The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

The vulnerability of the ACEManager component in the ALEOS operating system of Sierra Wireless’ wireless routers—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—allows attackers to carry out cross-site scripting attacks.

The vulnerability of the ACEManager component in the ALEOS operating system of Sierra Wireless’ wireless routers—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a remote attacker to perform...

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

The vulnerability of the ALEOS operating system’s debugging mode in wireless routers from Sierra Wireless—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ALEOS operating system’s debugging mode for Sierra Wireless’ wireless routers—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—is related to the use of strictly encrypted credentials. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

The vulnerability of the ACEManager component in the ALEOS operating system of Sierra Wireless’ wireless routers—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—allows a hacker to execute arbitrary scripts and trigger a system reboot.

The vulnerability of the ACEManager component in the ALEOS operating system of Sierra Wireless’ wireless routers—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—is related to the ability to load files of a malicious nature without limitation. Exploiting this vulnerability allows an attacker to execute...

The vulnerability of the ACEManager component in the ALEOS operating system of Sierra Wireless’ wireless routers—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—allows a hacker to cause service interruptions.

The vulnerability of the ACEManager component in the ALEOS operating system for wireless routers from Sierra Wireless—such as the MP70, RV50x, RV55, LX40, LX60 ES450, and GX450 models—is related to pre-installed credentials due to the use of the assert function or similar operators. Exploiting th...

Tenda AX3 Buffer Overflow Vulnerability (CNVD-2023-9804342)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 version V16.03.12.11, which originates from the failure of the function setdevicename to correctly validate the length and size of the input data, and can be...

The vulnerability of the ACEManager component in the ALEOS operating system of Sierra Wireless’ wireless routers—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—allows a hacker to cause service interruptions.

The vulnerability of the ACEManager component in the ALEOS operating system of Sierra Wireless’ wireless routers—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—is related to pointer aliasing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

The vulnerability of the ALEOS operating system in wireless routers from Sierra Wireless—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the ALEOS operating system in wireless routers from Sierra Wireless—MP70, RV50x, RV55, LX40, LX60 ES450, and GX450—is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

CVE-2023-49406

Tenda W30E V16.01.0.124843 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...

Sierra Wireless AirLink with ALEOS firmware

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION : Exploitable remotely/low attack complexity Vendor : Sierra Wireless Equipment : AirLink Vulnerabilities : Infinite Loop, NULL Pointer Dereference, Cross-site Scripting, Reachable Assertion, Use of Hard-coded Credentials, Use of Hard-coded...

PT-2023-31452 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 16.01.0.124843 Description: A stack overflow issue was discovered via the function formUpgradeMeshOnline. Recommendations: For Tenda W30E version 16.01.0.124843, consider disabling the formUpgradeMeshOnline function until a...

Sierra:21 - Flaws in Sierra Wireless Routers Expose Critical Sectors to Cyber Attacks

A collection of 21 security flaws have been discovered in Sierra Wireless AirLink cellular routers and open-source software components like TinyXML and OpenNDS. Collectively tracked as Sierra:21, the issues expose over 86,000 devices across critical sectors like energy, healthcare, waste...

PT-2023-29099 · Unknown · Kernel Module

Name of the Vulnerable Software and Affected Versions: Kernel module affected versions not specified Description: The issue is related to data verification errors in the kernel module. Successful exploitation may cause WLAN interruption. Recommendations: At the moment, there is no information abo...

The vulnerability of the software for improving the performance of the wireless network in the Intel Connectivity Performance Suite, related to lack of access control, allows a hacker to disclose protected information.

The vulnerability of the software for improving the performance of the Intel Connectivity Performance Suite wireless network is related to lack of access control. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

TOTOLINK A3002RU 安全漏洞

TOTOLINK A3002RU is a wireless router product manufactured by China's Gion Electronics TOTOLINK that supports a wide range of network features and services. The TOTOLINK A3002RU suffers from an improper access control vulnerability that can be exploited by an attacker to execute arbitrary code...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption in the WLAN Host when deserializing input PMK bytes without checking the input PMK length...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption in the WLAN Host when processing RRM beacons on the AP...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a buffer over-read in the WLAN Firmware...