The vulnerability in the web interface for managing microprogrammed wireless router software from Cisco’s Small Business series—RV110W, RV130, RV130W, and RV215W—allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability in the web interface for managing microprogramming software on Cisco Small Business RV110W, RV130, RV130W, and RV215W routers stems from the copying of buffers without checking the size of the input data during the processing of user fields in incoming HTTP packets. Exploiting...

CVE-2022-27633

An information disclosure vulnerability exists in the confctlgetguestwlan functionality of TCL LinkHub Mesh Wifi MS1G0001.0014. A specially-crafted network packet can lead to information disclosure. An attacker can send packets to trigger this vulnerability...

CVE-2022-24012

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...

TCL LinkHub Mesh Wi-Fi 安全漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. A security vulnerability exists in TCL LinkHub Mesh Wi-Fi version MS1G0001.0014, which stems from a buffer overflow vulnerability in the GetValue function, where a specially crafted configured value may cause a buffer overflow...

PT-2022-17627 · Tcl · Tcl Linkhub Mesh Wi-Fi

Name of the Vulnerable Software and Affected Versions: TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14 Description: A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality. A specially-crafted network packet can lead to a buffer overflow. An attacker can send a...

TCL LinkHub Mesh Wi-Fi 安全漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. A security vulnerability exists in TCL LinkHub Mesh Wi-Fi version MS1G0001.0014, which stems from a buffer overflow vulnerability in the GetValue function, where a specially crafted configured value may cause a buffer overflow...

SUSE SLES12 Security Update : kernel (SUSE-SU-2022:2629-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2629-1 advisory. - In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-fre...

SUSE-SU-2022:2629-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information...

D-Link DSL-3782 Command Injection Vulnerability

The D-Link DSL-3782 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DSL-3782 suffers from a command injection vulnerability that stems from the presence of a command injection point on the administration page. No detailed vulnerability details are provided at this time...

D-Link DSL-3782 Buffer Overflow Vulnerability (CNVD-2022-56666)

The D-Link DSL-3782 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DSL-3782 suffers from a buffer overflow vulnerability that stems from a stack-based buffer overflow in the getAttrValue method. No detailed vulnerability details are provided at this time...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-5544-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5544-1 advisory. It was discovered that the Atheros ath9k wireless device driver in the Linux kernel did not properly handle some error conditions, leading to...

CVE-2022-26440

In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220420037; Issue ID: GN20220420037...

TCL LinkHub Mesh Wi-Fi 信息泄露漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. TCL LinkHub Mesh Wi-Fi is vulnerable to an information disclosure vulnerability that originates in the confctlgetguestwlan function and can be exploited by attackers to cause information disclosure...

TCL LinkHub Mesh Wi-Fi 信息泄露漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. The TCL LinkHub Mesh Wi-Fi confctlgetmasterwlan feature is vulnerable to information disclosure, which can be exploited by attackers to cause information disclosure...

TCL LinkHub Mesh Wi-Fi 安全漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL. TCL LinkHub Mesh Wi-Fi confctlsetguestwlan suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

TEM FLEX-1085 安全漏洞

The TEM FLEX-1085 is a home WiFi alarm kit from TEM Brazil. A security vulnerability exists in the TEM FLEX-1085 that originates from an unknown function manipulation of the file /sistema/flash/reboot resulting in a denial of service...

TCL LinkHub Mesh Wi-Fi 信任管理问题漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. The TCL LinkHub Mesh Wi-Fi prodchangerootpasswd feature is hard-coded vulnerable. An attacker can exploit this vulnerability to obtain the root password...

Unauthorized Connection to Telnet Service Vulnerability in TOTOLINK T8

TOTOLINK T8 is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK T8 suffers from an unauthorized connection to Telnet service vulnerability, which can be exploited by an attacker to initiate unauthorized telnet and gain control of the server...

The vulnerability in the web interface of Cisco Small Business RV110W Wireless-N VPN Firewall, Cisco Small Business RV130 Series VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router allows a perpetrator to execute arbitrary code.

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W Wireless-N VPN Firewalls, Cisco Small Business RV130 Series VPN Routers, RV130W Wireless-N Multifunction VPN Routers, and RV215W Wireless-N VPN Routers arises from an operation that...

Vulnerability Spotlight: How a code re-use issue led to vulnerabilities across multiple products

By Francesco Benvenuto. Recently, I was performing some research on a wireless router and noticed the following piece of code:...