The vulnerability of the cfg80211_change_iface() function in the net/wireless/util.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cfg80211changeiface function in the net/wireless/util.c module of the Linux kernel is related to incorrect initialization of data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the mac802154_llsec_key_del() function in the net/mac802154/llsec.c module of the Linux kernel’s wireless subsystem allows a attacker to compromise the confidentiality and integrity of protected information, or cause service failures.

The vulnerability of the mac802154llseckeydel function in the net/mac802154/llsec.c module of the Linux kernel’s wireless subsystem is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of...

The vulnerability of the wilc_netdev_cleanup() function in the drivers/net/wireless/microchip/wilc1000/netdev.c driver of the Atmel WILC1000 Linux operating system allows a hacker to cause a service failure.

The vulnerability of the wilcnetdevcleanup function in the drivers/net/wireless/microchip/wilc1000/netdev.c file of the Atmel WILC1000 Linux kernel driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2024-33433

Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the Wireless Page...

CVE-2024-33433

Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the Wireless Page...

Intel® PROSet/Wireless WiFi and Bluetooth® Advisory

Summary: Potential security vulnerabilities in some Intel® PROSet/Wireless WiFi and Bluetooth® products may allow denial of service. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-38654 Description: Improper inp...

TOTOLINK CPE CP450 安全漏洞

TOTOLINK CPE CP450 is an outdoor wireless client terminal device from China Gion Electronics TOTOLINK, which is mainly used to provide wireless broadband access services, especially for wireless network coverage in rural or remote areas. A security vulnerability exists in the TOTOLINK CPE CP450...

TOTOLINK CPE CP450 安全漏洞

TOTOLINK CP450 is an outdoor wireless client terminal device from China Gion Electronics TOTOLINK, which is mainly used to provide wireless broadband access services, especially for wireless network coverage in rural or remote areas. The TOTOLINK CP450 suffers from a buffer overflow vulnerability...

TOTOLINK CPE CP450 安全漏洞

TOTOLINK CP450 is a wireless bridge from China Gion Electronics TOTOLINK. The TOTOLINK CP450 suffers from a command injection vulnerability that stems from the downloadfirmware method failing to properly filter constructed command special characters, commands, and so on. No detailed vulnerability...

Intel PROSet/Wireless WiFi and Bluetooth May 2024 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® PROSet/Wireless WiFi and Bluetooth® products, which might allow denial of service. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the...

CVE-2024-33433

The CVE-2024-33433 entry concerns TOTOLINK X2000R (pre v1.0.0-B20231213.1013) with a Cross Site Scripting vulnerability in the Wireless Page caused by insufficient filtering/escaping of the Guest Access Control parameter. An attacker could exploit this via a crafted request to execute arbitrary W...

PT-2024-25254 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R versions prior to v1.0.0-B20231213.1013 Description: The issue allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the "Wireless Page" API endpoint. This enables the attacker to perform...

wireless-regdb bug fix and enhancement update

An update is available for wireless-regdb. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Lin...

Unspecified Vulnerability in D-Link DAP-2622 (CNVD-2024-24417)

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 that stems from a lack of authentication in the DDP Settings SSID list. No details of the vulnerability are provided at this time...

Unspecified Vulnerability in D-Link DAP-2622

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 due to a stack-based buffer overflow remote code execution vulnerability in the DDP firmware upgrade file name. An attacker could exploit the vulnerabilit...

Tenda i21 formWifiMacFilterSet function buffer overflow vulnerability

Tenda i21 is a wireless access point from Tenda China. A buffer overflow vulnerability exists in Tenda i21 version 1.0.0.144656, which originates from the parameter ssidIndex of the function formWifiMacFilterSet that fails to correctly validate the length of the input data, and can be exploited b...

Tenda i21 formsetStaOffline function buffer overflow vulnerability

Tenda i21 is a wireless access point from Tenda China. A buffer overflow vulnerability exists in Tenda i21 version 1.0.0.144656, which originates from the parameter GO/ssidIndex in the file /goform/setStaOffline that fails to correctly validate the length and size of the input data, and can be...

Tenda i21 formWifiMacFilterGet function buffer overflow vulnerability

Tenda i21 is a wireless access point from Tenda China. A buffer overflow vulnerability exists in Tenda i21 version 1.0.0.144656, which originates from the parameter index of the function formWifiMacFilterGet that fails to correctly validate the length of the input data, and can be exploited by a...

CVE-2023-37325

D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to make unauthorized changes to device configuration on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The...

CVE-2023-37325 D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability

D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to make unauthorized changes to device configuration on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The...