Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6919-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6919-1 advisory. Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereferenc...

SyroTech SY-GPON-1110-WDONT security vulnerability

The SyroTech SY-GPON-1110-WDONT is a wireless router from SyroTech. A security vulnerability exists in the SyroTech SY-GPON-1110-WDONT that stems from improper implementation of a password policy. An attacker can exploit this vulnerability to launch further attacks on the system...

SyroTech SY-GPON-1110-WDONT security vulnerability

The SyroTech SY-GPON-1110-WDONT is a wireless router from SyroTech. A security vulnerability exists in the SyroTech SY-GPON-1110-WDONT that originates when passwords are transmitted in plain text. An attacker could exploit this vulnerability to obtain password information and use this information...

SyroTech SY-GPON-1110-WDONT security vulnerability

The SyroTech SY-GPON-1110-WDONT is a wireless router from SyroTech. The SyroTech SY-GPON-1110-WDONT suffers from an information disclosure vulnerability that originates from storing default username and password credentials in plaintext in the router firmware/database. An attacker could exploit...

TOTOLINK A6000R vif_disable function command injection vulnerability

TOTOLINK A6000R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A6000R. The vulnerability stems from the iface parameter in the vifdisable function failing to properly validate or clear user input. An attacker can use this...

TOTOLINK A6000R apcli_do_enr_pin_wps function command injection vulnerability

TOTOLINK A6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A6000R suffers from a command injection vulnerability that stems from the ifname parameter in the apclidoenrpinwps function failing to properly filter construct command special characters, commands, and so o...

TOTOLINK A6000R Command Injection Vulnerability

TOTOLINK A6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A6000R suffers from a command injection vulnerability that stems from the ifname parameter in the apcliwpsgenpincode function containing a command injection vulnerability. No details of the vulnerability are...

Tenda FH1201 Buffer Overflow Vulnerability (CNVD-2025-12005)

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that stems from the entries parameter of ip/goform/addressNat containing a stack-based buffer overflow vulnerability. No detailed vulnerability details are provided at this time...

Tenda FH1201 Buffer Overflow Vulnerability (CNVD-2025-12006)

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from the mitInterface parameter in ip/goform/RouteStatic containing a stack-based buffer overflow vulnerability for which no detailed vulnerability details are...

TOTOLINK A6000R Command Injection Vulnerability

TOTOLINK A6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A6000R suffers from a command injection vulnerability that stems from the ifname parameter in the getapcliconninfo function containing a command injection vulnerability. No details of the vulnerability are...

Tenda FH1201 Buffer Overflow Vulnerability

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that stems from the PPPOEPassword parameter on ip/goform/QuickIndex containing a stack-based buffer overflow vulnerability. No detailed vulnerability details are provided at this...

Tenda FH1201 Buffer Overflow Vulnerability (CNVD-2025-12105)

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from the list1 parameter on ip/goform/DhcpListClient containing a stack-based buffer overflow vulnerability. No detailed vulnerability details are provided at this...

Tenda FH1201 Buffer Overflow Vulnerability (CNVD-2025-12106)

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from a page parameter on ip/goform/DhcpListClient that contains a stack-based buffer overflow vulnerability. No detailed vulnerability details are provided at this...

Tenda FH1201 Buffer Overflow Vulnerability (CNVD-2025-12104)

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that stems from the entries parameter of ip/goform/RouteStatic containing a stack-based buffer overflow vulnerability. No detailed vulnerability details are provided at this time...

CentOS 7 : linux-firmware (RHSA-2024:3939)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3939 advisory. - Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to potentially enable escalation ...

Tenda FH1201 Buffer Overflow Vulnerability (CNVD-2025-12008)

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from a page parameter in ip/goform/NatStaticSetting, and no details of the vulnerability are provided at this time...

TOTOLINK A6000R Command Injection Vulnerability (CNVD-2025-14789)

The OTOLINK A6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A6000R suffers from a command injection vulnerability that originates from a command injection that can be performed via the cmd parameter in the webcmd function. No details of the vulnerability are...

Tenda AX1806 Buffer Overflow Vulnerability (CNVD-2024-35918)

The Tenda AX1806 is a WiFi6 wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda AX1806 v1.0.0.1, which stems from the program failing to properly validate the length and size of input data, and can be exploited by an attacker to cause a denial of service...

USN-6896-5: Linux kernel vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...

USN-6896-5 linux-aws, linux-aws-5.4, linux-iot vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...