Unspecified vulnerability in Tenda TX3 (CNVD-2022-70592)

Tenda TX3 is a wireless router from Tenda, a Chinese company. A security vulnerability exists in Tenda TX3 that originates from the endIp parameter of /goform/SetPptpServerCfg containing a stack overflow. No details of the vulnerability are provided at this time...

The vulnerability of the PAPI network protocol implementation in the Wi-Fi Aruba Instant wireless connectivity deployment application allows a attacker to execute arbitrary code.

The vulnerability of the PAPI protocol implementation for Wi-Fi Aruba Instant wireless connectivity applications lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafte...

CVE-2022-35860

Missing AES encryption in Corsair K63 Wireless 3.1.3 allows physically proximate attackers to inject and sniff keystrokes via 2.4 GHz radio transmissions...

CVE-2022-35860

Missing AES encryption in Corsair K63 Wireless 3.1.3 allows physically proximate attackers to inject and sniff keystrokes via 2.4 GHz radio transmissions...

CVE-2022-35860

CVE-2022-35860 affects Corsair K63 Wireless keyboard (version 3.1.3). The root cause is missing AES encryption in the 2.4 GHz wireless channel, enabling physically proximate attackers to inject keystrokes and sniff them over the radio. The vulnerability is documented across multiple sources (NVD/...

Qualcomm WLAN 缓冲区错误漏洞

Qualcomm WLAN is a wireless LAN component from Qualcomm Incorporated Qualcomm. A security vulnerability exists in Qualcomm WLAN that stems from a lack of buffer length checking, resulting in a buffer overflow that can lead to a Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer...

Tenda AC10 Stack Buffer Overflow Vulnerability (CNVD-2023-50811)

The Tenda AC10 is a wireless router. The Tenda AC10 suffers from a stack buffer overflow vulnerability that is caused by incorrect boundary checking in the formSetClientState function. An attacker can exploit this vulnerability to cause a buffer overflow and execute arbitrary code on the system, ...

CVE-2022-35860

Missing AES encryption in Corsair K63 Wireless 3.1.3 allows physically proximate attackers to inject and sniff keystrokes via 2.4 GHz radio transmissions...

Tenda AC10 Stack Buffer Overflow Vulnerability

The Tenda AC10 is a wireless router. The Tenda AC10 suffers from a stack buffer overflow vulnerability that is caused by a failure of the addWifiMacFilter function to properly bounds check. An attacker can exploit this vulnerability to cause a buffer overflow and execute arbitrary code on the...

PT-2022-17489 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. This affects various Qualcomm Snapdragon products, including...

Corsair K63 Mechanical Gaming Keyboard 安全漏洞

Corsair K63 Mechanical Gaming Keyboard is a wireless gaming keyboard from Corsair. A security vulnerability exists in the Corsair K63 Mechanical Gaming Keyboard version 3.1.3, which stems from a lack of AES encryption...

CVE-2022-35860

Missing AES encryption in Corsair K63 Wireless 3.1.3 allows physically proximate attackers to inject and sniff keystrokes via 2.4 GHz radio transmissions...

PT-2022-22973 · Corsair · Corsair K63 Wireless

Name of the Vulnerable Software and Affected Versions: Corsair K63 Wireless version 3.1.3 Description: The issue concerns a lack of AES encryption, allowing physically proximate attackers to inject and sniff keystrokes via 2.4 GHz radio transmissions. Recommendations: For Corsair K63 Wireless...

Qualcomm WLAN 缓冲区错误漏洞

Qualcomm WLAN is a wireless LAN component from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm WLAN that stems from a lack of length checking, leading to information leakage...

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and in turn potentially execute code.

...

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code.

...

The vulnerability of the NIS-HAP11AC wireless access point’s microprogramming software, due to lack of access control mechanisms, allows a intruder to execute arbitrary code.

The vulnerability of the NIS-HAP11AC wireless access point’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through an external port using the Telnet protocol...

ALPINE-CVE-2022-41674

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211bssinfoupdate function in net/mac80211/scan.c...

ALPINE-CVE-2022-42720

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to trigger use-after-free conditions to potentially execute code...

AZL-11118 CVE-2022-42722 affecting package kernel for versions less than 5.15.74.1-3

In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against the beacon protection of P2P devices...