CVE-2021-25434

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using param partition in wireless firmware download mode...

Weak Password Vulnerability in AC Centralized Management Platform of AUO Electronic Equipment (Shanghai) Co.

AUO Electronic Equipment Shanghai Co., Ltd. is a company that mainly deals with network equipment, wireless equipment, switches and other items. A weak password vulnerability exists in the AC centralized management platform of AUO Electronic Devices Shanghai Ltd, which can be exploited by attacke...

Unauthorized Access Vulnerability in Thermal Network Wireless Monitoring System of Shandong Starter Measurement and Control Equipment Co.

Ltd. business scope includes: industrial automatic control system device manufacturing; industrial automatic control system device sales; supply of instruments and meters manufacturing; supply of instruments and meters sales; other special-purpose instrument manufacturing and so on. Shandong...

Aruba ClearPass Policy Manager 授权问题漏洞

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. A security vulnerability exists in Aruba ClearPass Policy Manager that can be exploited by an attacker to access some unexpected features on ClearPass...

Command Execution Vulnerability Exists in Sapido GR-1733

The Sapido GR-1733 is a gigabit wireless router. A command execution vulnerability exists in the Sapido GR-1733, which can be exploited by an attacker to execute arbitrary commands...

Huawei EulerOS: Security Advisory for python-rtslib (EulerOS-SA-2021-2164)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MOXA NPort IAW5000A-I/O Series 操作系统命令注入漏洞

MOXA NPort IAW5000A-I/O Series is a wireless device server for use in industrial environments from MOXA, China. The server integrates field serial devices with wireless Ethernet networks and incorporates digital IOs for industrial data acquisition applications. The NPort IAW5000A-I/O Series suffe...

EulerOS Virtualization 3.0.2.2 : PyYAML (EulerOS-SA-2021-2165)

According to the versions of the PyYAML package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability in the implementation of the Short Message Service SMS handling functionality of Cisco IOS Software and Cisco IOS ...

Moxa NPort IAW5000A-I/O Series Serial Device Server

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Moxa Equipment: NPort IAW5000A-I/O Series Wireless Device Server Vulnerabilities: Classic Buffer Overflow, Stack-based Buffer Overflow, Improper Input Validation, OS Command Injection 2. RISK EVALUATION...

NPort IAW5000A-I/O Series 缓冲区错误漏洞

MOXA NPort IAW5000A-I/O Series is a wireless device server for use in industrial environments from MOXA, Taiwan, China. The server enables integration of field serial devices with wireless Ethernet networks and incorporates digital IO for industrial data acquisition applications. A security...

MOXA NPort IAW5000A-I/O Series 安全漏洞

MOXA NPort IAW5000A-I/O Series is a wireless device server for use in industrial environments from MOXA, Taiwan, China. The server enables the integration of field serial devices with wireless Ethernet networks and incorporates digital IOs for industrial data acquisition applications. A security...

Denial of Service Vulnerability in Tenda AC9 (CNVD-2021-51322)

Tenda AC9 is a wireless router with Gigabit Ethernet port from Shenzhen Jixiang Tenda Technology Co. Tenda AC9 has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

NETGEAR WAC104 Authentication Bypass Vulnerability

NETGEAR WAC104 is a wireless access point AP from Netgear, Inc. The NETGEAR WAC104 authentication bypass vulnerability can be exploited by an unauthenticated attacker to bypass the AP by placing...

Weak Password Vulnerability in ZTE Corporation W908-A10000

W908-A10000 is a wireless controller from ZTE Corporation. A weak password vulnerability exists in the ZTE Corporation W908-A10000, which can be exploited by an attacker to obtain sensitive information...

NetworkManager bug fix and enhancement update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

ALBA-2021:2576 NetworkManager bug fix and enhancement update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

5G Security Vulnerabilities Fluster Mobile Operators

As 5G private networks roll out in the coming years, security may be a key issue for enterprises. A survey released at Mobile World Congress on Monday shows that major gaps persist in security capabilities among mobile operators. Some 68 percent of operators already sell private wireless networks...

Weak Password Vulnerability in the Wireless Network Authentication Management System of Beijing Yilian Yitong Technology Co. Ltd (CNVD-2021-48939)

Ltd. is a company whose business scope includes: technology development, technology transfer, technology consulting; computer technology training; computer animation design; computer system services; application software services, basic software services and so on. Ltd. wireless network...

CVE-2021-33535

In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iwconsole coniowritestr functionality. A specially crafted time server entry can cause an overflow of the time server buffer, resulting in remote code execution. An attacker can se...

CVE-2021-33537

In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in the iwwebs configuration parsing functionality. A specially crafted user name entry can cause an overflow of an error message buffer, resulting in remote code execution. An...