I-O Data Device UD-LT2 安全漏洞

I-O Data Device UD-LT2 is a wireless router from I-O Data Device Japan. A security vulnerability exists in I-O Data Device UD-LT2 1.00.008SE and prior versions, which stems from an inclusion of undocumented functionality issue that could allow a remote attacker to disable the LAN-side firewall...

CVE-2024-49734

In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determine what site a device has connected to through a VPN due to side channel information disclosure. This could lead to remote information disclosure with no additional execution privileges needed. Use...

CP Plus CP-XR-DE21-S 安全漏洞

The CP Plus CP-XR-DE21-S is a wireless router from CP Plus. A security vulnerability exists in the CP Plus CP-XR-DE21-S that stems from insecure handling of cookie flags used in the web interface, which can be exploited by an attacker to obtain sensitive information and compromise the target syst...

WAVLINK AC3000 Buffer Overflow Vulnerability

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. The WAVLINK AC3000 suffers from a buffer overflow vulnerability that originates from the wireless.cgi setwifibasicmesh function failing to properly validate the length of the input data, which can be exploited by an attacker to execut...

WAVLINK AC3000 Buffer Overflow Vulnerability (CNVD-2025-08331)

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. The WAVLINK AC3000 suffers from a buffer overflow vulnerability that originates in the qos.cgi qosstasettings function that fails to properly validate the length and size of input data, which can be exploited by an attacker to execute...

WAVLINK AC3000 Buffer Overflow Vulnerability

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. A buffer overflow vulnerability exists in the WAVLINK AC3000, which is caused by the usbip.cgi setinfo function failing to properly validate the length of the input data, and can be exploited to execute arbitrary code or cause a denia...

WAVLINK AC3000 Buffer Overflow Vulnerability (CNVD-2025-08329)

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. The WAVLINK AC3000 suffers from a buffer overflow vulnerability, which originates from the qosdat parameter of the qos.cgi qossettings function that fails to properly validate the length of the input data, which can be exploited by an...

WAVLINK AC3000 Access Control Error Vulnerability

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. The WAVLINK AC3000 is vulnerable to an access control error vulnerability that stems from a firmware update. No details of the vulnerability are available at this time...

Unspecified Vulnerability in D-Link DIR-823X (CNVD-2025-02107)

The D-Link DIR-823X is a wireless router from China's AUO D-Link. A security vulnerability exists in the D-Link DIR-823X version 240126/240802 that stems from the presence of a null pointer dereference. No details of the vulnerability are provided at this time...

IoT Botnet Linked to Large-scale DDoS Attacks Since the End of 2024

Since the end of 2024, we have been continuously monitoring large-scale DDoS attacks orchestrated by an IoT botnet exploiting vulnerable IoT devices such as wireless routers and IP cameras...

WAVLINK AC3000 Path Traversal Vulnerability

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. The WAVLINK AC3000 suffers from a path traversal vulnerability, which stems from the failure of the adddirname parameter of the nas.cgi adddir function to correctly filter special elements in the path of a resource or file. An attacke...

WAVLINK AC3000 wireless.cgi set_wifi_basic function buffer overflow vulnerability

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. The WAVLINK AC3000 suffers from a buffer overflow vulnerability that originates from the wireless.cgi setwifibasic function failing to properly validate the length of input data, which can be exploited by an attacker to execute...

WAVLINK AC3000 Buffer Overflow Vulnerability (CNVD-2025-08335)

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. A buffer overflow vulnerability exists in the WAVLINK AC3000, which is caused by the wireless.cgi SetName function failing to properly validate the length of input data, and can be exploited by an attacker to execute arbitrary code on...

WAVLINK AC3000 External Configuration Control Vulnerability (CNVD-2025-114444)

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. An external configuration control vulnerability exists in the WAVLINK AC3000, which can be exploited by attackers to cause a privilege bypass...

WAVLINK AC3000 Command Injection Vulnerability (CNVD-2025-08327)

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. The WAVLINK AC3000 suffers from a command injection vulnerability that stems from the nas.cgi removedir function failing to properly filter constructor command special characters, commands, etc. The vulnerability can be exploited to...

WAVLINK AC3000 External Configuration Control Vulnerability

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. An external configuration control vulnerability exists in the WAVLINK AC3000, which can be exploited by attackers to cause a privilege bypass...

SUSE CVE-2024-57898

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: clear link ID from bitmap during link delete after clean up Currently, during link deletion, the link ID is first removed from the validlinks bitmap before performing any clean-up operations. However, some functio...

D-Link DIR-816 安全漏洞

The D-Link DIR-816A2 is a router from China's AUO D-Link. The D-Link DIR-816A2 suffers from an Access Control Error vulnerability that stems from improper access control of the form2WlanBasicSetup.cgi component, which can be exploited by an unauthenticated attacker to set up 2.4G and 5G wireless...

D-Link DIR-816 A2 /goform/form2AdvanceSetup.cgi Access Control Error Vulnerability

The D-Link DIR-816 A2 is a wireless router from China's AUO D-Link. An access control error vulnerability exists in D-Link DIR-816 A2 version 1.10CNB05R1B011D88210, which stems from improper access control in /goform/form2AdvanceSetup.cgi. An attacker can exploit this vulnerability to set the 2.4...

The vulnerability of the WLAN AutoConfig service for Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the WLAN AutoConfig service for Windows operating systems lies in the reading of data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...