CVE-2025-47326 Buffer Over-read in WLAN HAL

Transient DOS while handling command data during power control processing...

USN-7766-1 linux-aws-6.8, linux-gcp-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - Bus devices; - AM...

Cisco IOS XE 安全漏洞

Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE that stems from improper handling of...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a Wi-Fi 6 technology-enabled wireless router from China's Gion Electronics TOTOLINK, featuring high concurrent connections and dual-band transmission. The TOTOLINK X6000R suffers from an OS command injection vulnerability that stems from a failure to properly filter special...

PT-2025-39291

Name of the Vulnerable Software and Affected Versions Cisco Wireless Access Point AP Software affected versions not specified Description A flaw exists in the Device Analytics action frame processing of Cisco Wireless Access Point AP Software. This issue could allow an unauthenticated attacker...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a Wi-Fi 6 technology-enabled wireless router from China's Gion Electronics TOTOLINK, featuring high concurrent connections and dual-band transmission. The TOTOLINK X6000R suffers from an improper input validation vulnerability that originates from the program's failure to...

CVE-2025-20293: Incomplete Cleanup

A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud 9800-CL could allow an unauthenticated, remote attacker to access the public-key infrastructure PKI server that is running on an affected device. This vulnerability is due...

Cisco Wireless LAN Controller 安全漏洞

Cisco Wireless LAN Controller WLC is a wireless LAN controller product from Cisco USA. The product provides security policy, intrusion detection, and other functions in a wireless LAN. A security vulnerability exists in Cisco Wireless LAN Controller that stems from insufficient validation of 802....

CVE-2025-20364: Origin Validation Error

A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point AP Software could allow an unauthenticated, adjacent attacker to inject wireless 802.11 action frames with arbitrary information. This vulnerability is due to insufficient verification checks of incomin...

PT-2025-39292

Name of the Vulnerable Software and Affected Versions Cisco Access Point Software affected versions not specified Description A flaw exists in the IPv6 Router Advertisement RA packet processing that could allow an unauthenticated, adjacent attacker to modify the IPv6 gateway on an affected device...

PT-2025-39302

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A flaw exists in the Network-Based Application Recognition NBAR feature that may allow a remote attacker to cause a device to reload, resulting in a denial of service DoS...

SUSE CVE-2022-50297

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: verify the expected usbendpoints are present The bug arises when a USB device claims to be an ATH9K but doesn't have the expected endpoints. In this case there was an interrupt endpoint where the driver expected a bu...

SUSE CVE-2025-39862

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix list corruption after hardware restart Since stations are recreated from scratch, all lists that wcids are added to must be cleared before calling ieee80211restarthw. Set wcid-sta = 0 for each wcid entry i...

CVE-2025-39862 wifi: mt76: mt7915: fix list corruption after hardware restart

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix list corruption after hardware restart Since stations are recreated from scratch, all lists that wcids are added to must be cleared before calling ieee80211restarthw. Set wcid-sta = 0 for each wcid entry i...

The vulnerability of the Intel PROSet/Wireless WiFi connection utility lies in insufficient checking of unusual or exceptional states, allowing a perpetrator to trigger a service failure.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2022-50413

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix use-after-free We've already freed the assocdata at this point, so need to use another copy of the AP MLD address instead. Mitigation Mitigation for this issue is either not available or the currently availabl...

CVE-2023-53422 wifi: iwlwifi: fw: fix memory leak in debugfs

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fw: fix memory leak in debugfs Fix a memory leak that occurs when reading the fwinfo file all the way, since we return NULL indicating no more data, but don't free the status tracking object...

H3C NX15V100R015 安全漏洞

H3C NX15V100R015 is a firmware version of a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C NX15V100R015 version that stems from insecure default credentials that could lead to unauthorized access...

The vulnerability of the sub_404DBC() function (/cgi-bin/wireless.cgi) in the microprogrammed software for WAVLINK WL-WN578W2 allows a hacker to execute arbitrary commands.

The vulnerability of the sub404DBC function /cgi-bin/wireless.cgi in the software for WAVLINK WL-WN578W2 amplifiers is related to the failure to take measures to neutralize special elements used in the operating system’s command when processing the macAddr parameter. Exploiting this vulnerability...

The vulnerability of the sub_404850() function (/cgi-bin/wireless.cgi) in the microprogrammed software for WAVLINK WL-WN578W2 allows a hacker to execute arbitrary commands.

The vulnerability of the sub404850 function /cgi-bin/wireless.cgi of the WAVLINK WL-WN578W2 signal amplifier software is related to the failure to take measures to neutralize special elements used in the operating system’s command for processing the deletelist parameter. Exploiting this...