14510 matches found
The vulnerability of the GAS frame processing function in the 802.11 protocol of Cisco Wireless LAN Controllers allows a attacker to induce a service failure.
The vulnerability of the Generic Advertising Service GAS frame processing function in Cisco Wireless LAN Controllers based on the 802.11 protocol is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure ...
The vulnerability of the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol in Cisco Wireless LAN Controller (WLC) software allows a attacker to cause a service failure.
The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation in Cisco Wireless LAN Controller WLC software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending a special...
Apple iOS, iPadOS and macOS Catalina Wi-Fi Component Double Release Vulnerability
Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a specialized operating system developed for Mac computers.Wi-Fi is one of the wireless Internet components. o...
kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c
A flaw was found in the Linux kernel's Marvell wifi chip driver. A heap overflow in mwifiexupdatebssdescwithie function in marvell/mwifiex/scan.c allows remote attackers to cause a denial of servicesystem crash or execute arbitrary code...
kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c
A flaw was found in the mwifiex implementation in the Linux kernel. A system connecting to wireless access point could be manipulated by an attacker with advanced permissions on the access point into localized memory corruption or possibly privilege escalation...
Bluetooth devices supporting LE and specific BR/EDR implementations are vulnerable to method confusion attacks
Overview Bluetooth Low Energy BLE and Basic Rate / Enhanced Data Rate BR/EDR Core Configurations are used for low-power short-range communications. To establish an encrypted connection, two Bluetooth devices must pair with each other using an agreed upon Association Model. It is possible for an...
CVE-2020-12798
Cellebrite UFED 5.0 to 7.5.0.845 implements local operating system policies that can be circumvented to obtain a command prompt via the Windows file dialog that is reachable via the Certificate-Based Authentication option of the Wireless Network Connection screen...
CVE-2020-12798
Cellebrite UFED 5.0 to 7.5.0.845 implements local operating system policies that can be circumvented to obtain a command prompt via the Windows file dialog that is reachable via the Certificate-Based Authentication option of the Wireless Network Connection screen...
Design/Logic Flaw
Cellebrite UFED 5.0 to 7.5.0.845 implements local operating system policies that can be circumvented to obtain a command prompt via the Windows file dialog that is reachable via the Certificate-Based Authentication option of the Wireless Network Connection screen...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A NULL pointer dereference in drivers/net/wireless/intel/iwlwifi/pcie/trans.c allow an attacker to crash the system...
Intel® PROSet/Wireless WiFi Software x < 21.70.0 Multiple Vulnerabilities
A wireless network adapter driver on the remote host is affected by multiple security vulnerabilities: - Insecure inherited permissions in IntelR PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an authenticated user to potentially enable escalation of privilege via loca...
Stack overflow
TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in handling RTSP packets. This may result in remote code execution or denial of service. The issue is in the binary rtspd in /sbin when parsing a long "Authorization: Basic" RTSP...
CVE-2020-12763
TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in handling RTSP packets. This may result in remote code execution or denial of service. The issue is in the binary rtspd in /sbin when parsing a long "Authorization: Basic" RTSP...
CVE-2020-12763
TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in RTSP header parsing within the rtspd binary (/sbin). The flaw occurs when handling a long Authorization: Basic header and can lead to remote code execution or denial of servic...
The vulnerability of the is_wlc_event_frame function in the Broadcom brcmfmac WiFi kernel driver for the Linux operating system allows a hacker to gain unauthorized access to information and compromise its integrity and accessibility.
The vulnerability of the iswlceventframe function in the Broadcom brcmfmac WiFi driver for Linux operating systems is related to insufficient input data validation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and...
Wavlink WL-WN530HG4 Information Disclosure Vulnerability (CNVD-2020-41784)
WAVLINK WL-WN530HG4 is a wireless network signal extender from China RuiYin Technology WAVLINK. A security vulnerability exists in WAVLINK WL-WN530HG4 M30HG4.V5030.191116 version. The vulnerability can be exploited by an attacker to obtain the current administrator password in plaintext form in t...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists in multiple functions of drivers/net/wireless/ath/ath9k/htchst.c due to the memory consumption which allows an attacker to crash the system...
Ayision Ays-WR01 Cross-Site Scripting Vulnerability
The Ayision Ays-WR01 is a wireless repeater from Ayision China. A cross-site scripting vulnerability exists in the wireless settings in the Ayision Ays-WR01 v28K.RPT.20161224 release. The vulnerability stems from a network system or product performing operations on memory without properly...
CommScope Ruckus ZoneFlex R500 Cross-Site Request Forgery Vulnerability
CommScope Ruckus ZoneFlex R500 is a wireless access point product from CommScope, Inc. A cross-site request forgery vulnerability exists in the login.asp page in the CommScope Ruckus ZoneFlex R500. An attacker could exploit this vulnerability to perform a crawl or other analysis with the SUBCA-1...