0Xmitsurugi

Name of the Vulnerable Software and Affected Versions: Wyze Cam v3 versions (affected versions not specified) Description: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Wyze Cam v3 IP cameras without authentication. The flaw resides within the Realtek Wi-Fi kernel module, resulting from insufficient validation of user-supplied data length before copying it into a heap-based buffer. Successful exploitation enables an attacker to execute code in the context of the kernel. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to an integer overflow in the VNC module of the VLC Media Player. This can be exploited by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, potentially allowing a remote attacker to crash the player or execute arbitrary code under certain conditions.

This issue allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR routers. Authentication is not required to exploit this issue. The specific flaw exists within the downloading of files via HTTPS, resulting from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other issues to execute arbitrary code in the context of root.

This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR routers. Although authentication is required to exploit this issue, the existing authentication mechanism can be bypassed. The specific flaw exists within the `circled` daemon. A crafted `circleinfo.txt` file can trigger an overflow of a fixed-length stack-based buffer. An attacker can leverage this issue to execute code in the context of `root`.

Name of the Vulnerable Software and Affected Versions: TP-Link Archer A7 AC1750 version 1.0.15 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the handling of MAC addresses by the "tdpServer" endpoint. A crafted TCP message can write stack pointers to the stack. An attacker can leverage this issue to execute code in the context of the root user. Recommendations: For TP-Link Archer A7 AC1750 version 1.0.15, as a temporary workaround, consider restricting access to the `tdpServer` endpoint until a patch is available. Avoid using crafted TCP messages that can write stack pointers to the stack. At the moment, there is no information about a newer version that contains a fix for this issue.