The vulnerability of TP-Link TL-WR841ND router’s microprogramming software, related to the execution of operations outside the buffer boundaries, allows a hacker to cause a service failure.

The vulnerability of TP-Link TL-WR841ND router’s microprogramming software is related to the issue of writing operations outside the buffer in memory when processing the pskSecret parameter on the userRpm/WlanSecurityRpm.htm page. Exploiting this vulnerability allows a remote attacker to cause...

TP-LINK TL-WR841ND 安全漏洞

TP-LINK TL-WR841ND is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK TL-WR841ND V11 version, which originates from the pskSecret parameter of /userRpm/WlanSecurityRpm.htm contains a buffer overflow vulnerability...

CVE-2022-25718

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &...

CVE-2022-40531

Memory corruption in WLAN due to incorrect type cast while sending WMISCANSCHPRIOTBLCMDID message...

PT-2025-7112 · Tp Link · Tp-Link Tl-Wr841Nd

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR841ND version V11 Description: A buffer overflow issue was discovered via the pskSecret parameter at the "/userRpm/WlanSecurityRpm.htm" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted...

CVE-2024-20153

In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08990446 / ALPS09057442; Issue ID: MSV-1598...

CVE-2024-48634

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the key parameter in the SetWLanRadioSecurity function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

D-Link DIR-823G 安全漏洞

The D-Link DIR-823G is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-823G Encryption parameter due to incorrect bounds checking in the SetWLanRadioSecurity function, which can be exploited by an attacker to cause a denial of service...

The vulnerability of the /userRpm/WlanSecurityRpm component of TP-Link router software, including models TL-WR940N, TL-WR941N, and TL-WR841N, allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the /userRpm/WlanSecurityRpm component of TP-Link’s router software, including models TL-WR940N, TL-WR941N, and TL-WR841N, is related to buffer overflow vulnerabilities. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause system failures remote...

CVE-2023-20731

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573495; Issue ID: ALPS07573495...

CVE-2023-20660

In wlan, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588383; Issue ID: ALPS07588383...

Out-of-bounds

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588569; Issue ID: ALPS07588552...

CVE-2023-20679

CVE-2023-20679 affects MediaTek WLAN in which a missing bounds check allows an out-of-bounds read, enabling local escalation of privilege without user interaction. Impact: confidentiality impact listed as high; privilege requirement is high with local attack vector, no UI interaction needed. Root...

CVE-2022-46569

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Key parameter in the SetWLanRadioSecurity module...

CVE-2022-25718

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &...

Information disclosure

Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...

CVE-2019-7388

CVE-2019-7388 affects the D-Link DIR-823G router (firmware 1.02B03). The flaw resides in /bin/goahead and enables incorrect access control that allows remote attackers to disclose sensitive information (e.g., MAC addresses) for all WLAN clients via the GetClientInfo HNAP API without authenticatio...

Wireless Toolsuite: WRAITH

Wireless reconnaissance, collection and exploitation toolsuite Attack vectors, rogue devices, interfering networks are best visualized and identified over time. Current tools i.e. Kismet, Aircrack-ng and Wireshark are excellent tools but none are completely suitable for collecting and analyzing t...

Cross site scripting

Cross-site scripting XSS vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-3498

The CVE-2013-3498 entry describes a cross-site scripting (XSS) vulnerability in Juniper SmartPass WLAN Security Management prior to versions 7.7 MR3 and 8.0 prior to MR2, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected product: Juniper SmartPass ...