TOTOLINK T8 suffers from a buffer overflow vulnerability (CNVD-2022-69723)

TOTOLINK T8 is a wireless dual-band router from China's Gion Electronics TOTOLINK. The TOTOLINK T8 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service...

Five Steps to Integrating a Data Repository Vulnerability Assessment Into A WAF–Driven Vulnerability Management Program

A vulnerability assessment is a systematic review of security weaknesses in an information system. It evaluates if the system is susceptible to any known vulnerabilities, assigns severity levels to those vulnerabilities, and recommends remediation or mitigation, if and whenever needed. There are...

TOTOLINK A3002R Buffer Overflow Vulnerability

The TOTOLINK A3002R is a wireless dual-band Gigabit router from China's TOTOLINK that complies with the latest IEEE802.11ac Wave 2 standard. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that can be exploited by attackers to cause a denial of service...

Wifi HD Wireless Disk Drive 11 Local File Inclusion Vulnerability

Exploit Title: Wifi HD Wireless Disk Drive Local File Inclusion Date: Aug 13, 2022 Exploit Author: Chokri Hammedi Vendor Homepage: http://www.savysoda.com Software Link: https://apps.apple.com/us/app/wifi-hd-wireless-disk-drive/ id311170976 Version: 11 Tested on: iPhone OS 155 GET...

Wifi HD Wireless Disk Drive 11 Local File Inclusion

Exploit Title: Wifi HD Wireless Disk Drive Local File Inclusion Date: Aug 13, 2022 Exploit Author: Chokri Hammedi Vendor Homepage: http://www.savysoda.com Software Link: https://apps.apple.com/us/app/wifi-hd-wireless-disk-drive/ id311170976 Version: 11 Tested on: iPhone OS 155 GET...

TOTOLINK A3002R 安全漏洞

The TOTOLINK A3002R is a wireless dual-band Gigabit router from China's TOTOLINK that complies with the latest IEEE802.11ac Wave 2 standard. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that can be exploited by attackers to cause a denial of service...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based, fully distributed operating system. Huawei HarmonyOS is vulnerable to an information disclosure vulnerability caused by insufficient protection of sensitive information in the interface of th...

HUAWEI WS7200-10 hijacking vulnerability

HUAWEI WS7200-10 is a wireless router from Huawei China.A security vulnerability exists in the HUAWEI WS7200-10. An attacker exploits the vulnerability to cause message hijacking...

Contec FLEXLAN FX3000和FX2000 信任管理问题漏洞

The Contec FLEXLAN FX3000 and Contec FLEXLAN FX2000 are both wireless LAN access points from Contec Japan. A security vulnerability exists in the Contec FLEXLAN FX3000 version prior to 1.16.00 and the FX2000 version prior to 1.39.00. An attacker could exploit the vulnerability to access product...

Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor 访问控制错误漏洞

The Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor is a vital signs patient monitor from Contec Health. The Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor has an access control error vulnerability that stems from its inability to properly control or clean the...

Huawei WS7200-10 安全漏洞

HUAWEI WS7200-10 is a wireless router from Huawei China.A security vulnerability exists in the HUAWEI WS7200-10. An attacker exploits the vulnerability to cause message hijacking...

TOTOLINK A7000R Access Control Error Vulnerability

TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK that supports WiFi7 technology for home or small business network environments. The TOTOLINK A7000R suffers from an access control vulnerability that stems from improper access control in its /cgi-bin/ExportSettings.sh...

frankenstein

This is a Python-based framework called Frankenstein, designed to provide a virtual environment for fuzzing wireless firmwares. The framework is currently optimized for the CYW20735 Bluetooth evaluation board but also supports the CYW20819A1 evaluation board. The framework allows users to attach ...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2022-78498)

Tenda AC1206 is a wireless pass-through gigabit router from Tenda, China.Tenda AC1206 version V15.03.06.23 is vulnerable to a buffer overflow vulnerability caused by improper boundary checking of the formSetQosBand function. An attacker could exploit this vulnerability to overflow the buffer and...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2022-78514)

Tenda AC1206 is a wireless pass-through king gigabit router from Tenda China. Tenda AC1206 version V15.03.06.23 is vulnerable to a buffer overflow vulnerability caused by improper boundary checking of the formWifiWpsOOB function. An attacker could exploit this vulnerability to overflow the buffer...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2022-78513)

Tenda AC1206 is a wireless pass-through king gigabit router from Tenda China. Tenda AC1206 version V15.03.06.23 is vulnerable to a buffer overflow vulnerability, which is caused by improper boundary checking of the formSetPPTPServer function. An attacker can exploit this vulnerability to overflow...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2022-78518)

Tenda AC1206 is a wireless pass-through gigabit router from Tenda, China.Tenda AC1206 V15.03.06.23 is vulnerable to a buffer overflow vulnerability caused by improper boundary checking of the formQuickIndex function. An attacker could exploit this vulnerability to overflow the buffer and execute...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2022-78510)

Tenda AC1206 is a wireless through-the-wall king gigabit router from Tenda China. Tenda AC1206 version V15.03.06.23 is vulnerable to a buffer overflow vulnerability caused by incorrect boundary checking of the formSetClientState function. An attacker could exploit this vulnerability to overflow t...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2022-78505)

Tenda AC1206 is a wireless pass-through gigabit router from Tenda, China.Tenda AC1206 V15.03.06.23 is vulnerable to a buffer overflow vulnerability caused by an incorrect boundary check in the saveParentControlInfo function. An attacker could exploit this vulnerability to overflow the buffer and...

Tenda AC1206 Buffer Overflow Vulnerability (CNVD-2022-78516)

Tenda AC1206 is a wireless pass-through gigabit router from Tenda, China.Tenda AC1206 version V15.03.06.23 is vulnerable to a buffer overflow vulnerability caused by improper boundary checking of the formSetSpeedWan function. An attacker could exploit this vulnerability to overflow the buffer and...