Reolink Rlc-410W 信息泄露漏洞

Reolink Rlc-410W is a Wifi security camera from Reolink China. reolink RLC-410W in v3.0.0.13620121102 is vulnerable to information disclosure, which stems from information disclosure due to web server configuration errors. An attacker could use this vulnerability to obtain sensitive information...

CVE-2021-39306

A stack buffer overflow was discovered on Realtek RTL8195AM device before 2.0.10, it exists in the client code when an attacker sends a big size Authentication challenge text in WEP security...

TP-Link AX10安全漏洞

TP-Link AX10 is a router from Tp-link, China. TP-Link AX10 has a security vulnerability that could be exploited to disconnect a connected wireless client by sending a spoofed authentication frame specific to the wireless adapter...

Anker Eufy Homebase 2 Buffer Overflow Vulnerability

Anker Eufy Homebase is a wireless home security camera system from Eufy U.S.A. A buffer overflow vulnerability exists in Anker Eufy Homebase 2 version 2.1.6.9h, which can be exploited by attackers to cause code execution...

Eufy Anker Eufy Homebase 2 out-of-bounds write vulnerability

Anker Eufy Homebase is a wireless home security camera system from Eufy U.S.A. An out-of-bounds write vulnerability exists in Anker Eufy Homebase version 2.1.6.9h, which can be exploited by attackers to cause code execution via specially crafted network packets...

Eufy Anker Eufy Homebase 2 Access Control Error Vulnerability

Anker Eufy Homebase is a wireless home security camera system from Eufy U.S.A. An access control error vulnerability exists in Anker Eufy Homebase 2, which stems from the failure of the CMDDEVICEGETRSAKEYREQUEST function in the product's homesecurity file to correctly handle specially crafted...

kernel: accepting unencrypted A-MSDU frames that start with RFC1042 header

A flaw was found in the Linux kernel, where the WiFi implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 ex., LLC/SNAP header for EAPOL. The highest threat from this vulnerability is to integrity...

NSA issues advice for securing wireless devices

By releasing an information sheet that provides guidance on securing wireless devices while in public pdf—for National Security System, Department of Defense, and Defense Industrial Base teleworkers—the NSA has provided useful information on malicious techniques used by cyber actors, and ways to...

The vulnerability of implementations of WEP, WPA, WPA2, and WPA3 algorithms in the Linux operating system allows attackers to compromise the integrity of protected information.

The vulnerability of implementations of WEP, WPA, WPA2, and WPA3 algorithms in Linux operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information by using specially crafted...

SUSE-SU-2021:1977-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in...

Check Point Response to Wi-Fi FragAttacks in Quantum Spark appliances

Cause Several CVEs were published on Wi-Fi devices under the name FragAttacks. More information about them can be found at: https://www.fragattacks.com/ The list of new CVEs related to wireless security flaws with fragmented and aggregated frames, is relevant to Check Point Quantum Spark wireless...

CVE-2020-26146

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers. An adversary can abuse this to exfiltrate selected fragments. This vulnerability is exploitable when another device sends fragmented...

CVE-2020-26145

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second or subsequent broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets...

Unauthorized Access Vulnerability in DIR-816 750M11AC Wireless Router

The AUO DIR-816 is a wireless router under the AUO D-Link brand, manufactured in mainland China. The DIR-816 750M11AC wireless router suffers from an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information...

CVE-2021-20635

CVE-2021-20635 affects LOGITEC LAN-WH450N/GR. The vulnerability is an improper restriction of excessive authentication attempts, enabling an attacker within wireless range to recover the PIN and gain network access. The issue is documented across multiple feeds (NVD/Red Hat/JVN) with reported imp...

Accfly Wireless Security IR Camera System 720P Software Buffer Overflow Vulnerability (CNVD-2021-09034)

Accfly Wireless Security IR Camera System 720P Software is an application from Accfly USA for controlling this camera. A buffer overflow vulnerability exists in Accfly Wireless Security IR Camera System 720P Software versions v3.10.73 through v4.15.77, which stems from an unauthenticated...

Accfly Wireless Security IR Camera System 720P Software Buffer Overflow Vulnerability

Accfly Wireless Security IR Camera System 720P Software is an application from Accfly USA for controlling this camera. A buffer overflow vulnerability exists in Accfly Wireless Security IR Camera System 720P Software versions v3.10.73 through v4.15.77, which stems from CNetClientManage:: ServerIP...

Accfly Wireless Security IR Camera System 720P Software Buffer Overflow Vulnerability (CNVD-2021-09035)

Accfly Wireless Security IR Camera System 720P Software is an application from Accfly USA for controlling this camera. A buffer overflow vulnerability exists in Accfly Wireless Security IR Camera System 720P software versions v3.10.73 through v4.15.77, which stems from an unauthenticated...

Accfly Wireless Security IR Camera System 720P Software Buffer Overflow Vulnerability (CNVD-2021-09036)

Accfly Wireless Security IR Camera System 720P Software is an application from Accfly USA for controlling this camera. A buffer overflow vulnerability exists in Accfly Wireless Security IR Camera System 720P software versions v3.10.73 through v4.15.77, which stems from an unauthenticated heap-bas...

CVE-2020-25784

An issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions v3.10.73 through v4.15.77. There is an unauthenticated stack-based buffer overflow in the function CNetClientGuard::SubOprMsg during incoming message handling...