IO-1020 Micro ELD 安全漏洞

The IOSiX IO-1020 Micro ELD is an electronic logging device from IOSiX USA. A security vulnerability exists in previous versions of the IO-1020 Micro ELD 360 that stems from the use of a default WIFI password that could allow a neighboring attacker to connect to the device...

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices are related to insufficient input data validation, allowing attackers to exploit these vulnerabilities to gain increased privileges.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network device drivers is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices, related to initialization errors, allow attackers to trigger service interruptions.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network device drivers is related to initialization errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices are related to insufficient input data validation, allowing attackers to trigger service interruptions.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network device drivers is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices, related to improper cleaning or freeing up of resources, allow a hacker to trigger a service failure.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network device drivers is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices, related to initialization errors, allow attackers to trigger service interruptions.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network device drivers is related to initialization errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices, related to initialization errors, allow attackers to exploit these vulnerabilities to disclose protected information.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network device drivers is related to initialization errors. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by these devices...

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices, related to lack of access control, allow attackers to trigger service interruptions.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause service interruptions...

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices stem from insufficient validation of specified input types. This allows attackers to trigger service failures.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network device drivers is related to insufficient verification of the specified type of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Cisco IOS XE Software for Wireless LAN Controllers Multicast DNS DoS (cisco-sa-wlc-mdns-dos-4hv6pBGf)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the multicast DNS mDNS gateway feature of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, adjacent attacker to cause a denial of service DoS...

Huawei HarmonyOS/EMUI Competitive Conditions Vulnerability (CNVD-2025-31138)

Huawei HarmonyOS is a distributed operating system developed independently by Huawei Technologies Co. Huawei EMUI is Huawei's emotional operating system based on Android. Huawei HarmonyOS/EMUI suffers from a conditional competition vulnerability, which originates from a conditional competition...

CVE-2023-49134

A command execution vulnerability exists in the tddpd enabletestmode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926 and Tp-Link N300 Wireless Access Point EAP115 V4 v5.0.4 Build 20220216. A specially crafted series of network requests can lea...

CVE-2023-49907

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an...

CVE-2023-49074

A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of network requests can lead to reset to factory settings. An attacker can send a sequence of unauthenticated...

CVE-2023-49134

A command execution vulnerability exists in the tddpd enabletestmode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926 and Tp-Link N300 Wireless Access Point EAP115 V4 v5.0.4 Build 20220216. A specially crafted series of network requests can lea...

CVE-2023-49134

A command execution vulnerability exists in the tddpd enabletestmode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926 and Tp-Link N300 Wireless Access Point EAP115 V4 v5.0.4 Build 20220216. A specially crafted series of network requests can lea...

CVE-2023-49074

CVE-2023-49074 affects TP-Link AC1350 Omada Giga APs (EAP225 V3) running v5.1.0 Build 20220926. A TDDP-based vulnerability (V2 ENC_CMD_OPT subtype 0x49) allows an unauthenticated attacker to reset device settings to factory defaults by sending a crafted network request; a related TDDP_SPECIAL_CMD...

CVE-2023-49074

A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of network requests can lead to reset to factory settings. An attacker can send a sequence of unauthenticated...

CVE-2023-49134

The CVE-2023-49134 entry is associated with TP-Link AC1350 (EAP225 V3) and N300 (EAP115 V4) devices and is substantiated by TALOS-2023-1862. A command-execution vulnerability exists in the tddpd enable_test_mode function. When the TDDP service (UDP-based) is accessible during the initial runtime ...

CVE-2023-49133

The CVE-2023-49133 family affects TP-Link AC1350 (EAP225 V3) and N300 (EAP115 V4) devices via the tddpd enable_test_mode function exposed over the TP-Link Device Debug Protocol (TDDP). Talos documents a command-execution path: unauthenticated network requests trigger enable_test_mode, which can f...