CVE-2023-24097

TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formPasswordAuth. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects...

CVE-2023-24098

TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formSysLog. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects products...

CVE-2023-20268

A vulnerability in the packet processing functionality of Cisco access point AP software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device. This vulnerability is due to insufficient management of resources when handling certain types of traffic. An...

CVE-2022-21212

Improper input validation for some IntelR PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2022-36159

Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access the Wireless LAN Manager interface an...

CVE-2022-45768

Command Injection vulnerability in Edimax Technology Co., Ltd. Wireless Router N300 Firmware BR428nS v3 allows attacker to execute arbitrary code via the formWlanMP function...

CVE-2022-44373

A stack overflow vulnerability exists in TrendNet Wireless AC Easy-Upgrader TEW-820AP Version v1.0R, firmware version 1.01.B01 which may result in remote code execution...

Tenda W18E wifiSSID DoS

The vulnerability of the wifiSSID parameter in the /goform/setModules function of the Tenda W18E v2.0 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Tenda A15 Wireless Access Point DoS

The vulnerability of the formArpNerworkSet function in the /goform/ArpNerworkSet microprogramming system for the wireless access point Tenda A15 is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

boafrm/formWirelessTbl HTTP POST Request Handler Router Data Compromise

The vulnerability of the HTTP POST Request Handler component of the /boafrm/formWirelessTbl file in the microprogramming software for routers A702R, A3002R, and A3002RU is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an...

Linux kernel Wireless Adapter Buffer Overflow DoS

The vulnerability of the iwlmvmrcudereferencevifid function in the Linux kernel’s wireless adapter driver lies in its failure to handle exceptional conditions properly. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2022-21240

Out of bounds read for some IntelR PROSet/Wireless WiFi products may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-21181

Improper input validation for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-21172

Out of bounds write for some IntelR PROSet/Wireless WiFi products may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-21160

Improper buffer restrictions for some IntelR PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2022-21139

Inadequate encryption strength for some IntelR PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2022-21140

Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-44443

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services...

CVE-2022-20595

In getWpcAuthChallengeResponse of WirelessCharger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20254

In Wi-Fi, there is a permissions bypass. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-223377547...