CVE-2023-37566

Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to the web management page. Affected products and versions are as follows: WRC-1167GHBK3-A v1.24 and...

CVE-2023-37566

Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to the web management page. Affected products and versions are as follows: WRC-1167GHBK3-A v1.24 and...

CVE-2023-37561

Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Affected products and versions are as follows: WRH-300WH-H v2.12...

CVE-2023-37561

CVE-2023-37561 Open Redirect affecting ELECOM wireless LAN devices: WRH-300WH-H (v2.12 and earlier), WTC-300HWH (v1.09 and earlier), WTC-C1167GC-B (v1.17 and earlier), and WTC-C1167GC-W (v1.17 and earlier). A remote, unauthenticated attacker can cause users to be redirected to arbitrary websites ...

JVN#05223215: Multiple vulnerabilities in multiple ELECOM wireless LAN routers and wireless LAN repeaters

Wireless LAN routers and wireless LAN repeaters provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2023-37560 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...

PT-2023-19829 · Qualcomm · Qm215 Firmware +147

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the WLAN HOST when it parses a QMI WLAN Firmware response message. Recommendations: At the moment, there is no...

MediaTek Chipsets 输入验证错误漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from a possible system crash due to an uncaught exception in the wlan firmware, which could lead to a remote denial of service...

PT-2023-21790 · Wlan Host · Wlan Host

Name of the Vulnerable Software and Affected Versions: WLAN HOST affected versions not specified Description: The issue is related to memory corruption in the WLAN HOST when fetching TX status information. Recommendations: At the moment, there is no information about a newer version that contains...

CVE-2023-34565

Netbox 3.5.1 is vulnerable to Cross Site Scripting XSS in the "Create Wireless LAN Groups" function...

Cross site scripting

Netbox 3.5.1 is vulnerable to Cross Site Scripting XSS in the "Create Wireless LAN Groups" function...

Netbox 跨站脚本漏洞

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A security vulnerability exists in Netbox version 3.5.1 that stems from a stored cross-site scripting XSS vulnerability in the Create Wireless LAN...

CVE-2023-34565

Netbox 3.5.1 is vulnerable to Cross Site Scripting XSS in the "Create Wireless LAN Groups" function...

CVE-2023-34565

The CVE-2023-34565 entry affects NetBox 3.5.1, with a stored Cross-Site Scripting (XSS) vulnerability in the Create Wireless LAN Groups function. According to multiple sources, NetBox 3.5.1 is vulnerable to XSS in that feature, labeled as stored XSS in CNNVD/CVE records, and the vulnerability has...

PT-2023-24923 · Netbox · Netbox

Name of the Vulnerable Software and Affected Versions: Netbox version 3.5.1 Description: The issue is related to Cross Site Scripting XSS in the "Create Wireless LAN Groups" function. This allows for malicious scripts to be injected into the website, potentially leading to unauthorized access or...

CVE-2023-34565

Netbox 3.5.1 is vulnerable to Cross Site Scripting XSS in the "Create Wireless LAN Groups" function...

CVE-2023-20716

In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07796883; Issue ID: ALPS07796883...

PT-2023-17578 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: wlan affected versions not specified Description: The issue is related to a possible out of bounds write in wlan due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User...

PT-2023-18323 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a transient Denial of Service DOS in WLAN Firmware that occurs while parsing FT Information Elements. Recommendations: At the moment, there is no information...

PT-2023-17577 · Mediatek +3 · Mt5221 +4

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write in wlan due to a missing bounds check. This could lead to local escalation of privilege, with...

The vulnerability of Cisco Aironet Access Point microprogramming software and Cisco Wireless LAN Controller (WLC) microprogramming software, related to access control deficiencies, allows attackers to circumvent security restrictions.

The vulnerability of Cisco Aironet Access Point microprogramming software and Cisco Wireless LAN Controller WLC microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...