ELECOM NCC-EWF100RMWH2 Cross-Site Request Forgery Vulnerability

The ELECOM NCC-EWF100RMWH2 is a wireless access device. The ELECOM NCC-EWF100RMWH2 suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to construct a malicious URI, bait a request, and perform a malicious operation in the context of the target user...

ELECOM WRC-300FEBK-A Cross-Site Request Forgery Vulnerability

The ELECOM WRC-300FEBK-A is a wireless access device. The ELECOM WRC-300FEBK-A suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to construct a malicious URI, bait a request, and perform a malicious operation in the context of the target user...

ELECOM WRC-300FEBK-S Arbitrary Command Execution Vulnerability

The ELECOM WRC-300FEBK-S is a wireless access device. An arbitrary command execution vulnerability exists in the ELECOM WRC-300FEBK-S, which can be exploited by an attacker to execute arbitrary OS commands...

Command Execution Vulnerability in MOXA AWK-1131A

The AWK-1131A is an industrial-grade wireless AP. A command execution vulnerability exists in the MOXA AWK-1131A, which can be exploited by an attacker to execute malicious code...

Security Advisory 0058

Security Advisory 0058 PDF Date: December 16th, 2020 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | December 16th, 2020 | Initial Release The CVE-ID tracking this issue is: CVE-2020-3702 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Description This advisory...

Weak password vulnerability in enterprise-class wireless APs from multiple vendors

An enterprise-class wireless AP is a network device. A weak password vulnerability exists in enterprise-class wireless APs from multiple vendors. An attacker can exploit the vulnerability to gain access to sensitive information by logging in with a weak password...

Binary Vulnerability in Tianrongxin TAP Series Smart Wireless AP Devices

Ltd. As a leading company in China's information security industry, TIANRONGXIN was founded in 1995 and is headquartered in Beijing. A binary vulnerability exists in Tianrongxin's TAP series Smart Wireless AP device, which can be exploited by attackers to gain control of the server...

Unauthorized Access Vulnerability in Tianrongxin TAP Series Smart Wireless AP Devices

Ltd. As a leading company in China's information security industry, TIANRONGXIN was founded in 1995 and is headquartered in Beijing. An unauthorized access vulnerability exists in TIANRONGXIN TAP series Smart Wireless AP devices, which can be exploited by an attacker to anonymously connect to the...

Binary Vulnerability in Alcatel OAW Series Smart Wireless AP Devices

Alcatel-Lucent, a multinational company providing telecommunications hardware and software equipment and services, is headquartered in Paris, France. A binary vulnerability exists in the Alcatel OAW series of Smart Wireless AP devices. An attacker can exploit this vulnerability to gain control of...

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst wireless network controllers and Catalyst 9100 access points allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation in the Cisco IOS XE operating system on Cisco Catalyst wireless network controllers and Catalyst 9100 access points is related to errors in processing input data. Exploiting this vulnerability can...

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 wireless controller and Catalyst 9100 access points allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation in the Cisco IOS XE operating system for Cisco Catalyst 9800 wireless controller and Catalyst 9100 access points is related to errors in processing input data. Exploiting this vulnerability can allow...

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 wireless controller and Catalyst 9100 access points allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation in the Cisco IOS XE operating system for Cisco Catalyst 9800 wireless controller and Catalyst 9100 access points is related to errors in processing input data. Exploiting this vulnerability can allow...

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to...

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to...

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to...

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause service interruptions.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to...

Cisco IOS and IOS XE Input Validation Error Vulnerability (CNVD-2020-70878)

Cisco IOS and IOS XE are both products of Cisco USA. the CLI is one of the command line interfaces. A security vulnerability exists in the Control and Provisioning Wireless Access Point CAPWAP protocol of the Cisco IOS XE software for the Cisco Catalyst 9800 series wireless controllers, which ste...

CVE-2020-3493

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition of an affected...

CVE-2020-3494

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition of an affected...

CVE-2020-3399

A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition of an affected device. The...