NETGEAR’s various products have security vulnerabilities

NETGEAR R6260 is a product of the American company NETGEAR. The NETGEAR R6260 is a router. The NETGEAR R6230 is also a router. Netgear R7000 is another product of NETGEAR. The Netgear R7000 is a wireless router. Several NETGEAR products have security vulnerabilities. These vulnerabilities stem fr...

CVE-2022-40619

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices. This interface is vulnerable to unauthenticated arbitrary command injection through the funjsqaccesstoken parameter. This affects R6230 before...

NETGEAR’s various products have security vulnerabilities

NETGEAR R6260 is a product of the American company NETGEAR. The NETGEAR R6260 is a router. The NETGEAR R6230 is also a router. Netgear R7000 is another product of NETGEAR. The Netgear R7000 is a wireless router. Several NETGEAR products have security vulnerabilities, which stem from the unvalidat...

CVE-2022-40620

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism. An attacker suitably positioned on the network could intercept the update request and deliver a...

CVE-2022-40620

CVE-2022-40620 affects NETGEAR routers and Orbi WiFi Systems where FunJSQ, a third‑party update module, fails to validate TLS certificates when fetching update packages. A network‑okay attacker can intercept update requests and deliver a malicious package, potentially enabling arbitrary code exec...

PT-2022-25420

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices. This interface is vulnerable to unauthenticated arbitrary command injection through the funjsq access token parameter. This affects R6230 befor...

The vulnerability of the FunJSQ module in Netgear’s Wi-Fi systems—Netgear Orbi RBR20, RBR50, RBS20, RBS50—as well as the Netgear R6230, R6260, R7000, R8900, R9000, XR300 routers—allows a hacker to execute arbitrary commands.

The vulnerability of the FunJSQ module in Netgear Orbi RBR20, RBR50, RBS20, RBS50 Wi-Fi systems, and Netgear R6230, R6260, R7000, R8900, R9000, XR300 routers’ microprogramming software is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to...