CVE-2022-1679

A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system...

Apple macOS 缓冲区错误漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A buffer error vulnerability exists in Apple macOS versions 10.15 19A583 through 10.15.7 19H1823, which stems from a boundary error in the Wi-Fi component. A native application...

CVE-2022-1679

A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system...

Apple iOS和iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.The vulnerabilities in Apple iPadOS 15 0 19A346 to 15 4 1 19E258 and AppleOS 15 0 19A346 to 15 4 1 19E258 are due to a buffe...

Apple TV 缓冲区错误漏洞

Apple macos is a set of operating systems from the American company Apple. Apple macos suffers from a buffer overflow vulnerability that originates from a boundary error in the Wi-Fi component when handling untrusted input. An attacker could exploit the vulnerability to access sensitive informati...

CVE-2022-1679

CVE-2022-1679 is a use-after-free flaw in the Linux kernel’s Atheros ath9k_htc driver. Connected advisories specify a use-after-free in ath9k_htc_wait_for_target (and related notes) that can allow a local user to crash or escalate privileges. Affected component: Linux kernel wireless driver (ath9...

Apple iOS和Apple iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. Apple iOS and Apple iPadOS have a buffer error vulnerability that originates from a boundary error in the Wi-Fi component....

Aruba ClearPass Policy Manager 授权问题漏洞

Aruba ClearPass Policy Manager is an application of the U.S. company Aruba to provide wireless network security access management system Aruba ClearPass Policy Manager has an authentication bypass vulnerability, which can be exploited by attackers to bypass authentication leading to remote code...

CVE-2022-1679

A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system. Mitigation To mitigate...

Vulnerability Spotlight: How an attacker could chain several vulnerabilities in an industrial wireless router to gain root access

Francesco Benvenuto of Cisco Talos discovered these vulnerabilities. Blog by Francesco Benvenuto and Jon Munshaw. Cisco Talos recently discovered several vulnerabilities in InHand Networks’ InRouter302 that could allow an attacker to escalate their privileges on the targeted device from a... This...

TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53554)

TOTOLINK N600R is a wireless router from Taiwan-based Gion Electronics TOTOLINK, China.A command injection vulnerability exists in TOTOLINK N600R, which can be exploited by attackers to conduct command injection attacks via the ipdoamin parameter in /setting/setDiagnosisCfg...

TOTOLINK N600R Buffer Overflow Vulnerability

TOTOLINK N600R is a wireless router from Taiwan, China-based Gion Electronics TOTOLINK.A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN004200c8 function. An attacker could exploit this...

Microsoft Windows WLAN AutoConfig Service Denial of Service Vulnerability

Microsoft Windows WLAN AutoConfig Service is a wireless network card configuration service for Microsoft Windows Vista and above. Denial of Service vulnerability. The vulnerability stems from a failure to properly handle incoming error messages, and can be exploited to cause a denial of service o...

TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-5355)

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK Electronics, Inc. A command injection vulnerability exists in TOTOLINK N600R, which can be exploited by attackers to conduct command injection attacks via the lagtype parameter in /setting/setLanguageCfg...

The vulnerability of the Windows operating system’s WLAN service allows attackers to disclose sensitive information that is protected by this system.

The vulnerability of the Windows WLAN operating system is related to the exposure of sensitive information. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information from a remote location...

TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53558)

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, which is vulnerable to a command injection attack via the webwlanidx parameter in /setting/setWebWlanIdx...

TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50671)

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK Electronics, Inc. A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN00418c24 function, which can be exploited by attackers ...

TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53550)

TOTOLINK N600R is a wireless router from TOTOLINK, Taiwan, China.The TOTOLINK N600R V5.3c.7159B20190425 firmware version is vulnerable to command injection, which can be exploited by attackers via the /setting/CloudACMunualUpdate in the filename parameter in /setting/CloudACMunualUpdate to conduc...

D-Link DIR-816 A2 Buffer Overflow Vulnerability (CNVD-2022-42153)

The D-Link DIR-816 A2 is a wireless router from D-Link, Taiwan, China.A buffer overflow vulnerability exists in the D-Link DIR-816 A2, which stems from a boundary error in the addurlfilter parameter in /goform/websURLFilter when handling untrusted input, which could be exploited by an attacker to...

D-Link DIR-816 Buffer Overflow Vulnerability (CNVD-2022-64487)

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-816 A2v1.10CNB04 firmware version suffers from a buffer overflow vulnerability that originates from a boundary error in the MAC parameter in /goform/editassignment when handling untrusted input. An attacker...