vulnerability

Tenda i21 is a wireless access point from Tenda China. A buffer overflow vulnerability exists in Tenda i21 version 1.0.0.144656, which originates from the parameter GO/ssidIndex in the file /goform/setStaOffline that fails to correctly validate the length and size of the input data, and can be...

9CVSS8.3AI score0.01453EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/05/08 12:00 a.m.7 views

Tenda i21 formWifiMacFilterGet function buffer overflow vulnerability

Tenda i21 is a wireless access point from Tenda China. A buffer overflow vulnerability exists in Tenda i21 version 1.0.0.144656, which originates from the parameter index of the function formWifiMacFilterGet that fails to correctly validate the length of the input data, and can be exploited by a...

9CVSS8.3AI score0.01453EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/05/07 12:00 a.m.10 views

D-Link DAP-2622 安全漏洞

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 that stems from a lack of authentication in the DDP Settings SSID list. No details of the vulnerability are provided at this time...

5.4CVSS7AI score0.00335EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/07 12:00 a.m.9 views

D-Link DAP-2622 安全漏洞

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 that stems from a stack-based buffer overflow remote code execution vulnerability in the DDP Set Date Time NTP server. An attacker could exploit the...

8.8CVSS8.5AI score0.00605EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.10 views

D-Link DAP-1325 安全漏洞

The D-Link DAP-1325 is a wireless access point/bridge from China's AUO D-Link that is primarily used to provide wireless network coverage and has a bridging function that can convert a wired network to a wireless network or connect two wireless networks together. A security vulnerability exists i...

8.8CVSS9.3AI score0.00855EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.10 views

D-Link DAP-1325 安全漏洞

The D-Link DAP-1325 is a wireless access point/bridge from China's AUO D-Link, which is primarily used to provide wireless network coverage and has a bridging function that allows you to convert a wired network to a wireless network or connect two wireless networks together. The D-Link DAP-1325...

8.8CVSS7.9AI score0.01187EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.8 views

D-Link DAP-1325 安全漏洞

The D-Link DAP-1325 is a wireless access point/bridge from China's AUO D-Link, which is primarily used to provide wireless network coverage and has a bridging function that allows you to convert a wired network to a wireless network or connect two wireless networks together. The D-Link DAP-1325...

8.8CVSS7.9AI score0.01187EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.10 views

D-Link DAP-1325 安全漏洞

The D-Link DAP-1325 is a wireless access point/bridge from China's AUO D-Link, which is primarily used to provide wireless network coverage and has a bridging function that allows you to convert a wired network to a wireless network or connect two wireless networks together. The D-Link DAP-1325...

8.8CVSS8.1AI score0.01187EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.8 views

D-Link DAP-2622 安全漏洞

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability, which stems from a...

8.8CVSS8.8AI score0.0076EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.10 views

D-Link DAP-2622 安全漏洞

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. The D-Link DAP-2622 suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute code in the root context...

8.8CVSS7.7AI score0.01019EPSS
SaveExploits0References3
Rows per page
Query Builder