887 matches found
Marvell chipset wireless access points buffer overflow
Buffer overflow on association request processing...
Aruba wireless access points DoS
Crash on malformed 802.11 association request frame...
3Com Wireless 8760 access point unauthorized access
During authorized user's session it's possible for another user to access configuration pages without authentication...
alink-xsrfxss.xt
Louhi Networks Information Security Research Security Advisory Advisory: A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability Release Date: 2008/10/31 Last Modified: 2008/10/28 Authors: Jussi Vuokko, CISSP [email protected] Henri Lindberg [email protected] Device: A-Link WL54AP3 and WL54AP...
Marvel chipset wireless access points DoS
Malformed association request causes access point to hang or reboot...
Proxim Tsunami MP.11 2411 Wireless Access Point - system.sysName.0 SNMP HTML Injection
Proxim Tsunami MP.11 2411 Wireless Access Point - system.sysName.0 SNMP HTML Injection source: https://www.securityfocus.com/bid/31666/info The Proxim Tsunami MP.11 2411 Wireless Access Point is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input...
Proxim Tsunami MP.11 2411 Wireless Access Point - 'system.sysName.0' SNMP HTML Injection
source: https://www.securityfocus.com/bid/31666/info The Proxim Tsunami MP.11 2411 Wireless Access Point is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Attacker-supplied HTML and script code would run in the context of the web...
NETGEAR WN802T Wireless Access Point EAPoL密钥长度拒绝服务漏洞
BUGTRAQ ID: 31013 CVE ID：CVE-2008-1144 CNCVE ID：CNCVE-20081144 NETGEAR WN802T Wireless Access Point是一款无线路由接入点。 NETGEAR WN802T Wireless Access Point不正确处理EAPoL报文中的超长密钥长度，远程攻击者可以利用漏洞对服务进行拒绝服务攻击。 发送特殊构建的EAPoL报文可触发此漏洞，不过只有通过802.11验证后才能利用无线访问接入点的"Open"模式配置和成功关联恰当的安全参数如WPA w/ TKIP unicast, TKIP multicas...
Linksys WRT54G (firmware 1.00.9) Security Bypass Vulnerabilities (2)
Exploit for hardware platform in category remote exploits ==================================================================== Linksys WRT54G firmware 1.00.9 Security Bypass Vulnerabilities 2 ==================================================================== | l/ l j| \ / \ | \l j| \ | T l j| \...
CVE-2003-1346
D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager...
Boa webserver Intersil extension (multiple wireless access points) buffer overflow
Buffer overflow in HTTP Basic authentication allows to access device without password...
Boa (with Intersil Extensions) - HTTP Basic Authentication Bypass
Secure Network - Security Research Advisory Vuln name: HTTP Basic Authentication Bypass Systems affected: Boa/0.93.15 with Intersil Extensions based systems i.e. FreeLan 802.11g Wireless Access Point RO80211G-AP Severity: High Local/Remote: Remote Vendor URL: http://www.boa.org -...
CVE-2007-2041
Cisco Wireless LAN Controller WLC before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195...
D-Link D-LINK DWL-2000AP+ wireless access point DoS
No description provided by source. / ARP FLOODER v0.1 - [email protected] - 2006-12-04 designed to crash D-LINK DWL-2000AP+ compile with: gcc arpflood.c -o arpflood / define BSDSOURCE 1 define GNUSOURCE include stdio.h include stdlib.h include string.h include stdarg.h include fcntl.h include...
Cisco wireless access points unauthorized access
It's possible reset access point security settings to defaults...
CVE-2006-3291
The web interface on Cisco IOS 12.38JA and 12.38JA1, as used on the Cisco Wireless Access Point and Wireless Bridge, reconfigures itself when it is changed to use the "Local User List Only Individual Passwords" setting, which removes all security and password configurations and allows remote...
CVE-2006-2901
The web server for D-Link Wireless Access-Point DWL-2100ap firmware 2.10na and earlier allows remote attackers to obtain sensitive system information via a request to an arbitrary .cfg file, which returns configuration information including passwords...
CVE-2006-2901
The CVE-2006-2901 entry concerns the D-Link DWL-2100ap wireless access point, with firmware 2.10na and earlier. The web server in these devices can be coerced to reveal sensitive configuration data by requesting an arbitrary .cfg file, exposing passwords and other config information. This is a di...