4376 matches found
CVE-2024-34195
TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling function formWlEncrypt, there is a lack of length restriction on the wlanssid field. This oversight leads to potential buffer overflow under specific...
TOTOLINK AC1200 安全漏洞
TOTOLINK AC1200 is a dual-band Wi-Fi router from China's Gion Electronics TOTOLINK. The TOTOLINK AC1200 suffers from a buffer overflow vulnerability that originates from the parameter wlanidx of the formWlanRedirect function failing to properly validate the length and size of the input data, whic...
TOTOLINK AC1200 安全漏洞
TOTOLINK AC1200 is a dual-band Wi-Fi router from China's Gion Electronics TOTOLINK. The TOTOLINK AC1200 suffers from a buffer overflow vulnerability that originates from the formWlEncrypt CGI handler in the boa program that fails to limit the length of the wlanssid field entered by the user. An...
PT-2024-25732 · Totolink · Totolink Ac1200 Wireless Router
Name of the Vulnerable Software and Affected Versions: TOTOLINK AC1200 Wireless Router A3002R Firmware version 1.1.1-B20200824 Description: The issue is related to a Buffer Overflow vulnerability in the boa server program's CGI handling function formWlEncrypt, due to a lack of length restriction ...
PT-2024-5934 · Totolink · Totolink Ac1200 Wireless Router
Name of the Vulnerable Software and Affected Versions: TOTOLINK AC1200 Wireless Router A3002RU version V2.1.1-B20230720.1011 Description: The issue concerns a buffer overflow vulnerability related to the formWlEncrypt CGI handler in the boa program. This handler fails to limit the length of the...
CVE-2024-43881
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: change DMA direction while mapping reinjected packets For fragmented packets, ath12k reassembles each fragment as a normal packet and then reinjects it into HW ring. In this case, the DMA direction should be...
CVE-2024-43847
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid memory access while processing fragmented packets The monitor ring and the reo reinject ring share the same ring mask index. When the driver receives an interrupt for the reo reinject ring, the monitor...
CVE-2024-38143
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability...
CVE-2024-38143
CVE-2024-38143 is a Windows WLAN AutoConfig Service elevation of privilege vulnerability. The CVSS 3.1 vector indicates an attacker must have physical access (AV:P) and exploit with high complexity, no user interaction, and local access (PR:N, UI:N). The vulnerability could yield elevated privile...
CVE-2024-38143 Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
...
CVE-2024-38143 Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
...
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
...
Sonos S1和Sonos S2 安全漏洞
Sonos S1 and Sonos S2 are both a range of smart speakers from US-based Sonos. A security vulnerability exists in Sonos S1 versions prior to 11.12 and Sonos S2 versions prior to 15.9, which stems from a failure to properly validate a message element during the negotiation of the WPA2 four-way...
CVE-2024-33026
CVE-2024-33026 is a WLAN/Qualcomm-related issue described as a transient DoS when parsing probe and association response frames, triggered when the received frame length is less than the maximum size of the timestamp. The CVE entry lists a base score of 7.5 (Network attack, Low complexity, No use...
CVE-2024-33026 Buffer Over-read in WLAN Host
Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp...
CVE-2024-33026 Buffer Over-read in WLAN Host
Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp...
CVE-2024-33025 Buffer Over-read in WLAN Host
Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE...
CVE-2024-33025
CVE-2024-33025 is a Transient Denial of Service in the WLAN Host path affecting Qualcomm WLAN components, triggered while parsing the BSS parameter change count or MLD capabilities fields within the ML Information Element. The NVD entry notes a Network attack vector with CVSS v3.1 base score 7.5 ...