PT-2022-18253 · Roku · Rokuos

Name of the Vulnerable Software and Affected Versions: RokuOS versions 9.4.0 build 4200 or earlier Description: The issue affects Roku devices that use a Realtek WiFi chip and are running the specified versions of RokuOS, allowing for arbitrary file modification. Recommendations: For RokuOS...

Tenda AC9 Stack Overflow Vulnerability (CNVD-2022-38542)

Tenda AC9 is a wireless router. a stack overflow vulnerability exists in the Tenda AC9 SetStaticRouteCfg function. An attacker can exploit the vulnerability to obtain a stable root shell via a constructed payload...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of boundary checking in the wifi service, which may result in out-of-bounds writes...

D-Link DIR-823G 命令注入漏洞

D-Link DIR-823G is a wireless router from D-Link, a Taiwan-based company. D-Link DIR-823G is vulnerable to command injection, which can be exploited by attackers to achieve command injection...

Command Execution Vulnerability in TOTOLINK A3100R

The TOTOLINK A3100R is a wireless router. A command execution vulnerability exists in the TOTOLINK A3100R, which can be exploited by an attacker to gain control of the server...

TOTOLINK N600R has a logic flaw vulnerability

The N600R is a wireless router. A logic flaw vulnerability exists in the TOTOLINK N600R, which can be exploited by attackers to bypass login restrictions...

Unauthorized Access Vulnerability in TOTOLINK N300RH

The TOTOLINK N300RH is a wireless router. An unauthorized access vulnerability exists in the TOTOLINK N300RH, which can be exploited by attackers to obtain sensitive information...

Totolink A3100R Access Control Error Vulnerability

The TotoLink A3100R is a series of wireless routers from TotoLink, Taiwan, China. An attacker could use this vulnerability to set the administrator configuration without a cookie...

TotoLink A3100R OS Command Injection Vulnerability

TotoLink A3100R is a series of wireless routers from TotoLink, Taiwan, China.TotoLink A3100R version V5.9c.4577 contains an operating system command injection vulnerability that stems from input fields that are not properly filtered and can be exploited by an attacker to cause a command injection...

ASB-A-205836329

In broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the shell user, if wireless debugging is enabled, due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed...

openSUSE 15 Security Update : kernel-firmware (openSUSE-SU-2022:1065-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:1065-1 advisory. - Improper input validation in firmware for IntelR PROSet/Wireless Wi-Fi in multiple operating systems and KillerTM Wi-Fi in Windows 10 and...

openSUSE: Security Advisory for kernel-firmware (openSUSE-SU-2022:1065-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Automaker Cybersecurity Lagging Behind Tech Adoption, Experts Warn

A pair of recent vulnerabilities found in the automaker ecosystem might not seem like a real danger taken separately. But experts warn a lack of attention on cybersecurity could plague “smart” car and electric vehicle systems — and users — in years to come, as the use of automotive technology...

SUSE-SU-2022:1065-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: Update Intel Wireless firmware for 9xxx INTEL-SA-00539, bsc1196333: CVE-2021-0161: Improper input validation in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow a privileged user to potentially enable escalation of...

OPENSUSE-SU-2022:1065-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: Update Intel Wireless firmware for 9xxx INTEL-SA-00539, bsc1196333: CVE-2021-0161: Improper input validation in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow a privileged user to potentially enable escalation of...

GE General Electric Renewable Energy MDS Radios 加密问题漏洞

GE General Electric Renewable Energy MDS Radios are a family of industrial wireless solutions from General Electric GE. GE General Electric Renewable Energy's MDS iNET/iNET II/SD/TD220/TD220MAX Radios are vulnerable to an encryption issue that stems from weaknesses in the wireless security softwa...

Security update for kernel-firmware (important)

openSUSE Security Update: Security update for kernel-firmware Announcement ID: openSUSE-SU-2022:1065-1 Rating: important References: 1186938 1188662 1192953 1195786 1196333 Cross-References: CVE-2021-0066 CVE-2021-0071 CVE-2021-0072 CVE-2021-0076 CVE-2021-0161 CVE-2021-0164 CVE-2021-0165...

SUSE: Security Advisory (SUSE-SU-2022:1065-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-39763

In Settings, there is a possible way to make the user enable WiFi due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...

CVE-2021-39763

In Settings, there is a possible way to make the user enable WiFi due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...