Best IT World iBall WRB303N Cross-Site Request Forgery Vulnerability

Best IT World iBall WRB303N is a wireless router from Best IT World India. A cross-site request forgery vulnerability exists in the Best IT World iBall WRB303N. The vulnerability stems from a WEB application that does not adequately validate that a request is coming from a trusted user. An attack...

The vulnerability of the IEEE 802.11w Protected Management Frames (PMFs) in the Cisco IOS XE operating system allows a hacker to disrupt a user’s legitimate connection to a vulnerable device.

The vulnerability of the IEEE 802.11w Protected Management Frames PMFs in the Cisco IOS XE operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to successfully disconnect a user’s connection to a vulnerable device...

CVE-2020-12047

The Baxter Spectrum WBM v17, v20D29, v20D30, v20D31, and v22D24, when used with a Baxter Spectrum v8.x model 35700BAX2 in a factory-default wireless configuration enables an FTP service with hard-coded credentials...

CVE-2020-12043

The Baxter Spectrum WBM v17, v20D29, v20D30, v20D31, and v22D24 when configured for wireless networking the FTP service operating on the WBM remains operational until the WBM is rebooted...

CVE-2020-12043

The Baxter Spectrum WBM v17, v20D29, v20D30, v20D31, and v22D24 when configured for wireless networking the FTP service operating on the WBM remains operational until the WBM is rebooted...

Hardcoded credentials

The Baxter Spectrum WBM v17, v20D29, v20D30, v20D31, and v22D24, when used with a Baxter Spectrum v8.x model 35700BAX2 in a factory-default wireless configuration enables an FTP service with hard-coded credentials...

Design/Logic Flaw

The Baxter Spectrum WBM v17, v20D29, v20D30, v20D31, and v22D24 when configured for wireless networking the FTP service operating on the WBM remains operational until the WBM is rebooted...

CVE-2020-12043

The Baxter Spectrum WBM v17, v20D29, v20D30, v20D31, and v22D24 when configured for wireless networking the FTP service operating on the WBM remains operational until the WBM is rebooted...

CVE-2020-12043

CVE-2020-12043 affects Baxter Spectrum WBM wireless configurations (versions v17, v20D29–D32, v22D24). The FTP service on the WBM remains accessible until the unit is rebooted, due to an operation on a resource after expiration/release. NVD lists CVSSv3.1 base score 9.8; ICS advisory notes CVSSv3...

CVE-2020-12047

The Baxter Spectrum WBM v17, v20D29, v20D30, v20D31, and v22D24, when used with a Baxter Spectrum v8.x model 35700BAX2 in a factory-default wireless configuration enables an FTP service with hard-coded credentials...

Tenda PA6 Wi-Fi Powerline extender buffer overflow vulnerability

Tenda PA6 Wi-Fi Powerline extender is a wireless network range extender from Tenda China. A buffer overflow vulnerability exists in the 'Wireless' section of the Web-UI in the Tenda PA6 Wi-Fi Powerline extender version 1.0.1.21. An attacker could exploit this vulnerability to execute arbitrary co...

Unspecified Vulnerability in Xiaomi R3600

The Xiaomi R3600 is a wireless router from Chinese company Xiaomi Technology Xiaomi. A security vulnerability exists in the Xiaomi R3600 ROM prior to version 1.0.20. A remote attacker can exploit the vulnerability to execute code...

Unspecified vulnerability in Xiaomi R3600 (CNVD-2021-19777)

The Xiaomi R3600 is a wireless router from Chinese company Xiaomi Technology Xiaomi. A security vulnerability exists in the Xiaomi R3600 ROM prior to version 1.0.20. A remote attacker can exploit the vulnerability to execute code...

iOS / macOS Wifi Proximity Vulnerability

iOS and macOS suffered from a wifi proximity kernel double-free vulnerability in AWDL BSS Steering. if 0 iOS/MacOS wifi proximity kernel double free in AWDL BSS Steering As part of developing an exploit for CVE-2020-3843 a heap overflow in AWDL I've been looking at the code for "BSS Steering". It...

CVE-2019-19505

Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the "Wireless" section in the web-UI. By sending a specially crafted hostname, a remote attacker could overflow a buffer and execute arbitrary code on the system or...

CVE-2020-10272

MiR100, MiR200 and other MiR robots use the Robot Operating System ROS default packages exposing the computational graph without any sort of authentication. This allows attackers with access to the internal wireless and wired networks to take control of the robot seamlessly. In combination with...

CVE-2020-10270

Out of the wired and wireless interfaces within MiR100, MiR200 and other vehicles from the MiR fleet, it's possible to access the Control Dashboard on a hardcoded IP address. Credentials to such wireless interface default to well known and widely spread users omitted and passwords omitted. This...

Command injection

MiR100, MiR200 and other MiR robots use the Robot Operating System ROS default packages exposing the computational graph without any sort of authentication. This allows attackers with access to the internal wireless and wired networks to take control of the robot seamlessly. In combination with...

Default credentials

One of the wireless interfaces within MiR100, MiR200 and possibly according to the vendor other MiR fleet vehicles comes pre-configured in WiFi Master Access Point mode. Credentials to such wireless Access Point default to well known and widely spread SSID MiRRXXXX and passwords omitted. This...

Deserialization of untrusted data

MiR100, MiR200 and other MiR robots use the Robot Operating System ROS default packages exposing the computational graph to all network interfaces, wireless and wired. This is the result of a bad set up and can be mitigated by appropriately configuring ROS and/or applying custom patches as...