Search: wireless.so

A vulnerability in the web-based management interface of the Cisco WAP371 Wireless-AC/N Dual Radio Access Point (AP) with Single Point Setup could allow an authenticated, remote attacker to perform command injection attacks against an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface of an affected system. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the device. To exploit this vulnerability, the attacker must have valid administrative credentials for the device.

CVE-2023-7042 is a medium severity vulnerability in Red Hat Enterprise Linux 6 involving a null pointer dereference in the ath10k wireless driver. The flaw exists in the function ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() within the Linux kernel's ath10k driver, potentially causing a denial of service (DoS) by crashing the system. Exploitation requires local access with high privileges and does not impact confidentiality or integrity. No user interaction is needed, and no known exploits are currently in the wild. The vulnerability affects systems using the ath10k wireless driver on RHEL 6, which is an older distribution still in use in some environments. European organizations relying on legacy RHEL 6 deployments with affected wireless hardware could experience service disruptions. Mitigation involves applying kernel patches from Red Hat or disabling the affected wireless driver if patching is not feasible. Countries with significant industrial and governmental use of legacy Red Hat Enterprise Linux 6 systems, such as Germany, France, and the UK, are more likely to be impacted.

EPSS 0.3%VulnerabilityRed HatGermanyFrance+1

Windows Miracast Wireless Display Remote Code Execution Vulnerability

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. The device allows the administrator to lock some communication channels (wireless and SD card) but it is still possible to use a physical connection (Ethernet cable) without restriction.