CVE-2022-36158

Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page /usr/www/ja/mntcmd.cgi...

Tenda i9 formwrlSSIDgett function buffer overflow vulnerability

Tenda i9 is an enterprise wireless AP device. a buffer overflow vulnerability exists in the Tenda i9 formwrlSSIDgett function, which can be exploited by attackers to cause a denial of service DoS via a specially crafted string...

Tenda i9 set_local_time function buffer overflow vulnerability

Tenda i9 is an enterprise wireless AP device. a buffer overflow vulnerability exists in the Tenda i9 setlocaltime function, which can be exploited by attackers to cause a denial of service DoS via a specially crafted string...

Tenda i9 formWifiMacFilterGet function buffer overflow vulnerability

Tenda i9 is an enterprise wireless AP device. a buffer overflow vulnerability exists in the Tenda i9 formWifiMacFilterGet function, which can be exploited by attackers to cause a denial of service DoS via a specially crafted string...

Tenda i9 formwrlSSIDset function buffer overflow vulnerability

Tenda i9 is an enterprise wireless AP device. a buffer overflow vulnerability exists in the Tenda i9 formwrlSSIDset function, which can be exploited by attackers to cause a denial of service DoS via a specially crafted string...

CVE-2022-37235

Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.13410.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware. There is a stack overflow vulnerability caused by strncat...

CVE-2022-37232

CVE-2022-37232 affects Netgear N300 wireless router WNR2000v4 with firmware version V1.0.0.70. The vulnerability is a buffer overflow in the uhttpd web server caused by strcpy, leading to a stack overflow. CVSS v3.1 base score is 9.8 (Network attack, high impact on confidentiality, integrity, and...

CVE-2022-37232

Netgear N300 wireless router wnr2000v4-V1.0.0.70 is vulnerable to Buffer Overflow via uhttpd. There is a stack overflow vulnerability caused by strcpy...

Tenda i9 缓冲区错误漏洞

Tenda i9 is an enterprise wireless AP device. a buffer overflow vulnerability exists in the Tenda i9 formwrlSSIDgett function, which can be exploited by attackers to cause a denial of service DoS via a specially crafted string...

CVE-2022-31937

CVE-2022-31937 affects Netgear N300 wireless router (model wnr2000v4) with firmware version 1.0.0.70, describing a stack overflow via strcpy in the uhttpd component. The public descriptions consistently identify a buffer overflow in the web server (uhttpd) as the root cause, leading to potential ...

Tenda AC21 Buffer Overflow Vulnerability (CNVD-2023-28113)

Tenda AC21 is a wireless router from Tenda China. Tenda AC21 version V16.03.08.15 contains a buffer overflow vulnerability, which originates from the lack of length checking of the formSetDeviceName function in /bin/httpd for input data, and can be exploited to cause httpd to restart via the...

Tenda AC21 Buffer Overflow Vulnerability

Tenda AC21 is a wireless router from Tenda China. Tenda AC21 V16.03.08.15 is vulnerable to a buffer overflow vulnerability, which originates in the formfastsettingwifiset function of /bin/httpd for lack of length checking of input data, and can be exploited by an attacker to cause httpd to restar...

Tenda AC21 formSetQosBand function buffer overflow vulnerability

The Tenda AC21 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC21 version V16.03.08.15, which originates from a lack of length checking of input data in the formSetQosBand function of /bin/httpd, which can be exploited to cause httpd to resta...

Wifi HD Wireless Disk Drive 11 - Local File Inclusion

Exploit Title: Wifi HD Wireless Disk Drive 11 - Local File Inclusion Date: Aug 13, 2022 Exploit Author: Chokri Hammedi Vendor Homepage: http://www.savysoda.com Software Link: https://apps.apple.com/us/app/wifi-hd-wireless-disk-drive/id311170976 Version: 11 Tested on: iPhone OS 155 Proof of Concep...

Medtronic NGP 600 Series Insulin Pumps

1. EXECUTIVE SUMMARY CVSS v3 4.8 ATTENTION: Exploitable from an adjacent network Vendor: Medtronic Equipment: MiniMed 600 Series Insulin Pumps Vulnerability: Protection Mechanism Failure 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthorized user to deliver...

D-Link DIR-2150 Buffer Overflow Vulnerability

D-Link DIR-2150 is a wireless router device from D-Link. D-Link DIR-2150c is vulnerable to a buffer overflow, which can be exploited by attackers to execute code in the root context...

D-Link DIR-2150 Operating System Command Injection Vulnerability

The D-Link DIR-2150 is a wireless router device from D-Link.The D-Link DIR-2150 is vulnerable to an operating system command injection vulnerability that could be exploited by an attacker to execute code in the router context...

D-Link DIR-2150 Buffer Overflow Vulnerability (CNVD-2023-21662)

The D-Link DIR-2150 is a wireless router device from D-Link. The D-Link DIR-2150 is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to execute code in the root context...

D-Link DIR-2150 OS Command Injection Vulnerability (CNVD-2023-21660)

The D-Link DIR-2150 is a wireless router device from D-Link.The D-Link DIR-2150 is vulnerable to an operating system command injection vulnerability that could be exploited by attackers to execute code in the context of a service account...

Use After Free

Linux kernel’s Atheros is vulnerable to Use After Free. The vulnerability exists in the wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the syst...