CVE-2025-20140

A vulnerability in the Wireless Network Control daemon wncd of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, adjacent wireless attacker to cause a denial of service DoS condition. This vulnerability is due to improper memory management. An attacker could...

CVE-2025-20186

CVE-2025-20186 affects Cisco IOS XE Software, specifically the web-based management interface of the Wireless LAN Controller. The vulnerability arises from insufficient input validation in the WLC web UI, allowing an authenticated attacker with a lobby ambassador account to inject arbitrary CLI c...

CVE-2025-20140

A vulnerability in the Wireless Network Control daemon wncd of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, adjacent wireless attacker to cause a denial of service DoS condition. This vulnerability is due to improper memory management. An attacker could...

CVE-2025-20140

A vulnerability in the Wireless Network Control daemon wncd of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, adjacent wireless attacker to cause a denial of service DoS condition. This vulnerability is due to improper memory management. An attacker could...

CVE-2025-20140

CVE-2025-20140 affects Cisco IOS XE Software for Wireless LAN Controllers, specifically the Wireless Network Control daemon (wncd). The issue is due to improper memory management in wncd, which can be exploited by an unauthenticated, adjacent wireless attacker by sending IPv6 network requests fro...

CVE-2025-20202

A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of access point AP Cisco Discovery Protocol CDP neighbor...

CVE-2025-20202

CVE-2025-20202 affects Cisco IOS XE Wireless Controller Software. The root cause is insufficient input validation of AP Cisco Discovery Protocol (CDP) neighbor reports processed by the wireless controller. An unauthenticated, adjacent attacker can send a crafted CDP packet to an AP, which could c...

CVE-2025-20202

A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of access point AP Cisco Discovery Protocol CDP neighbor...

CVE-2025-20190

A vulnerability in the lobby ambassador web interface of Cisco IOS XE Wireless Controller Software could allow an authenticated, remote attacker to remove arbitrary users that are defined on an affected device. This vulnerability is due to insufficient access control of actions executed by lobby...

Cisco IOS XE Wireless Controller Software Cisco Discovery Protocol Denial of Service Vulnerability

A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of access point AP Cisco Discovery Protocol CDP neighbor...

Cisco IOS XE Software for WLC Wireless IPv6 Clients Denial of Service Vulnerability

A vulnerability in the Wireless Network Control daemon wncd of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, adjacent wireless attacker to cause a denial of service DoS condition. This vulnerability is due to improper memory management. An attacker could...

Cisco IOS XE Wireless Controller Software Unauthorized User Deletion Vulnerability

A vulnerability in the lobby ambassador web interface of Cisco IOS XE Wireless Controller Software could allow an authenticated, remote attacker to remove arbitrary users that are defined on an affected device. This vulnerability is due to insufficient access control of actions executed by lobby...

SUSE CVE-2022-49855

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix memory leak in ipcpciereadbioscfg ipcpciereadbioscfg is using the acpievaluatedsm to obtain the wwan power state configuration from BIOS but is not freeing the acpiobject. The acpievaluatedsm returned...

PT-2025-20263

Name of the Vulnerable Software and Affected Versions Cisco IOS Software affected versions not specified Cisco IOS XE Software affected versions not specified Cisco NX-OS Software affected versions not specified Cisco Wireless LAN Controller WLC AireOS Software affected versions not specified...

Tenda W12/i24 Buffer Overflow Vulnerability

The Tenda W12 and i24 is a wireless router made by Tenda. A buffer overflow vulnerability exists in the Tenda W12 and i24. The vulnerability stems from a parameter json in /goform/modules that fails to properly validate the length and size of the input data, which can be exploited by an attacker ...

TOTOLINK A800R v25 Parameter Buffer Overflow Vulnerability

TOTOLINK A800R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK A800R version V4.1.2cu.5137B20200730, which stems from the v25 parameter in downloadFile.cgi failing to correctly validate the length size of the input data, and can be...

Tenda AC9 /goform/SetSysAutoRebbotCfg Interface Buffer Overflow Vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a buffer overflow vulnerability that originates from the rebootTime parameter of /goform/SetSysAutoRebbotCfg that fails to properly validate the length of the input data, which can be exploited by an attacker...

TOTOLINK N150RT home.htm cross-site scripting vulnerability

The TOTOLINK N150RT is a high power wireless router device. TOTOLINK N150RT suffers from a cross-site scripting vulnerability that originates from the parameter Comment in the file /home.htm, no details of the vulnerability are provided at this time...

CVE-2025-20191: Buffer Access with Incorrect Length Value

A vulnerability in the Switch Integrated Security Features SISF of Cisco IOS Software, Cisco IOS XE Software, Cisco NX-OS Software, and Cisco Wireless LAN Controller WLC AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected...

Cisco IOS XE Wireless Controller Software 安全漏洞

Cisco IOS XE Wireless Controller software is a wireless LAN controller from Cisco USA. It provides a management network function A security vulnerability exists in Cisco IOS XE Wireless Controller Software that stems from insufficient input validation and could lead to a denial of service attack...