14570 matches found
Intel® Wireless Bluetooth® Advisory
Summary: Potential security vulnerabilities in some Intel® Wireless Bluetooth® products may allow escalation of privilege or denial of service. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-12321 Description:...
CVE-2020-28345
An issue was discovered on LG mobile devices with Android OS 10 software. The Wi-Fi subsystem may crash because of the lack of a NULL parameter check. The LG ID is LVE-SMP-200025 November 2020...
HPSBHF03700 rev. 1 - Intel® Wireless Bluetooth® November 2020 Security Update
Potential Security Impact Escalation of Privilege, Denial of Service Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in Intel® Wireless Bluetooth® products which might allow escalati...
Buffer Overflow
kernel is vulnerable to buffer overflow vulnerability. The vulnerability exists in mt76addfragment in drivers/net/wireless/mediatek/mt76/dma.c in an array containing oversized packet with roo many rx fragments corrupting memory of adjacent pages...
The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst wireless network controllers and Catalyst 9100 access points allows a attacker to cause a service failure.
The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation in the Cisco IOS XE operating system on Cisco Catalyst wireless network controllers and Catalyst 9100 access points is related to errors in processing input data. Exploiting this vulnerability can...
TP-Link WDR4300 - Remote Code Execution (Authenticated)
Exploit Title: TP-Link WDR4300 - Remote Code Execution Authenticated Date: 2020-08-28 Exploit Author: Patrik Lantz Vendor Homepage: https://www.tp-link.com/se/home-networking/wifi-router/tl-wdr4300/ Version: TL-WDR4300, N750 Wireless Dual Band Gigabit Router Tested on: Firmware version 3.13.33 an...
The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 wireless controller and Catalyst 9100 access points allows a attacker to cause a service failure.
The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation in the Cisco IOS XE operating system for Cisco Catalyst 9800 wireless controller and Catalyst 9100 access points is related to errors in processing input data. Exploiting this vulnerability can allow...
The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 wireless controller and Catalyst 9100 access points allows a attacker to cause a service failure.
The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation in the Cisco IOS XE operating system for Cisco Catalyst 9800 wireless controller and Catalyst 9100 access points is related to errors in processing input data. Exploiting this vulnerability can allow...
Intel PROSet Wireless WiFi Software Advisory - Lenovo Support US
No description provided...
Intel Wireless Bluetooth Advisory - Lenovo Support US
No description provided...
tcpdump: Buffer over-read in print-802_11.c
An out-of-bounds read vulnerability was discovered in tcpdump while printing IEEE 802.11 packets captured in a pcap file or coming from the network. A remote attacker may abuse this flaw by sending specially crafted packets that, when printed, would trigger the flaw and crash the application...
qt: files placed by attacker can influence the working directory and lead to malicious code execution
Out of bounds write in IntelR PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access...
kernel: A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c allows for a DoS
A flaw was found in the Linux kernel. A memory leak in the realtek driver allows an attacker to cause a denial of service through memory consumption. The highest threat from this vulnerability is to system availability...
kernel: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c allows to cause DoS
A flaw was found in the way the mwifiex PCIE driver in the Linux kernel handled resource cleanup on a DMA mapping error. This flaw allows an attacker able to trigger the DMA mapping error to crash the system...
CVE-2020-27980
Genexis Platinum-4410 P4410-V2-1.28 devices allow stored XSS in the WLAN SSID parameter. This could allow an attacker to perform malicious actions in which the XSS popup will affect all privileged users...
CVE-2019-8854
A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in macOS Catalina 10.15, watchOS 6, iOS 13, tvOS 13. A device may be passively tracked by its Wi-Fi MAC address...
IoT Device Takeovers Surge 100 Percent in 2020
Connected cameras, refrigerators and other seemingly-mundane internet-of-things IoT devices are a cybercriminal favorite this year, with new research showing a sharp increase 100 percent in IoT infections observed on wireless networks. IoT devices are now responsible for 32.72 percent of all...
This One Time on a Pen Test: Thanks for Sharing Your Wi-Fi
Each year, Rapid7 penetration testers complete hundreds of internally and externally based penetration testing service engagements. This post is part of an ongoing series featuring testimonials of what goes on beneath the hoodie. For more insights, check out our 2020 Under the Hoodie report. For...
Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS DoS (cisco-sa-mdns-dos-3tH6cA9J)
A denial of service DoS vulnerability exists in Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers due to improper validation of mDNS packets. An unauthenticated, remote attacker can exploit this issue, via a crafted mDNS packet to an affected device, to cause the device to...