Lucene search
+L

14364 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/08/25 12:0 a.m.30 views

D-Link DAP-2622 DDP Set Wireless Info Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/08/25 12:0 a.m.43 views

CVE-2023-34723

An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19T53, allows attackers to gain sensitive information via /config/system.conf...

7.7AI score0.02548EPSS
SaveExploits6References3
CVE
CVE
added 2023/08/25 12:0 a.m.78 views

CVE-2023-34723

CVE-2023-34723 affects TechView LA-5570 Wireless Gateway 1.0.19_T53. Root cause: vulnerability allows an attacker to disclose sensitive information via /config/system.conf. Documented impact is information disclosure (per CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) with high confidentiality i...

7.5CVSS7.5AI score0.02548EPSS
SaveExploits6References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/25 12:0 a.m.14 views

CVE-2023-34723

An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19T53, allows attackers to gain sensitive information via /config/system.conf...

6.6AI score0.02548EPSS
SaveExploits6References3
Positive Technologies
Positive Technologies
added 2023/08/25 12:0 a.m.6 views

PT-2023-24984 · Techview · Techview La-5570 Wireless Gateway

Name of the Vulnerable Software and Affected Versions: TechView LA-5570 Wireless Gateway version 1.0.19 T53 Description: An issue was discovered in the TechView LA-5570 Wireless Gateway, allowing attackers to gain sensitive information via the "/config/system.conf" API endpoint. Recommendations:...

7.5CVSS6.7AI score0.02548EPSS
SaveExploits6References15
Zero Day Initiative
Zero Day Initiative
added 2023/08/25 12:0 a.m.28 views

D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability

This vulnerability allows network-adjacent attackers to make unauthorized changes to device configuration on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the...

5.4CVSS6.7AI score0.00335EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/08/25 12:0 a.m.12 views

TechView LA-5570 后置链接漏洞

The TechView LA-5570 is a wireless router. A security vulnerability exists in the TechView LA-5570 Wireless Gateway version 1.0.19T53, which originated from a vulnerability that allows an attacker to obtain sensitive information via /config/system.conf...

7.5CVSS6.7AI score0.02548EPSS
SaveExploits6References6
BDU FSTEC
BDU FSTEC
added 2023/08/24 12:0 a.m.15 views

The vulnerability of the Intel PROSet/Wireless WiFi and Killer WiFi networking tools, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the Intel PROSet/Wireless WiFi and Killer WiFi networking tools is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.5CVSS6.5AI score0.00595EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/08/24 12:0 a.m.15 views

The vulnerability of the Intel PROSet/Wireless WiFi and Killer Wi-Fi connection tools, related to insufficient validation of input data, allows attackers to exploit their privileges.

The vulnerability of the Intel PROSet/Wireless WiFi and Killer WiFi networking tools is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS6.5AI score0.0029EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/08/23 12:0 a.m.10 views

The vulnerability of the Intel PROSet/Wireless WiFi and Killer Wi-Fi connection tools, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the Intel PROSet/Wireless WiFi and Killer WiFi networking tools is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.2CVSS6.9AI score0.00249EPSS
SaveExploits0References4Affected Software2
CNNVD
CNNVD
added 2023/08/21 12:0 a.m.9 views

TP-LINK TL-WR941ND 安全漏洞

The TP-LINK TL-WR941ND is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-Link Routers, which stems from a buffer overflow vulnerability in the radiusSecret parameter. Affected products and versions: TP-Link WR841N V8 version, TL-WR940N V2 version, TL-WR941ND V5...

9.8CVSS8.8AI score0.07849EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2023/08/21 12:0 a.m.12 views

The vulnerability of the Intel PROSet/Wireless WiFi network connection tool for Windows allows a hacker to gain increased privileges.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool for Windows is related to access control deficiencies. Exploiting this vulnerability can allow attackers to gain increased privileges...

8.2CVSS6.6AI score0.00179EPSS
SaveExploits0References2
NVD
NVD
added 2023/08/18 10:15 a.m.34 views

CVE-2023-40069

OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions,...

9.8CVSS9.7AI score0.01452EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/08/18 10:15 a.m.11 views

CVE-2023-39454

Buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code...

9.8CVSS7.6AI score0.00943EPSS
SaveExploits0References3Affected Software13
NVD
NVD
added 2023/08/18 10:15 a.m.26 views

CVE-2023-39455

OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all...

8.8CVSS8.8AI score0.01494EPSS
SaveExploits0References2
NVD
NVD
added 2023/08/18 10:15 a.m.17 views

CVE-2023-35991

Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions,...

9.8CVSS9.7AI score0.00723EPSS
SaveExploits0References2
Prion
Prion
added 2023/08/18 10:15 a.m.26 views

Command injection

OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions,...

7.5CVSS9.6AI score0.01452EPSS
SaveExploits0References2
Prion
Prion
added 2023/08/18 10:15 a.m.21 views

Command injection

OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all...

6.5CVSS8.8AI score0.01494EPSS
SaveExploits0References2
Prion
Prion
added 2023/08/18 10:15 a.m.22 views

Denial of service

Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions,...

7.5CVSS9.6AI score0.00723EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/08/18 9:45 a.m.4 views

CVE-2023-40072

OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request...

7.8AI score0.01907EPSS
SaveExploits0References3
Rows per page
Query Builder