16683 matches found
IoT Haat Smart Plug IH-IN-16A-S has a security vulnerability
IoT Haat Smart Plug IH-IN-16A-S is a smart plug from IoT Haat. A security vulnerability exists in IoT Haat Smart Plug IH-IN-16A-S version v5.16.1, which stems from the presence of a session expiration insufficiency issue and lack of validation of authentication tokens, which could lead to an...
Qualcomm Chipsets security vulnerabilities
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from the inclusion of an incorrect input validation in the WLAN Explorer...
PT-2024-18590 · Unknown · Wlan Driver
Name of the Vulnerable Software and Affected Versions: WLAN driver affected versions not specified Description: The issue is related to a possible out of bounds read in the wlan driver due to improper input validation. This could lead to remote information disclosure with System execution...
PT-2024-18591 · Unknown · Wlan Firmware
Name of the Vulnerable Software and Affected Versions: WLAN firmware affected versions not specified Description: The issue is related to improper input validation in the WLAN firmware, which could lead to an out of bounds write. This may result in remote code execution without requiring addition...
D-Link DIR-605L security vulnerabilities
The AUO DIR-605L is a wireless router from China's AUO D-Link. The AUO DIR-605L suffers from a buffer overflow vulnerability, which originates from the webpage parameter of the formSetWanPPPoE function in the /goform/formSetWanPPPoE page that fails to correctly validate the length and size of the...
PT-2024-18588 · Mediatek · Mediatek Mt8796 Wlan Driver
Name of the Vulnerable Software and Affected Versions: MediaTek MT8796 WLAN Driver affected versions not specified Description: The issue is related to a possible out of bounds write in the wlan driver due to improper input validation. This could lead to remote code execution with no additional...
MGASA-2024-0322 Updated hostapd & wpa_supplicant packages fix security vulnerability
The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-loop. Enterprise 802.1X/EAP, Mesh AMPE, or FILS, aka an "SSID Confusion" issue. This occurs because the SSID is not always used to derive th...
PT-2024-8698
Name of the Vulnerable Software and Affected Versions RUCKUS Wireless Access Points Ruckus AP affected versions not specified Description The issue is related to insufficient input validation in RUCKUS Wireless Access Points, which can be exploited by a remote attacker to execute arbitrary code...
Intel Wireless WiFi Next Gen AGN Driver Buffer Overflow
The vulnerability of the iwlreqfwcallback function in the driver drivers/net/wireless/intel/iwlwifi/iwl-drv.c of the Intel Wireless WiFi Next Gen AGN Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
CVE-2023-37822
The Eufy Homebase 2 before firmware version 3.3.4.1h creates a dedicated wireless network for its ecosystem, which serves as a proxy to the end user's primary network. The WPA2-PSK generation of this dedicated network is flawed and solely based on the serial number. Due to the flawed generation...
CVE-2023-37822
The Eufy Homebase 2 before firmware version 3.3.4.1h creates a dedicated wireless network for its ecosystem, which serves as a proxy to the end user's primary network. The WPA2-PSK generation of this dedicated network is flawed and solely based on the serial number. Due to the flawed generation...
CVE-2023-37822
The Eufy Homebase 2 before firmware version 3.3.4.1h creates a dedicated wireless network for its ecosystem, which serves as a proxy to the end user's primary network. The WPA2-PSK generation of this dedicated network is flawed and solely based on the serial number. Due to the flawed generation...
CVE-2023-37822
The CVE-2023-37822 issue affects Eufy Homebase 2 prior to firmware 3.3.4.1h. The dedicated ecosystem Wi‑Fi network uses a WPA2-PSK that is generated solely from the device serial number, enabling offline brute force in seconds. An attacker in proximity to the dedicated network could access the en...
kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing
No description is available for this CVE...
PT-2024-9598 · Tenda · Tenda G3
Name of the Vulnerable Software and Affected Versions: Tenda G3 version 3.0 v15.11.0.20 Description: The issue is related to the formSetUSBPartitionUmount function of the Tenda G3 wireless access point's firmware, which fails to neutralize special elements when processing the usbPartitionName...
Security Bulletin: Vulnerability in linux affects IBM Integrated Analytics System [CVE-2022-1679]
Summary Redhat provided linux is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2022-1679 Vulnerability Details CVEID:CVE-2022-1679 DESCRIPTION: Linux Kernel could allow a local authenticated attacker to gain elevated privileges on th...
SUSE CVE-2024-46825
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: use IWLFWCHECK for link ID check The lookup function iwlmvmrcufwlinkidtolinkconf is normally called with input from the firmware, so it should use IWLFWCHECK instead of WARNON...
SUSE CVE-2024-46860
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix NULL pointer access in mt7921ipv6addrchange When disabling wifi mt7921ipv6addrchange is called as a notifier. At this point mvif-phy is already NULL so we cannot use it here...
DEBIAN-CVE-2024-46827
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point receives an association request containing an Extended HE Capabilities Information Element with an invalid MCS-NSS, it triggers a firmware...
UBUNTU-CVE-2024-46825
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: use IWLFWCHECK for link ID check The lookup function iwlmvmrcufwlinkidtolinkconf is normally called with input from the firmware, so it should use IWLFWCHECK instead of WARNON...