CVE-2004-1706

The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service device crash and possibly execute arbitrary code via an HTTP GET request with a long version string...

U.S. Robotics USR808054 Wireless Access Point - Web Administration Denial of Service

source: https://www.securityfocus.com/bid/10840/info The USR808054 wireless access point is reported to contain a denial of service vulnerability in its embedded web server. When malicious requests are received by the device, it will reportedly crash, denying service to legitimate users of the...

NETGEAR Wireless Access Point Hardcoded Default Password

NETGEAR ships at least one device with a built-in administrator account. This account cannot be changed via the configuration interface and enables a remote attacker to control the NETGEAR device. To duplicate this error, simply point your browser to a vulnerable machine, and log in when prompted...

CVE-2003-1346

D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager...

CVE-2003-1264

TFTP server in Longshine Wireless Access Point WAP LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file config.img and other files without authentication...

WIDZ 1.0/1.5 - Remote Code Execution

source: https://www.securityfocus.com/bid/8479/info WIDZ does not validate untrusted input when generating alerts. Alerts pass the essid of an unknown wireless access point through a system call. By setting the essid of an unauthorized access point to include malformed information, the underlying...

CVE-2003-0270

Apple AirPort Base Station (802.11) is affected by CVE-2003-0270. The administrative protocol on TCP 5009 uses XOR with a fixed key to protect credentials, allowing an attacker that can sniff traffic over Ethernet or non-WEP wireless to obtain administrative access. The flaw impacts confidentiali...

CVE-2002-2137

GlobalSunTech Wireless Access Points 1 WISECOM GL2422AP-0T, and possibly OEM products such as 2 D-Link DWL-900AP+ B1 2.1 and 2.2, 3 ALLOY GL-2422AP-S, 4 EUSSO GL2422-AP, and 5 LINKSYS WAP11-V2.2, allow remote attackers to obtain sensitive information like WEP keys, the administrator password, and...

CVE-2001-0888

Atmel Firmware 1.3 Wireless Access Point WAP allows remote attackers to cause a denial of service via a SNMP request with 1 a community string other than "public" or 2 an unknown OID, which causes the WAP to deny subsequent SNMP requests...

CVE-2001-0888: Undefined Security Weakness

Atmel Firmware 1.3 Wireless Access Point WAP allows remote attackers to cause a denial of service via a SNMP request with 1 a community string other than "public" or 2 an unknown OID, which causes the WAP to deny subsequent SNMP requests...

Wireless Access Point Detection

Nessus has determined that the remote host is a wireless access point AP. Ensure that proper physical and logical controls are in place for its use. A misconfigured access point may allow an attacker to gain access to an internal network without being physically present on the premises. If the...

CVE-2001-1220

D-Link DWL-1000AP Firmware 3.2.28 483 Wireless LAN Access Point stores the administrative password in plaintext in the default Management Information Base MIB, which allows remote attackers to gain administrative privileges...

CVE-2001-0888

Atmel Firmware 1.3 Wireless Access Point WAP allows remote attackers to cause a denial of service via a SNMP request with 1 a community string other than "public" or 2 an unknown OID, which causes the WAP to deny subsequent SNMP requests...