Design/Logic Flaw

An access control issue in APsystems ENERGY COMMUNICATION UNIT ECU-C Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific commands and functions with full admin rights without authenticating allows him to perform multiple...

CVE-2022-44037

An access control issue in APsystems ENERGY COMMUNICATION UNIT ECU-C Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific commands and functions with full admin rights without authenticating allows him to perform multiple...

NETGEAR R7000P Buffer Overflow Vulnerability

NETGEAR R7000P is a wireless router from NETGEAR, Inc. A security vulnerability exists in NETGEAR R7000P version V1.3.0.8, which stems from being affected by the wandns1prii parameter. No detailed vulnerability details are available at this time...

D-Link DIR-823G OS Command Injection Vulnerability (CNVD-2022-81490)

D-Link DIR-823G is a wireless router from D-Link, a Chinese company. A security vulnerability exists in D-Link DIR-823G firmware version 1.02B03, which stems from its HNAP API function allowing an attacker to implement arbitrary operating system command execution via a carefully crafted HNAP1...

D-Link DIR-882 websRedirect function buffer overflow vulnerability

D-Link DIR-882 is a wireless router from D-Link, China. D-Link DIR-882 firmware versions 1.10B02 and 1.20B06 contain a buffer overflow vulnerability that stems from the lack of length validation of input data by its websRedirect function, which could be exploited by an attacker to cause a denial ...

ZTE MF286R Buffer Overflow Vulnerability

The ZTE MF286R is a wireless router from ZTE Corporation China.A buffer overflow vulnerability previously existed in the ZTE MF286R mf286rb07 version, which stems from the lack of input validation of the wifi interface parameters and can be exploited by attackers to conduct denial of service...

D-Link DIR-882 webGetVarString function buffer overflow vulnerability

D-Link DIR-882 is a wireless router from D-Link, China. D-Link DIR-882 firmware versions 1.10B02 and 1.20B06 contain a buffer overflow vulnerability that stems from a lack of length validation of input data in its webGetVarString function, which could be exploited to cause a denial of service or...

NETGEAR R7000P wan_dns1_pri Buffer Overflow Vulnerability

The NETGEAR R7000P is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR R7000P version V1.3.1.64, which originates from a lack of length validation of data entered in /usr/sbin/httpd for the wandns1pri parameter, and can be exploited by an attacker to cause a denia...

NETGEAR R7000P Buffer Overflow Vulnerability

NETGEAR R7000P is a wireless router from NETGEAR, Inc. A security vulnerability exists in NETGEAR R7000P v1.3.1.64, which stems from being affected by the starthour, startminute, endhour, and endminute parameters in /usr/sbin/httpd. No detailed vulnerability details are currently available...

D-Link DIR-878 Access Control Error Vulnerability

D-Link DIR-878 is a wireless router from D-Link China.The D-Link DIR-878 firmware version 1.02B05 contains an access control error vulnerability, which stems from the existence of incorrect access control. An attacker could use this vulnerability to log in with a blank password...

D-Link DIR-823G Command Execution Vulnerability

D-Link DIR-823G is a wireless router from D-Link, a Chinese company. D-Link DIR-823G firmware version 1.02B05 contains a command execution vulnerability that stems from sub42383C's failure to properly filter constructed command special characters, commands, etc. The vulnerability can be exploited...

Zyxel LTE3301-M209 Access Control Error Vulnerability

The Zyxel LTE3301-M209 is a wireless router from China-based Hopkins Zyxel. An access control error vulnerability exists in versions prior to Zyxel LTE3301-M209 V1.00ABLG.6C0, which stems from incorrect access control. An attacker can exploit the vulnerability to access the device using an...

NETGEAR R7000P enable_band_steering buffer overflow vulnerability

NETGEAR R7000P is a wireless router from NETGEAR, Inc. NETGEAR R7000P version V1.3.1.64 has a buffer overflow vulnerability, which originates from the lack of length validation of input data in the enablebandsteering parameter, and can be exploited by attackers to cause a denial of service or...

NETGEAR R7000P openvpn_push1 buffer overflow vulnerability

NETGEAR R7000P is a wireless router from NETGEAR, Inc. A buffer overflow vulnerability exists in NETGEAR R7000P firmware version V1.3.1.64, which stems from a lack of length validation of data input to the openvpnpush1 parameter, which could be exploited by an attacker to cause a denial of servic...

D-Link DIR-823G sub_4883F0 function buffer overflow vulnerability

The D-Link DIR-823G is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in D-Link DIR-823G firmware versions 1.02B04 and 1.02B05, which stems from a lack of length validation of input data in the sub4883F0 function, and can be exploited by an attacker to cause a...

PT-2022-6044 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.0.11 Description: An issue in the Linux kernel's WILC1000 wireless driver is related to a heap-based buffer overflow. This occurs due to missing validation of the number of channels when copying the list of...

Tenda AC21 set_device_name function buffer overflow vulnerability

The Tenda AC21 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC21 version V16.03.08.15, which is caused by the setdevicename function not checking the length and size of the input data, and can be exploited to cause a denial of service...

Tenda AC15 formSetIpMacBind Function Buffer Overflow Vulnerability

The Tenda AC15 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC15 firmware version V15.03.05.19, which is caused by the formSetIpMacBind function not checking the length of the input data, and can be exploited by an attacker to launch a...

Tenda AC21 formSetMacFilterCfg function buffer overflow vulnerability

The Tenda AC21 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC21 version V16.03.08.15, which is caused by the formSetMacFilterCfg function not checking the length and size of the input data, and can be exploited to cause a denial of service...

Tenda AC15 fromSetRouteStatic function buffer overflow vulnerability

The Tenda AC15 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC15 version V15.03.05.18, which can be exploited to launch a denial-of-service attack because the fromSetRouteStatic function does not perform a length check on the input data...