Lucene search
+L

14533 matches found

CNNVD
CNNVD
added 2023/12/04 12:00 a.m.11 views

Sierra Wireless ALEOS Code Issue Vulnerability

Sierra Wireless ALEOS AAF is a framework for creating applications in Sierra Wireless AirLink gateways from Sierra Wireless Canada. A code issue vulnerability exists in Sierra Wireless ALEOS 4.16 and prior versions that stems from a denial of service DOS vulnerability in the ACEManager component...

7.5CVSS6.9AI score0.02296EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.9 views

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Zhanrui UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in the wifi service...

7.8CVSS7.1AI score0.00097EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.10 views

Sierra Wireless ALEOS Cross-Site Scripting Vulnerability

Sierra Wireless ALEOS AAF is a framework for creating applications in Sierra Wireless AirLink gateways from Sierra Wireless Canada. A security vulnerability exists in Sierra Wireless ALEOS 4.16 and earlier versions that stems from the ACEManager component not validating the name and type of...

7.1CVSS6.8AI score0.00482EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/12/04 12:00 a.m.15 views

PT-2023-21829 · Qualcomm · Qualcomm Chipsets

Name of the Vulnerable Software and Affected Versions: Qualcomm Chipsets affected versions not specified Description: The issue is related to memory corruption in the WLAN Host while setting the PMK length in the internal cache. Recommendations: At the moment, there is no information about a newe...

7.8CVSS7.7AI score0.00156EPSS
SaveExploits0References6
CNVD
CNVD
added 2023/12/01 12:00 a.m.43 views

Tenda AC10 compare_parentcontrol_time function buffer overflow vulnerability

The Tenda AC10 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in the Tenda AC10 USAC10V4.0siV16.03.10.13cn version, which stems from the time parameter of the compareparentcontroltime function failing to correctly validate the length of the input data,...

9.8CVSS8.6AI score0.00976EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/11/30 12:00 a.m.8 views

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router from China Gion Electronics that supports WiFi 6 technology with high concurrent connections and dual-band transmission. TOTOLINK X6000R suffers from a command execution vulnerability that stems from the url parameter of the sub4119A0 function failing to...

9.8CVSS7.6AI score0.01536EPSS
SaveExploits1References1
OSV
OSV
added 2023/11/29 11:15 p.m.11 views

CVE-2023-40458

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Sierra Wireless, Inc ALEOS could potentially allow a remote attacker to trigger a Denial of Service DoS condition for ACEManager without impairing other router functions. This condition is cleared by restarting the device...

7.5CVSS5.8AI score0.00819EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/29 11:15 p.m.38 views

UBUNTU-CVE-2023-40458

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Sierra Wireless, Inc ALEOS could potentially allow a remote attacker to trigger a Denial of Service DoS condition for ACEManager without impairing other router functions. This condition is cleared by restarting the device...

7.5CVSS5.8AI score0.00819EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2023/11/29 11:15 p.m.32 views

CVE-2023-40458

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Sierra Wireless, Inc ALEOS could potentially allow a remote attacker to trigger a Denial of Service DoS condition for ACEManager without impairing other router functions. This condition is cleared by restarting the device...

7.5CVSS7.1AI score0.00819EPSS
SaveExploits0References2
CVE
CVE
added 2023/11/29 10:58 p.m.61 views

CVE-2023-40458

The CVE-2023-40458 vulnerability affects Sierra Wireless AirLink ALEOS ACEManager (ACEManager component) and is a Loop with Unreachable Exit Condition (Infinite Loop) that can allow a remote attacker to trigger a Denial of Service (DoS) without impairing other router functions. Affected products/...

7.5CVSS7.6AI score0.00819EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/29 10:58 p.m.39 views

CVE-2023-40458 AceManager DOS Vulnerability

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Sierra Wireless, Inc ALEOS could potentially allow a remote attacker to trigger a Denial of Service DoS condition for ACEManager without impairing other router functions. This condition is cleared by restarting the device...

7.5CVSS7.6AI score0.00819EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2023/11/29 10:58 p.m.80 views

CVE-2023-40458

Removed by vendor...

7.5CVSS7.5AI score0.00819EPSS
SaveExploits0
CNNVD
CNNVD
added 2023/11/29 12:00 a.m.10 views

Sierra Wireless ALEOS Security Vulnerability

Sierra Wireless ALEOS AAF is Sierra Wireless Canada's framework for creating applications in Sierra Wireless AirLink gateways. A security vulnerability exists in Sierra Wireless ALEOS 4.16 and prior versions that stems from the presence of an infinite loop, which allows an attacker to trigger a...

7.5CVSS6.6AI score0.00819EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/11/29 12:00 a.m.10 views

PT-2023-7919 · Sierra Wireless · Aleos

Name of the Vulnerable Software and Affected Versions: Sierra Wireless, Inc ALEOS affected versions not specified Description: The issue is related to a Loop with Unreachable Exit Condition, also known as an 'Infinite Loop', which could potentially allow a remote attacker to trigger a Denial of...

7.8CVSS7.2AI score0.00819EPSS
SaveExploits0References12
NVD
NVD
added 2023/11/27 9:15 p.m.36 views

CVE-2023-48034

An issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject arbitrary keystrokes via use of weak encryption...

6.1CVSS0.00248EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/11/27 9:15 p.m.6 views

CVE-2023-48034

An issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject arbitrary keystrokes via use of weak encryption...

6.1CVSS5.9AI score0.00248EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/27 9:15 p.m.18 views

Code injection

An issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject arbitrary keystrokes via use of weak encryption...

3.6CVSS6.9AI score0.00248EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/27 4:15 p.m.10 views

CVE-2023-49043

Buffer Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the wpapskcrypto parameter in the function fromSetWirelessRepeat...

9.8CVSS6.2AI score0.13224EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/11/27 12:00 a.m.11 views

PT-2023-31036 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue allows a remote attacker to execute arbitrary code via the wpapsk crypto parameter in the fromSetWirelessRepeat function. This enables the attacker to potentially gain control over the syste...

9.8CVSS9.7AI score0.13224EPSS
SaveExploits1References3
CVE
CVE
added 2023/11/27 12:00 a.m.42 views

CVE-2023-48034

Acer Wireless Keyboard SK-9662 uses weak encryption in its wireless protocol, enabling a nearby attacker to decrypt keystrokes and inject arbitrary keystrokes. Documented as CVE-2023-48034 with CVSS v3.1 base score 6.1 (MEDIUM). Available sources confirm physical-proximity attack vector and high ...

6.1CVSS6.1AI score0.00248EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder