TOTOLINK CP900 Command Injection Vulnerability

The TOTOLINK CP900 is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK CP900 suffers from a command injection vulnerability that stems from the setWebWlanIdx function failing to correctly filter construct command special characters, commands, etc. An attacker can exploit thi...

PT-2023-2034 · Unknown +1 · Ieee 802.11 +1

Name of the Vulnerable Software and Affected Versions: IEEE 802.11 specifications through 802.11ax Description: The issue allows physically proximate attackers to intercept target-destined frames by spoofing a target's MAC address, sending Power Save frames to the access point, and then sending...

CVE-2022-46415

DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network e.g., by guessing the password. Then, the attacker would need to send...

CVE-2023-1380

A slab-out-of-bound read problem was found in brcmfgetassocies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when associnfo-reqlen data is bigger than the size of the buffer, defined as WLEXTRABUFMAX, leading to a denial of service...

CVE-2023-1380

A slab-out-of-bound read problem was found in brcmfgetassocies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when associnfo-reqlen data is bigger than the size of the buffer, defined as WLEXTRABUFMAX, leading to a denial of service...

CVE-2023-1380

A slab-out-of-bound read problem was found in brcmfgetassocies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when associnfo-reqlen data is bigger than the size of the buffer, defined as WLEXTRABUFMAX, leading to a denial of service...

CVE-2023-27796

RG-EW1200G PRO Wireless Routers EW3.01B11P204, RG-EW1800GX PRO Wireless Routers EW3.01B11P204, and RG-EW3200GX PRO Wireless Routers EW3.01B11P204 were discovered to contain multiple command injection vulnerabilities via the data.ip, data.protocal, data.iface and data.package parameters in the...

CVE-2023-26800

Ruijie Networks RG-EW1200 Wireless Routers EW3.01B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function...

Command injection

Ruijie Networks RG-EW1200 Wireless Routers EW3.01B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function...

CVE-2023-27796

The CVE-2023-27796 issue affects Ruijie RG-EW1200G/RG-EW1800GX/RG-EW3200GX PRO Wireless Routers (EW 3.0(1)B11P204). Root cause: inadequate input sanitization in the embedded diagnose.lua script, specifically in runPackDiagnose where data.ip, data.protocal, data.iface, and data.package parameters ...

Ruijie Networks RG-EG Series Routers 命令注入漏洞

Ruijie Networks RG-EG Series Routers is a gateway product from Ruijie Networks China. A security vulnerability exists in Ruijie Networks RG-EW1200 Wireless Routers version EW3.01B11P204, which was discovered to contain a command injection vulnerability via the params.path parameter of the...

TOTOLINK A7100RU Command Injection Vulnerability (CNVD-2023-51676)

The TOTOLINK A7100RU is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A7100RU suffers from a command injection vulnerability that stems from the enabled parameter of cgi-bin/cstecgi.cgi failing to properly filter constructed command special characters, commands, etc., whi...

CVE-2023-26800

Ruijie Networks RG-EW1200 Wireless Routers EW3.01B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function...

PT-2023-20801 · Ruijie Networks · Rg-Ew1200

Name of the Vulnerable Software and Affected Versions: Ruijie Networks RG-EW1200 Wireless Routers version EW 3.01B11P204 Description: A command injection issue was discovered, which can be exploited via the params.path parameter in the upgradeConfirm function. Recommendations: For version EW...

CVE-2023-26800

Ruijie Networks RG-EW1200 Wireless Routers EW3.01B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function...

D-Link DIR-819 安全漏洞

The D-Link DIR-819 is a wireless dual-band router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-819 that stems from the presence of a denial of service vulnerability...

The vulnerability in the implementation of the PAPI network protocol for ArubaOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PAPI network protocol implementation in Wi-Fi wireless connectivity applications from Aruba Networks relates to buffer overflow attacks. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2023-20100

A vulnerability in the access point AP joining process of the Control and Provisioning of Wireless Access Points CAPWAP protocol of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

CVE-2023-20100

A vulnerability in the access point AP joining process of the Control and Provisioning of Wireless Access Points CAPWAP protocol of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

CVE-2023-20067

A vulnerability in the HTTP-based client profiling feature of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of...