Zyxel LTE3301-M209 Access Control Error Vulnerability

The Zyxel LTE3301-M209 is a wireless router from China-based Hopkins Zyxel. An access control error vulnerability exists in versions prior to Zyxel LTE3301-M209 V1.00ABLG.6C0, which stems from incorrect access control. An attacker can exploit the vulnerability to access the device using an...

D-Link DIR-823G Command Execution Vulnerability

D-Link DIR-823G is a wireless router from D-Link, a Chinese company. D-Link DIR-823G firmware version 1.02B05 contains a command execution vulnerability that stems from sub42383C's failure to properly filter constructed command special characters, commands, etc. The vulnerability can be exploited...

NETGEAR R7000P enable_band_steering buffer overflow vulnerability

NETGEAR R7000P is a wireless router from NETGEAR, Inc. NETGEAR R7000P version V1.3.1.64 has a buffer overflow vulnerability, which originates from the lack of length validation of input data in the enablebandsteering parameter, and can be exploited by attackers to cause a denial of service or...

D-Link DIR-878 Access Control Error Vulnerability

D-Link DIR-878 is a wireless router from D-Link China.The D-Link DIR-878 firmware version 1.02B05 contains an access control error vulnerability, which stems from the existence of incorrect access control. An attacker could use this vulnerability to log in with a blank password...

D-Link DIR-823G sub_4883F0 function buffer overflow vulnerability

The D-Link DIR-823G is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in D-Link DIR-823G firmware versions 1.02B04 and 1.02B05, which stems from a lack of length validation of input data in the sub4883F0 function, and can be exploited by an attacker to cause a...

NETGEAR R7000P openvpn_push1 buffer overflow vulnerability

NETGEAR R7000P is a wireless router from NETGEAR, Inc. A buffer overflow vulnerability exists in NETGEAR R7000P firmware version V1.3.1.64, which stems from a lack of length validation of data input to the openvpnpush1 parameter, which could be exploited by an attacker to cause a denial of servic...

PT-2022-6044 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.0.11 Description: An issue in the Linux kernel's WILC1000 wireless driver is related to a heap-based buffer overflow. This occurs due to missing validation of the number of channels when copying the list of...

Tenda AC21 set_device_name function buffer overflow vulnerability

The Tenda AC21 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC21 version V16.03.08.15, which is caused by the setdevicename function not checking the length and size of the input data, and can be exploited to cause a denial of service...

Tenda AC15 formSetIpMacBind Function Buffer Overflow Vulnerability

The Tenda AC15 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC15 firmware version V15.03.05.19, which is caused by the formSetIpMacBind function not checking the length of the input data, and can be exploited by an attacker to launch a...

Tenda AC15 fromSetRouteStatic function buffer overflow vulnerability

The Tenda AC15 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC15 version V15.03.05.18, which can be exploited to launch a denial-of-service attack because the fromSetRouteStatic function does not perform a length check on the input data...

Tenda AC21 formSetMacFilterCfg function buffer overflow vulnerability

The Tenda AC21 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC21 version V16.03.08.15, which is caused by the formSetMacFilterCfg function not checking the length and size of the input data, and can be exploited to cause a denial of service...

ZTE MF286R 安全漏洞

The ZTE MF286R is a wireless router from ZTE Corporation China.A buffer overflow vulnerability previously existed in the ZTE MF286R mf286rb07 version, which stems from the lack of input validation of the wifi interface parameters and can be exploited by attackers to conduct denial of service...

Oracle Linux 9 : kernel (ELSA-2022-8267)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8267 advisory. - posix-cpu-timers: Cleanup CPU timers before freeing them during exec Wander Lairson Costa 2116968 CVE-2022-2585 - fix race between exititimers and...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime may affect Tivoli Netcool Performance Manager for Wireless.

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 & 8 used by Tivoli Netcool Performance Manager for Wireless. Tivoli Netcool Performance Manager for Wireless has addressed the applicable CVEs. These issues were disclosed as part of the IBM Java SDK updates ti...

Optilink Network OP-XT71000N 跨站请求伪造漏洞

Optilink Network OP-XT71000N is a wireless router from Optilink Network India. A security vulnerability exists in Optilink Network OP-XT71000N version V2.2. An attacker could exploit this vulnerability to perform a cross-site request forgery attack...

Tenda AC1200 setRemoteWebManage Function Stack Overflow Vulnerability

Tenda AC1200 is a wireless router from Tenda China. , A stack overflow vulnerability exists in the Tenda AC1200 setRemoteWebManage function. An attacker can exploit this vulnerability to cause a denial of service via specially crafted overflow data...

AlmaLinux 9 : kernel (ALSA-2022:8267)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:8267 advisory. - An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an...

CVE-2022-32537 Medtronic MiniMed 600 Series Pump System Communication Issue

A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system components. Exploitation requires nearby wireless signal proximity with the patient and the device; advanced...

PT-2022-21355

Name of the Vulnerable Software and Affected Versions Medtronic affected versions not specified Description A vulnerability exists that could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system...

D-Link DSL-224 命令注入漏洞

The D-Link DSL-224 is a wireless router from China-based AUO D-Link. A command injection vulnerability exists in the D-Link DSL-224. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...