SUSE-SU-2021:3337-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated. The following security bugs were fixed: - CVE-2020-3702: Fixed a bug which could be triggered with specifically timed and handcrafted traffic and cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:3387-1 Rating: important References: 1065729 1148868 1152489 1154353 1159886 1167773 1170774 1171688 1173746 1174003 1176447 1176940 1177028 1178134 1184439 1184804 1185302 1185550 1185677 1185726...

Qualcomm WLAN buffer error vulnerability

Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Wlan that stems from an incorrect validation of the TBTT count and length, where an out-of-bounds read of the buffer may occur. Affected products and versions...

Issues and vulnerabilities related to multiple Qualcomm products

Qualcomm SDX55 and others are products of Qualcomm Incorporated Qualcomm.SDX55 is a modem.IPQ6018 is a central processing unit CPU product.QCA6390 is a central processing unit CPU product. Multiple Qualcomm Products WLAN An authorization issue vulnerability exists in that the vulnerability stems...

Design/Logic Flaw

A vulnerability in the WLAN Control Protocol WCP implementation for Cisco Aironet Access Point AP software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. This vulnerability is due to incorrect error handli...

CVE-2021-34740

Cisco Aironet Access Point software is affected by CVE-2021-34740, a WLAN Control Protocol (WCP) packet buffer leak DoS. An unauthenticated, adjacent attacker can send crafted 802.11 frames to an AP interface to trigger buffer leaks, leading to buffer allocation failures and a device reload. Root...

CVE-2021-34740 Cisco Aironet Access Points WLAN Control Protocol Packet Buffer Leak Denial of Service Vulnerability

A vulnerability in the WLAN Control Protocol WCP implementation for Cisco Aironet Access Point AP software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. This vulnerability is due to incorrect error handli...

CVE-2021-34740 Cisco Aironet Access Points WLAN Control Protocol Packet Buffer Leak Denial of Service Vulnerability

A vulnerability in the WLAN Control Protocol WCP implementation for Cisco Aironet Access Point AP software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. This vulnerability is due to incorrect error handli...

Cisco Aironet Access Points WLAN Control Protocol Packet Buffer Leak Denial of Service Vulnerability

A vulnerability in the WLAN Control Protocol WCP implementation for Cisco Aironet Access Point AP software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. This vulnerability is due to incorrect error handli...

CVE-2021-34740

A vulnerability in the WLAN Control Protocol WCP implementation for Cisco Aironet Access Point AP software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. This vulnerability is due to incorrect error handli...

Security News: Microsoft Patch Tuesday September 2021, OMIGOD, MSHTML RCE, Confluence RCE, Ghostscript RCE, FORCEDENTRY Pegasus

Hello everyone! This time, lets talk about recent vulnerabilities. Ill start with Microsoft Patch Tuesday for September 2021. I created a report using my Vulristics tool. You can see the full report here. The most interesting thing about the September Patch Tuesday is that the top 3 VM vendors...

CVE-2021-36965

Windows WLAN AutoConfig Service Remote Code Execution Vulnerability...

CVE-2021-36967

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability...

CVE-2021-36967

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability...

CVE-2021-36965

Windows WLAN AutoConfig Service Remote Code Execution Vulnerability...

CVE-2021-36967

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability...

CVE-2021-36965

Windows WLAN AutoConfig Service Remote Code Execution Vulnerability...

Privilege escalation

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability...

Remote code execution

Windows WLAN AutoConfig Service Remote Code Execution Vulnerability...

CVE-2021-36967

CVE-2021-36967 affects the Windows WLAN AutoConfig Service and is an Elevation of Privilege vulnerability. CVSS details (NVD, CVSS 3.1) indicate an adjacent-network attack vector, low attack complexity, no authentication, and high impact to confidentiality, integrity, and availability (base score...