14361 matches found
Motorola MR2600 Security Vulnerability
The Motorola MR2600 is a wireless router from Motorola, USA. A security vulnerability exists in the Motorola MR2600 that stems from an arbitrary firmware upload vulnerability...
PT-2024-1373 · Tenda · Tenda Ac10
Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.49 multi TDE01 Description: The issue is related to a critical vulnerability in the SetWirelessRepeat function of the Tenda AC10U router's firmware, which is associated with a stack-based buffer overflow. This can...
Motorola MR2600 License Issues Vulnerability
The Motorola MR2600 is a wireless router from Motorola, USA. A security vulnerability exists in the Motorola MR2600 that originates from an authentication bypass vulnerability in a web component...
Tenda AC10 安全漏洞
Tenda AC10U is a wireless router from Tenda China. Tenda AC10U fromSetWirelessRepeat function has a buffer overflow vulnerability, the vulnerability stems from fromSetWirelessRepeat function's wpapskcrypto parameter fails to correctly validate the length of the input data size, an attacker can us...
hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Protection mechanism failure for some IntelR PROSet/Wireless WiFi software may allow a privileged user to enable escalation of privilege via local access...
kernel: use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges
A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system...
The vulnerability in Wi-Fi operating systems for macOS, iOS, and iPadOS allows a hacker to trigger a service failure.
The vulnerability of Wi-Fi operating systems for macOS, iOS, and iPadOS relates to writing beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
NETIS SYSTEMS MW5360 Security Vulnerability
NETIS SYSTEMS MW5360 is a 4G LTE wireless router. A security vulnerability exists in NETIS SYSTEMS MW5360 version V1.0.1.3031, which stems from the presence of a command injection vulnerability...
RHEL 9 : linux-firmware (RHSA-2024:0449)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0449 advisory. The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fixes: hw: intel:...
ELECOM wireless LAN routers vulnerable to OS command injection
Overview Multiple ELECOM wireless LAN routers provided by ELECOM CO.,LTD. contain an OS command injection vulnerability. Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact If a logged-in user with an administrative privilege...
Yamaha wireless LAN access point devices vulnerable to active debug code
Overview Active debug code CWE-489 exists in wireless LAN access point devices provided by Yamaha Corporation. The debug function can be enabled by performing specific operations. Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer...
CVE-2024-22372
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product...
CVE-2024-22372
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product...
CVE-2024-22366
Active debug code exists in Yamaha wireless LAN access point devices. If a logged-in user who knows how to use the debug function accesses the device's management page, this function can be enabled by performing specific operations. As a result, an arbitrary OS command may be executed and/or...
Command injection
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product. Affected products and versions are as follows: WRC-X1800GS-B v1.17 and...
Command injection
Active debug code exists in Yamaha wireless LAN access point devices. If a logged-in user who knows how to use the debug function accesses the device's management page, this function can be enabled by performing specific operations. As a result, an arbitrary OS command may be executed and/or...
CVE-2024-22372
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product...
CVE-2024-22372
ELECOM wireless LAN routers are affected by CVE-2024-22372: an OS command injection vulnerability that allows a network-adjacent attacker with administrative privileges to execute arbitrary OS commands via a specially crafted request. Connected sources specify affected models/versions (e.g., WRC-...
CVE-2024-22366
The CVE affects Yamaha WLX-series wireless LAN access points (WLX222, WLX413, WLX212, WLX313, WLX202) with firmware versions released up to: WLX222 <24.00.03, WLX413 <22.00.05, WLX212 <21.00.12, WLX313 <18.00.12, WLX202