Vulnerabilities fixed in Microsoft Windows

Vulnerabilities have been fixed in Windows. The vulnerabilities allow a malicious person to carry out attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Impersonating another user Access to sensitive...

Binary Vulnerability in Tenda AC15

Tenda AC15 is a wireless router product. A binary vulnerability exists in Tenda AC15, which can be exploited by attackers to cause a denial of service attack...

VulnCheck KEV: CVE-2019-13372

/web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM100 before v1.03R0100BETA6 allows remote attackers to execute arbitrary PHP code via a cookie because a cookie's username field allows eval injection, and an empty password bypasses authentication...

Weak password vulnerability in TP-LINK TL-WR840N (CNVD-2021-30196)

The TL-WR840N is a wireless router. A weak password vulnerability exists in the TP-LINK TL-WR840N, which can be exploited by an attacker to obtain sensitive information...

VulnCheck KEV: CVE-2017-17411

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web management portal. The issue lies in the lack of proper validation of user data...

NEC Aterm 跨站脚本漏洞

NEC Aterm is a wireless router from Nippon Electric NEC. A security vulnerability exists in multiple NEC Aterm products that results from improper validation of user-supplied input...

Command Execution Vulnerability in the Wireless smartweb Management System of Ruijie Networks Co.

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and more. A command execution vulnerability exists in the wireless smartweb management system ...

NEC Aterm WF1200C 安全漏洞

The NEC Aterm WF1200C is a wireless router from Nippon Electric NEC. A security vulnerability exists in Aterm WF1200CR: version 1.3.2, version 1.3.3, and version 1.5.1, which allows remote users to execute arbitrary shell commands on the target system...

NEC Aterm WF1200C 安全漏洞

The NEC Aterm is a wireless router from Nippon Electric NEC. NEC Aterm is vulnerable to an information disclosure vulnerability that could allow a remote user to execute arbitrary shell commands on the target system. No details of the vulnerability are provided at this time...

The vulnerability in the web interface for controlling Cisco RV110W Wireless-N VPN Firewalls, routers RV130 VPN, RV130W Wireless-N Multifunction VPN, RV215W Wireless-N VPN allows a intruder to execute arbitrary code.

The vulnerability in the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN routers, RV130W Wireless-N Multifunction VPN, and RV215W Wireless-N VPN web management interfaces relates to the execution of arbitrary code outside the buffer boundaries of memory. Exploiting this vulnerability allows a...

ALBA-2021:1099 NetworkManager bug fix and enhancement update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

NetworkManager bug fix and enhancement update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

Weak password vulnerability in TP-LINK TL-WR840N

The TP-LINK TL-WR840N is a wireless router with a channel count of 13 and VPN support. A weak password vulnerability exists in the TP-LINK WR840N, which can be exploited by attackers to obtain sensitive information...

D-Link DIR-846 OS Command Injection Vulnerability

The D-Link DIR-846 is a 6-antenna 1200M full Gigabit dual-band MU-MIMO wireless router. An OS command injection vulnerability exists in the D-Link DIR-846 version A1100.26. A remote attacker can exploit this vulnerability to execute arbitrary commands via shell metacharacters in the ssid0 or ssid...

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for Cisco IOS XE allows a attacker to trigger a device reboot or cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP protocol implemented by Cisco IOS XE lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause service failure...

The vulnerability in the web interface of Cisco IOS XE wireless network controller operating systems allows a perpetrator to execute a cross-site scripting attack.

The vulnerability in the web interface of Cisco IOS XE wireless network controller devices is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack remotely...

D-Link DIR-878 Stack Buffer Overflow Vulnerability

The D-Link DIR-878 is a wireless router from AUO D-Link of Taiwan, China. A stack buffer overflow vulnerability exists in prog.cgi in the D-Link DIR-878 version 1.30B08. An attacker can exploit this vulnerability without authentication based on a stack buffer overflow...

Wi-Fi Devices as Physical Object Sensors

The new 802.11bf standard will turn Wi-Fi devices into object sensors: In three years or so, the Wi-Fi specification is scheduled to get an upgrade that will turn wireless devices into sensors capable of gathering data about the people and objects bathed in their signals. "When 802.11bf will be...

PT-2021-9428 · Unknown · Wiz Colors A60

Name of the Vulnerable Software and Affected Versions: WiZ Colors A60 version 1.14.0 Description: An issue was discovered where the device sends unnecessary information to the cloud controller server, including the local IP address and the SSID of the Wi-Fi network it is connected to. Although th...

WiZ Colors A60 安全漏洞

WiZ Connected WiZ Colors A60 is a smart LED light from the Chinese company WiZ Connected. A security vulnerability exists in WiZ Colors A60 1.14.0, which stems from Wi-Fi credentials being stored in plaintext in flash memory...