PT-2025-28313 · Unknown · Wlan Access Point Controller

Name of the Vulnerable Software and Affected Versions: WLAN Access Point Controller affected versions not specified Description: The issue is related to a possible out-of-bounds write in the WLAN Access Point Controller driver due to an incorrect bounds check. This could lead to remote code...

PT-2025-28310 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is a possible out of bounds write in the wlan AP driver due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User...

PT-2025-28316 · Unknown · Wlan Access Point Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is a possible out-of-bounds read in the WLAN access point driver due to an incorrect bounds check. This could lead to local information disclosure, requiring user execution privileges...

PT-2025-28315 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds read exists in the wlan AP driver due to an incorrect bounds check. This could lead to local information disclosure, requiring User execution privileges. No user...

PT-2025-28317 · Unknown · Wlan Access Point Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is a possible out of bounds read in the WLAN access point driver due to an incorrect bounds check. This could lead to local information disclosure, requiring user execution privileges...

PT-2025-28311 · Unknown · Wlan Access Point Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds write exists in the WLAN access point driver due to an incorrect bounds check. This issue could lead to a local escalation of privilege, requiring user execution...

PT-2025-28320 · Unknown · Wlan Sta Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds read exists in the wlan STA driver due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed...

PT-2025-28319

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a possible out of bounds read in the WLAN access point driver due to an incorrect bounds check. This could lead to local information disclosure, requiring user...

PT-2025-28308 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds write exists in the wlan AP driver due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User...

PT-2025-28318 · Unknown · Wlan Access Point Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a possible out of bounds read in the WLAN access point driver due to an incorrect bounds check. This could lead to local information disclosure, requiring user...

PT-2025-28437 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A transient Denial of Service DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests. Recommendations: At the moment, there is no...

Belkin F9K1122 安全漏洞

The Belkin F9K1122 is a WiFi signal extender from Belkin Canada. The Belkin F9K1122 suffers from a stack buffer overflow vulnerability that originates from the incorrect operation of the parameter wpsenroleepin/webpage in the file /goform/formWlanSetupWPS, no details of the vulnerability are...

CVE-2025-32880

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and machine-in-the-middle attacks...

TOTOLINK A3002R 命令注入漏洞

TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a command injection vulnerability that stems from the parameter wlanif in the file /boafrm/formWlSiteSurvey failing to correctly filter constructed command special characters, commands, a...

CVE-2025-32878

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. This function is mainly for downloading firmware files. Before downloading firmware files, the watch requests some information about the firmware via HTTPS from the back-end...

CVE-2025-32880

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and machine-in-the-middle attacks...

CVE-2025-32880

The CVE-2025-32880 entry concerns COROS PACE 3 devices (through 3.0808.0) where WLAN-based firmware downloads occur over HTTP, unencrypted, enabling sniffing and man-in-the-middle attacks. Affected component is the WLAN firmware update/download flow; root cause is lack of encryption in the HTTP t...

PT-2025-26322 · Coros · Coros Pace 3

Name of the Vulnerable Software and Affected Versions: COROS PACE 3 versions through 3.0808.0 Description: An issue was discovered that allows the COROS Pace 3 to download firmware files via HTTP when connected to a WLAN, but the communication is not encrypted. This lack of encryption enables...

CVE-2025-32880

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and machine-in-the-middle attacks...

The vulnerability of the built-in web server boa (/boafrm/formWlanRedirect) of the TOTOLINK X15 router’s microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the built-in web server boa /boafrm/formWlanRedirect of the TOTOLINK X15 router’s microprogramming software is related to the copying of buffers without checking the size of input data during the processing of the redirect-url parameter. Exploiting this vulnerability allows a...