14552 matches found
Apple iOS和Apple iPadOS 缓冲区错误漏洞
Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. Apple iOS and Apple iPadOS have a buffer error vulnerability that originates from a boundary error in the Wi-Fi component....
Aruba ClearPass Policy Manager 授权问题漏洞
Aruba ClearPass Policy Manager is an application of the U.S. company Aruba to provide wireless network security access management system Aruba ClearPass Policy Manager has an authentication bypass vulnerability, which can be exploited by attackers to bypass authentication leading to remote code...
CVE-2022-1679
A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system. Mitigation To mitigate...
Vulnerability Spotlight: How an attacker could chain several vulnerabilities in an industrial wireless router to gain root access
Francesco Benvenuto of Cisco Talos discovered these vulnerabilities. Blog by Francesco Benvenuto and Jon Munshaw. Cisco Talos recently discovered several vulnerabilities in InHand Networks’ InRouter302 that could allow an attacker to escalate their privileges on the targeted device from a... This...
TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53554)
TOTOLINK N600R is a wireless router from Taiwan-based Gion Electronics TOTOLINK, China.A command injection vulnerability exists in TOTOLINK N600R, which can be exploited by attackers to conduct command injection attacks via the ipdoamin parameter in /setting/setDiagnosisCfg...
TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-5355)
TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK Electronics, Inc. A command injection vulnerability exists in TOTOLINK N600R, which can be exploited by attackers to conduct command injection attacks via the lagtype parameter in /setting/setLanguageCfg...
TOTOLINK N600R Buffer Overflow Vulnerability
TOTOLINK N600R is a wireless router from Taiwan, China-based Gion Electronics TOTOLINK.A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN004200c8 function. An attacker could exploit this...
The vulnerability of the Windows operating system’s WLAN service allows attackers to disclose sensitive information that is protected by this system.
The vulnerability of the Windows WLAN operating system is related to the exposure of sensitive information. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information from a remote location...
Microsoft Windows WLAN AutoConfig Service Denial of Service Vulnerability
Microsoft Windows WLAN AutoConfig Service is a wireless network card configuration service for Microsoft Windows Vista and above. Denial of Service vulnerability. The vulnerability stems from a failure to properly handle incoming error messages, and can be exploited to cause a denial of service o...
TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50671)
TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK Electronics, Inc. A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN00418c24 function, which can be exploited by attackers ...
D-Link DIR-816 A2 Buffer Overflow Vulnerability (CNVD-2022-42153)
The D-Link DIR-816 A2 is a wireless router from D-Link, Taiwan, China.A buffer overflow vulnerability exists in the D-Link DIR-816 A2, which stems from a boundary error in the addurlfilter parameter in /goform/websURLFilter when handling untrusted input, which could be exploited by an attacker to...
TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53558)
TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, which is vulnerable to a command injection attack via the webwlanidx parameter in /setting/setWebWlanIdx...
TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53550)
TOTOLINK N600R is a wireless router from TOTOLINK, Taiwan, China.The TOTOLINK N600R V5.3c.7159B20190425 firmware version is vulnerable to command injection, which can be exploited by attackers via the /setting/CloudACMunualUpdate in the filename parameter in /setting/CloudACMunualUpdate to conduc...
D-Link DIR-816 Buffer Overflow Vulnerability (CNVD-2022-64487)
The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-816 A2v1.10CNB04 firmware version suffers from a buffer overflow vulnerability that originates from a boundary error in the MAC parameter in /goform/editassignment when handling untrusted input. An attacker...
D-Link DIR-816 A2 Command Injection Vulnerability (CNVD-2022-45933)
D-Link DIR-816 A2 is a wireless router from D-Link, Taiwan, China.A command injection vulnerability exists in D-Link DIR-816 A2, which stems from the failure to properly filter the admuser and admpass parameters in /goform/setSysAdm to construct command special characters, commands, etc. The...
D-Link DIR-816 Buffer Overflow Vulnerability (CNVD-2022-64488)
The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-816 A2v1.10CNB04 firmware version suffers from a buffer overflow vulnerability that originates from a boundary error in the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip when processing untrusted...
D-Link DIR-816 Buffer Overflow Vulnerability (CNVD-2022-64492)
The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link DIR-816 A2v1.10CNB04 version, which originates from a boundary error in the urladd parameter in the device/goform/websURLFilterAddDel when processing untrusted input. An...
D-Link DIR882 Command Injection Vulnerability
The D-Link DIR882 is a dual-band wireless router from D-Link, a Chinese company. The D-Link DIR882 is vulnerable to command injection, which can be exploited by attackers to elevate privileges to root via a carefully crafted load...
