Command injection

A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform command injection attacks against an affected device. In order to exploit this vulnerability, the attacker must have valid...

CVE-2024-20335

A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform command injection attacks against an affected device. In order to exploit this vulnerability, the attacker must have valid...

CVE-2024-20335

A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform command injection attacks against an affected device. In order to exploit this vulnerability, the attacker must have valid...

CVE-2024-20335

CVE-2024-20335 affects Cisco Small Business 100/300/500 Series Wireless APs. The issue is in the web-based management interface where insufficient validation of input enables an authenticated, remote attacker with valid admin credentials to perform command injection and potentially execute arbitr...

Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection and Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless Access Points APs could allow an authenticated, remote attacker to perform command injection and buffer overflow attacks against an affected device. In order to exploit these...

kernel: BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c

A list corruption flaw was found in cfg80211addnontranslist in the net/wireless/scan.c function in the Linux kernel. This flaw could lead to a denial of service...

kernel: use-after-free in bss_ref_get in net/wireless/scan.c

A use-after-free flaw was found in bssrefget in the net/wireless/scan.c in the Linux kernel. This issue can lead to a denial of service or arbitrary code execution...

kernel: u8 overflow problem in cfg80211_update_notlisted_nontrans()

A buffer overflow flaw was found in the u8 overflow in cfg80211updatenotlistednontrans in net/wireless/scan.c in the Linux kernel’s wifi subcomponent. This flaw allows an attacker to crash the system or leak internal kernel information...

CVE-2024-20336: Stack-based Buffer Overflow

A vulnerability in the web-based user interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform buffer overflow attacks against an affected device. In order to exploit this vulnerability, the attacker must have valid...

CVE-2024-20335: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform command injection attacks against an affected device. In order to exploit this vulnerability, the attacker must have valid...

PT-2024-2135 · Cisco · Cisco Small Business 500 Series Wireless Access Points +2

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 100, 300, and 500 Series Wireless Access Points affected versions not specified Description: The issue exists due to insufficient validation of user-supplied input in the web-based management interface, allowing an...

PT-2024-2134 · Cisco · Cisco Small Business 500 Series Wireless Access Points +2

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 100, 300, 500 Series Wireless Access Points affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the web-based user interface of the affected devices. This vulnerability...

Important: Red Hat Security Advisory: linux-firmware security update

An update for linux-firmware is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi

Protection mechanism failure for some IntelR PROSet/Wireless WiFi software may allow a privileged user to enable escalation of privilege via local access...

Tenda W9 out-of-bounds write vulnerability (CNVD-2024-14314)

Tenda W9 is a wireless in-wall access point from Tenda, China. An out-of-bounds write vulnerability exists in Tenda W9 version 1.0.0.7, which is caused by a stack-based buffer overflow in the ssidIndex parameter of the formQosManageuser function. An attacker can exploit this vulnerability to inje...

CVE-2024-20018

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00348479; Issue ID: MSV-1019...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which can result in a memory leak due to improper handling of wlan driver input...

PT-2024-13125

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue involves memory corruption that occurs while processing an MBSSID beacon containing several subelement IE. This suggests a problem with how...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips that stems from improper validation of wlan firmware input, which may result in out-of-bounds writes...

PT-2024-12411 · Wlan Host +1 · Wlan Host +1

Name of the Vulnerable Software and Affected Versions: WLAN Host and Firmware affected versions not specified Description: The issue is related to a transient Denial of Service DOS in WLAN Host and Firmware. This occurs when a large number of open authentication frames are sent with an invalid...