Input validation

A vulnerability in the integrated wireless access point AP packet processing of the Cisco 1000 Series Connected Grid Router CGR1K could allow an unauthenticated, adjacent attacker to cause a denial of service condition on an affected device. This vulnerability is due to insufficient input...

CVE-2022-20761

CVE-2022-20761 affects Cisco 1000 Series Connected Grid Router (CGR1K) integrated Wireless AP packet processing. The root cause is insufficient input validation of received traffic, enabling an unauthenticated, adjacent attacker to cause DoS by sending crafted traffic, potentially requiring a man...

CVE-2022-20761 Cisco 1000 Series Connected Grid Router Integrated Wireless Access Point Denial of Service Vulnerability

A vulnerability in the integrated wireless access point AP packet processing of the Cisco 1000 Series Connected Grid Router CGR1K could allow an unauthenticated, adjacent attacker to cause a denial of service condition on an affected device. This vulnerability is due to insufficient input...

Cisco 1000 Series Connected Grid Router 输入验证错误漏洞

The Cisco 1000 Series Connected Grid Routers CGR1000 is a 1000 Series Internet Grid Router from Cisco. A security vulnerability exists in the Cisco 1000 Series Connected Grid Router that stems from insufficient validation of incoming traffic input during packet processing for integrated wireless...

CVE-2022-20761

A vulnerability in the integrated wireless access point AP packet processing of the Cisco 1000 Series Connected Grid Router CGR1K could allow an unauthenticated, adjacent attacker to cause a denial of service condition on an affected device. This vulnerability is due to insufficient input...

Cisco 1000 Series Connected Grid Router Integrated Wireless Access Point Denial of Service Vulnerability

A vulnerability in the integrated wireless access point AP packet processing of the Cisco 1000 Series Connected Grid Router CGR1K could allow an unauthenticated, adjacent attacker to cause a denial of service condition on an affected device. This vulnerability is due to insufficient input...

Netgear W104 has an unspecified vulnerability

Netgear W104 is a wireless access point from Netgear, Inc. A security vulnerability exists in Netgear W104 WAC104-V1.0.4.13, which stems from a lack of protection and privilege restrictions for sensitive information in the MNUtop.htm page. An attacker without authentication can access the page an...

Netgear W104 has an unspecified vulnerability (CNVD-2022-22305)

Netgear W104 is a wireless access point from Netgear, Inc. A security vulnerability exists in Netgear W104 WAC104-V1.0.4.13, which stems from a lack of protection and privilege restrictions for sensitive information on the BRStop.html page. An unauthenticated attacker could access the page and us...

CVE-2022-25829

Information Exposure vulnerability in Watch Active2 Plugin prior to version 2.2.08.22012751 allows attacker to access password information of connected WiFiAp in the log...

NETGEAR WAC120 Cross-Site Scripting Vulnerability

Netgear NETGEAR WAC120 is a wireless access point AP from Netgear, Inc. A cross-site scripting vulnerability exists in the Netgear WAC120 AC Access Point, which stems from unauthenticated cross-site scripting XSS could lead to a variety of attacks, such as session hijacking or even clipboard...

Fortinet FortiAP-C OS Command Injection Vulnerability

Fortinet FortiAP, a Fortinet controller for managing wireless access point devices, is vulnerable to an operating system command injection vulnerability that stems from the lack of valid escaping and filtering of special elements used in the FortiAP-C console, which could be exploited by an...

CVE-2021-35004

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link TL-WA1201 1.0.1 Build 20200709 rel.662445553 wireless access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS response...

CVE-2021-35004

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link TL-WA1201 1.0.1 Build 20200709 rel.662445553 wireless access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS response...

TP-Link TL-WA1201 Buffer Overflow Vulnerability

Tp-Link Tl-Wa1201 is a dual-band wireless access point from Tp-Link China. A buffer overflow vulnerability exists in the TP-Link TL-Wa1201 that stems from the product's failure to properly determine memory boundaries when processing DNS messages. An unauthenticated attacker could exploit this...

KING JIM Label printer 访问控制错误漏洞

KING JIM Label printer is a label printer from KING JIM Japan. An access control error vulnerability exists in the KING JIM Label printer, which stems from the product not adding adequate protection for credentials. An attacker could use this vulnerability to obtain credentials, connect to a Wi-F...

The vulnerability in the implementation of the Control Point and Wireless Access Point Provisioning Protocol (CAPWAP) of the Cisco IOS XE operating system allows a attacker to trigger a service failure.

The vulnerability of the CAPWAP management protocol implementation and wireless access point provisioning in Cisco IOS XE operating systems is related to insufficient validation of CAPWAP packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Fortinet Meru AP Code Injection Vulnerability

Fortinet Meru Ap is a wireless access point from Fortinet, Inc. Fortinet Meru AP is vulnerable to code injection in versions 8.6.1 and 8.5.5 and below. The vulnerability stems from a failure of the network system or product to properly filter special elements in code segments constructed from...

The vulnerability of the webproc script implementation in D-Link DAP-2020 wireless access points allows a intruder to execute arbitrary code.

The vulnerability of the webproc script implementation in D-Link DAP-2020 wireless access points is related to buffer overflow on the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2021-37964

Inappropriate implementation in ChromeOS Networking in Google Chrome on ChromeOS prior to 94.0.4606.54 allowed an attacker with a rogue wireless access point to to potentially carryout a wifi impersonation attack via a crafted ONC file...

Information disclosure

Inappropriate implementation in ChromeOS Networking in Google Chrome on ChromeOS prior to 94.0.4606.54 allowed an attacker with a rogue wireless access point to to potentially carryout a wifi impersonation attack via a crafted ONC file...