CVE-2021-40059

There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality...

Tenda AX1806 缓冲区错误漏洞

The Tenda AX1806 is a WiFi6 wireless router from Tenda, China. A stack overflow vulnerability exists in the Tenda AX1806 formfastsettingwifiset function, which can be exploited by an attacker to cause a denial of service DoS via the ssid parameter...

HUAWEI EMUI和Honor Magic Ui 安全漏洞

Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI Wi-Fi modules have a privilege control vulnerability that could be exploited by attackers to obtain sensitive information...

SAMSUNG Watch Active Plugin 日志信息泄露漏洞

The SAMSUNG Galaxy Watch Plugin is a component of a Galaxy Wearable application from Samsung South Korea. A log information disclosure vulnerability exists in versions prior to SAMSUNG Watch Active Plugin 2.2.05.22012751, which allows an attacker to access password information for WiFiAp in logs...

Samsung Galaxy S3 Plugin 日志信息泄露漏洞

The SAMSUNG Galaxy S3 Plugin is a component of the Samsung Gear application from Samsung South Korea. A log information disclosure vulnerability exists in versions prior to Samsung Galaxy S3 Plugin 2.2.03.22012751, which allows an attacker to access password information for WiFiAp in the log...

SAMSUNG Watch Active2 Plugin 日志信息泄露漏洞

SAMSUNG Watch Active2 Plugin is a component of a Galaxy Wearable application from Samsung South Korea. A log information disclosure vulnerability exists in versions prior to SAMSUNG Watch Active2 Plugin 2.2.08.22012751, which allows an attacker to access password information for WiFiAp in logs...

NETGEAR WAC120 Cross-Site Scripting Vulnerability

Netgear NETGEAR WAC120 is a wireless access point AP from Netgear, Inc. A cross-site scripting vulnerability exists in the Netgear WAC120 AC Access Point, which stems from unauthenticated cross-site scripting XSS could lead to a variety of attacks, such as session hijacking or even clipboard...

PT-2022-17552 · Samsung · Galaxy S3 Plugin

Name of the Vulnerable Software and Affected Versions: Galaxy S3 Plugin versions prior to 2.2.03.22012751 Description: The issue allows an attacker to access password information of connected WiFiAp in the log. Recommendations: For Galaxy S3 Plugin versions prior to 2.2.03.22012751, update to...

PT-2022-17557 · Samsung · Galaxy Watch3 Plugin

Name of the Vulnerable Software and Affected Versions: Galaxy Watch3 Plugin versions prior to 2.2.09.22012751 Description: The issue allows an attacker to access password information of connected WiFi access points in the log. Recommendations: For Galaxy Watch3 Plugin versions prior to...

Tenda-AX3 Buffer Overflow Vulnerability

Tenda-AX3 is a dual-band wireless router from Tenda China.A buffer error vulnerability exists in Tenda-AX3, which stems from a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. No detailed vulnerability details are currently available...

D-Link DAP-1620 Path Traversal Vulnerability

A path traversal vulnerability exists in the D-Link DAP-1620, a wireless repeater extender from D-Link, Taiwan, China, which results from a path traversal in the D-Link DAP-1620 that causes local file inclusion to lead to unauthorized internal file reads of /etc/passwd and / etc/shadow. No detail...

Fixed vulnerability in Wi-Fi SAE and EAP-wd implementations

A vulnerability has been fixed in implementations of the Simultaneous Authentication of Equals SAE and Extensible-Authentication-Protocol-EAP EAP-wd that are used in hostapd and wpasupplicant. The vulnerability enables a malicious party with the ability to execute code on the system to gain acces...

NETGEAR DGN2200 Remote Code Execution Vulnerability

NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution...

Qualcomm 芯片安全漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time fabricated on the surface of semiconductor wafers. A security vulnerability exists in a number of Qualcomm products that...

SUSE SLES15 Security Update : kernel-firmware (SUSE-SU-2022:0721-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0721-1 advisory. - Update Intel Wireless firmware for 9xxx CVE-2021-0161, CVE-2021-0164,CVE-2021-0165,CVE-2021-0066,CVE-2021-0166,...

SUSE-SU-2022:0721-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: - Update Intel Wireless firmware for 9xxx CVE-2021-0161, CVE-2021-0164,CVE-2021-0165,CVE-2021-0066,CVE-2021-0166, CVE-2021-0168,CVE-2021-0170,CVE-2021-0172,CVE-2021-0173, CVE-2021-0174,CVE-2021-0175,CVE-2021-0076,CVE-2021-0176,...

Fortinet FortiAP-C OS Command Injection Vulnerability

Fortinet FortiAP, a Fortinet controller for managing wireless access point devices, is vulnerable to an operating system command injection vulnerability that stems from the lack of valid escaping and filtering of special elements used in the FortiAP-C console, which could be exploited by an...

Command Execution Vulnerability in TOTOLINK N600R Router

The TOTOLINK N600R is a wireless router. A command execution vulnerability exists in the TOTOLINK N600R router that can be exploited by an attacker to achieve arbitrary command execution...

Fortinet FortiWLM Command Injection Vulnerability

A command injection vulnerability exists in Fortinet FortiWLC, a wireless LAN controller from Fortinet, which stems from a failure to properly validate input data in the alert dashboard and controller configuration handler. HTTP requests and execute arbitrary operating system commands on the targ...

Tp-link TL-WR840N Remote Code Execution Vulnerability

The Tp-link TL-WR840N is a wireless router from China Pulian Tp-link.A remote code execution vulnerability exists in the Tp-link TL-WR840N, which stems from a remote code execution RCE vulnerability found to be contained via the oal wan6 setIpAddr function. No detailed vulnerability details are...