Priority LOW 21
A vulnerability in the client forwarding code of multiple Cisco Access Points (APs) could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affecte…
CVSS 3.1MEDIUM 4.7· Adjacent network · No auth · No interaction · EPSS 0.00267 · Published 2022-09-30 · No fix listed CWE-284
Priority LOW 35
A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00216 · Published 2021-09-23 · No fix listed CWE-284
Priority LOW 33
An issue was discovered in the kernel in NetBSD 7.1.
CVSS 3.1MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.06487 · Published 2021-05-11 · Partial fix CWE-287
Priority LOW 34
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.02923 · Published 2021-05-11 · Partial fix CWE-327
Priority LOW 23
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated.
CVSS 3.1LOW 3.5· Adjacent network · No auth · User interaction · EPSS 0.03611 · Published 2021-05-11 · Partial fix CWE-327
Priority LOW 18
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key.
CVSS 3.1LOW 2.6· Adjacent network · No auth · User interaction · EPSS 0.02592 · Published 2021-05-11 · Partial fix CWE-327
Priority LOW 29
A vulnerability in the web-based management interface of Cisco Mobility Express Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.005 · Published 2020-04-15 · No fix listed CWE-352
Priority LOW 29
A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00457 · Published 2020-04-15 · No fix listed CWE-399