Lucene search
+L

1213 matches found

BDU FSTEC
BDU FSTEC
added 2022/10/31 12:00 a.m.14 views

The vulnerability of the WLAN operating system in Windows, which allows a hacker to increase their privileges

The vulnerability of the Windows WLAN operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.2AI score0.00486EPSS
SaveExploits0References3
OSV
OSV
added 2022/10/07 8:15 p.m.10 views

CVE-2022-32590

In wlan, there is a possible use after free due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07299425; Issue ID: ALPS07299425...

6.7CVSS5.9AI score0.00136EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/10/07 12:00 a.m.9 views

MediaTek 芯片 缓冲区错误漏洞

MediaTek Inc. is the world's fourth largest fab semiconductor company and a market leader in mobile devices, smart home applications, wireless connectivity technologies and IoT products, with approximately 1.5 billion devices a year with MediaTek chips built into them available around the world...

6.7CVSS6.8AI score0.00097EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/10/05 12:00 a.m.100 views

Cisco Wireless LAN Controller AireOS Software FIPS Mode DoS (cisco-sa-wlc-dos-mKGRrsCB)

According to its self-reported version, Cisco Wireless LAN Controller WLC is affected by a denial of service Dos vulnerability. An unauthenticated, network-adjacent attacker can send specially crafted packets to an affected device causing it to crash. Please see the included Cisco BIDs and Cisco...

7.4CVSS6.6AI score0.00499EPSS
SaveExploits0References3
Prion
Prion
added 2022/09/30 7:15 p.m.18 views

Design/Logic Flaw

A vulnerability in the authentication functionality of Cisco Wireless LAN Controller WLC AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient error validation. An attacker coul...

3.3CVSS6.5AI score0.00499EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/30 6:45 p.m.9 views

CVE-2022-20769 Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability

A vulnerability in the authentication functionality of Cisco Wireless LAN Controller WLC AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient error validation. An attacker coul...

7.4CVSS7.1AI score0.00499EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/09/30 12:00 a.m.74 views

Cisco IOS XE Wireless Controller software denial of service vulnerability

A denial of service vulnerability exists in Cisco IOS XE Wireless Controller Software, a wireless LAN controller from Cisco, which stems from a logical error in the handling of CAPWAP Mobility The vulnerability is caused by a logic error and mismanagement of resources when handling CAPWAP Mobilit...

2.7AI score0.01177EPSS
SaveExploits0
Cisco
Cisco
added 2022/09/28 4:00 p.m.84 views

Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability

A vulnerability in the authentication functionality of Cisco Wireless LAN Controller WLC AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient error validation. An attacker coul...

7.4CVSS7AI score0.00499EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/09/28 12:00 a.m.10 views

PT-2022-6094 · Cisco · Cisco Wireless Lan Controller +1

Name of the Vulnerable Software and Affected Versions: Cisco Wireless LAN Controller WLC AireOS Software affected versions not specified Description: The issue is related to insufficient error validation in the authentication functionality of the Cisco Wireless LAN Controller, which could allow a...

7.4CVSS6.5AI score0.00499EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/09/28 12:00 a.m.10 views

Cisco Wireless LAN Controller 缓冲区错误漏洞

Cisco Wireless LAN Controller WLC is a wireless LAN controller product from Cisco USA. The product provides security policy, intrusion detection, and other functions in a wireless LAN. A buffer error vulnerability exists in the Cisco Wireless LAN Controller WLC AireOS Software, which stems from a...

7.4CVSS6.8AI score0.00499EPSS
SaveExploits0References5
NVD
NVD
added 2022/09/26 11:15 a.m.25 views

CVE-2022-36158

Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page /usr/www/ja/mntcmd.cgi...

8.8CVSS0.01534EPSS
SaveExploits1References4
NVD
NVD
added 2022/09/26 11:15 a.m.27 views

CVE-2022-36159

Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access the Wireless LAN Manager interface an...

8.8CVSS0.01016EPSS
SaveExploits1References4
Prion
Prion
added 2022/09/26 11:15 a.m.20 views

Design/Logic Flaw

Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page /usr/www/ja/mntcmd.cgi...

5.2CVSS7.9AI score0.01534EPSS
SaveExploits1References4Affected Software4
Prion
Prion
added 2022/09/26 11:15 a.m.23 views

Design/Logic Flaw

Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access the Wireless LAN Manager interface an...

5.8CVSS8.8AI score0.01016EPSS
SaveExploits1References4Affected Software4
Vulnrichment
Vulnrichment
added 2022/09/26 10:07 a.m.10 views

CVE-2022-36159

Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access the Wireless LAN Manager interface an...

8.9AI score0.01016EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/09/26 10:07 a.m.36 views

CVE-2022-36159

Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access the Wireless LAN Manager interface an...

9.1AI score0.01016EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/09/26 10:07 a.m.31 views

CVE-2022-36158

Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page /usr/www/ja/mntcmd.cgi...

8.2AI score0.01534EPSS
SaveExploits1References4
CVE
CVE
added 2022/09/26 10:07 a.m.72 views

CVE-2022-36158

Contec FXA3200 (and FLEXLAN FX3000/FX2000 series) versions 1.13.00 and earlier are affected by CVE-2022-36158 due to Insecure Permissions in the Wireless LAN Manager interface, enabling execution of Linux commands with root privileges via a hidden web page (/usr/www/ja/mnt_cmd.cgi). Impact is hig...

8.8CVSS7.9AI score0.01534EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/06 2:15 p.m.11 views

CVE-2022-21785

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06807363; Issue ID: ALPS06807363...

6.7CVSS6.7AI score0.00106EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/06/06 6:15 p.m.7 views

CVE-2022-21752

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06493873; Issue ID: ALPS06493873...

6.7CVSS6.7AI score0.00108EPSS
SaveExploits0References2
Rows per page
Query Builder