Alfa vulnerabilities
8 vulnerabilities
Known vulnerabilities in Alfa products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- Awus036H3 vulnerabilities
- Wifi Camppro3 vulnerabilities
- Aip W5122 vulnerabilities
CVE-2025-29045alfawifi_camppro_firmware
EPSS score1.10%
Buffer Overflow vulnerability in ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the newap_text_0 key valueCVE-2025-29046alfawifi_camppro_firmwareEPSS score1.10%
Buffer Overflow vulnerability inALFA WiFi CampPro router ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the GAPSMinute3 key valueCVE-2025-29047alfawifi_camppro_firmwareEPSS score1.10%
Buffer Overflow vulnerability inALFA WiFi CampPro router ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the hiddenIndex in the function StorageEditUserCVE-2025-45847alfaaip-w512_firmwareEPSS score0.34%
ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the targetAPMac parameter in the formWsc function.CVE-2025-45846alfaaip-w512_firmwareEPSS score0.62%
ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the formBTClinetSetting function.CVE-2020-26143alfaawus036h_firmware+174EPSS score4.17%
An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations accept fragmented plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.CVE-2020-26141alfaawus036h_firmware+147EPSS score3.07%
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.CVE-2020-26140alfaawus036h_firmware+363EPSS score2.92%
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.