Tenda AC5 R7WebsSecurityHandler function buffer overflow vulnerability

Tenda AC5 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in the Tenda AC5 R7WebsSecurityHandler function, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system...

Tenda AC5 saveParentControlInfo function buffer overflow vulnerability

Tenda AC5 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in the Tenda AC5 saveParentControlInfo function, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system...

SiLabs Z-Wave over IP Gateway 缓冲区错误漏洞

The SiLabs Z-Wave over IP Gateway is a hardware unit that plugs into a Wi-Fi router and is used to add and configure Z-Wave devices as well as create and run "scenarios". A security vulnerability exists in SiLabs Z-Wave over IP Gateway, which is caused by a buffer overflow issue...

Tenda AC5 缓冲区错误漏洞

Tenda AC5 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in the Tenda AC5 saveParentControlInfo function, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system...

Mercury MAC 1200R 路径遍历漏洞

The Mercury MAC 1200R is a wireless router from Mercury Communications Technology Mercury of Shenzhen, China. A security vulnerability exists in the Mercury MAC 1200R that stems from a directory traversal vulnerability...

Tenda AC5 缓冲区错误漏洞

Tenda AC5 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC5 USAC5V1.0RTLV15.03.06.28, which stems from a stack-based buffer overflow issue in the fromDhcpListClient function, which can be exploited by an attacker to cause a denial of service DoS or to execute...

CVE-2023-20676

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588569; Issue ID: ALPS07628518...

CVE-2023-20677

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588413; Issue ID: ALPS07588436...

CVE-2023-20677

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588413; Issue ID: ALPS07588436...

CVE-2023-20663

In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560741; Issue ID: ALPS07560741...

USN-6001-1 linux-aws vulnerabilities

Xuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP implementation in the Linux kernel did not properly handle IPID assignment. A remote attacker could use this to cause a denial of service connection termination or inject forged data. CVE-2020-36516 Ke Sun, Alyssa Milburn,...

CVE-2023-20676

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588569; Issue ID: ALPS07628518...

PT-2023-17530 · Mediatek +3 · Mt5221 +3

Name of the Vulnerable Software and Affected Versions: No specific software name or versions are mentioned in the provided descriptions. Description: In the wlan component, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, requirin...

Integer Overflow

linux is vulnerable to Integer Overflows. A local authenticated attacker is able to cause integer overflows in rndisqueryoid of drivers/net/wireless/rndiswlan.c...

PT-2023-13816 · Qualcomm · 315 5G Iot Modem Firmware +314

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to memory corruption caused by integer overflow or wraparound in WLAN when sending WMI commands from the host to the target. Recommendations: At the moment, there i...

The vulnerability of the queue formation mechanism for bufferring frames in Wi-Fi packet buffering technology, which is related to the use of weak encryption, allows attackers to execute a type of “man-in-the-middle” attack.

The vulnerability of the mechanism for scheduling buffer allocations for Wi-Fi packet buffering technology is related to the use of weak encryption. Exploiting this vulnerability could allow a remote attacker to carry out a “man-in-the-middle” attack...

Xiaomi router 访问控制错误漏洞

Xiaomi router is a series of wireless routers from Chinese company Xiaomi. A security vulnerability exists in firmware version 2020 of the Xiaomi router, which stems from the lack of access control policies on some API interfaces, which could lead to WIFI password leakage and allow attackers to...

TP-LINK TL-WR940N 安全漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-Link TL-WR940N version 6211111, which stems from an imperfect authentication algorithm...

D-Link DIR-1935 授权问题漏洞

The D-Link DIR-1935 is a wireless router from China-based AUO D-Link. The D-Link DIR-1935 suffers from an authorization issue vulnerability that stems from not properly implementing the authentication algorithm...

TOTOLINK CP900 Command Injection Vulnerability

The TOTOLINK CP900 is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK CP900 suffers from a command injection vulnerability that stems from the setWebWlanIdx function failing to correctly filter construct command special characters, commands, etc. An attacker can exploit thi...