Lucene search
K

15 matches found

CNVD
CNVD
added 2025/03/31 12:0 a.m.1 views

Netgear DC112A deviceName Command Injection Vulnerability

The Netgear DC112A is a wireless router. The Netgear DC112A suffers from a command injection vulnerability that originates in the usbadv.cgi handling of the deviceName parameter, which can be exploited by an attacker to submit a special request and execute arbitrary commands...

9.8CVSS8.1AI score0.11704EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/30 1:6 a.m.12 views

CVE-2025-28219

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...

9.8CVSS8.7AI score0.11704EPSS
Exploits0References1
NVD
NVD
added 2025/03/28 2:15 p.m.6 views

CVE-2025-28219

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...

9.8CVSS0.11704EPSS
Exploits0References1
OSV
OSV
added 2025/03/28 2:15 p.m.0 views

CVE-2025-28219

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...

9.8CVSS6.1AI score
Exploits0References1
CNNVD
CNNVD
added 2025/03/28 12:0 a.m.1 views

NETGEAR DC112A 安全漏洞

The Netgear DC112A is a wireless router. The Netgear DC112A suffers from a command injection vulnerability that originates in the usbadv.cgi handling of the deviceName parameter, which can be exploited by an attacker to submit a special request and execute arbitrary commands...

9.8CVSS7.9AI score0.11704EPSS
Exploits0References1
CVE
CVE
added 2025/03/28 12:0 a.m.62 views

CVE-2025-28219

Netgear DC112A (firmware v1.0.0.64) is affected by an OS command injection in usb_adv.cgi. The vulnerability allows a remote attacker to trigger arbitrary command execution by sending a crafted value for the deviceName parameter via a POST request. Multiple CVE references (e.g., CVE-2025-28219) a...

9.8CVSS8.7AI score0.11704EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/03/28 12:0 a.m.15 views

CVE-2025-28219

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...

0.11704EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/28 12:0 a.m.6 views

CVE-2025-28219

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...

8.1AI score0.11704EPSS
Exploits0References1
OSV
OSV
added 2023/08/07 7:15 p.m.0 views

CVE-2023-38925

Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the httppasswd parameter in password.cgi...

8.8CVSS6AI score0.29571EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/08/07 7:15 p.m.0 views

CVE-2023-38925

Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the httppasswd parameter in password.cgi...

8.8CVSS7.7AI score0.29571EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/08/07 12:0 a.m.2 views

NETGEAR DC112A and EX6200 and R6300v2 Security Vulnerabilities

NETGEAR DC112A and others are products of NETGEAR Corporation.NETGEAR DC112A is a wireless router.NETGEAR EX6200 is a wireless network signal extender.NETGEAR R6300v2 is a wireless router. A security vulnerability exists in the NETGEAR DC112A version 1.0.0.64, EX6200 version 1.0.3.94, and R6300v2...

8.8CVSS7.3AI score0.29571EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/08/07 12:0 a.m.2 views

PT-2023-26689 · NetGear · Netgear R6300V2 +2

Name of the Vulnerable Software and Affected Versions: Netgear DC112A version 1.0.0.64 Netgear EX6200 version 1.0.3.94 Netgear R6300v2 version 1.0.4.8 Description: A buffer overflow issue was discovered via the http passwd parameter in password.cgi. This issue affects Netgear devices...

8.8CVSS8.7AI score0.29571EPSS
Exploits0References4
OSV
OSV
added 2022/03/18 11:15 a.m.1 views

CVE-2022-24655

A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution of arbitrary code without authentication...

7.8CVSS6AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2021/12/03 12:0 a.m.3 views

PT-2021-6474 · NetGear · Netgear R6400V2 +14

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400 versions prior to the fixed version NETGEAR R6400v2 versions prior to the fixed version NETGEAR R6700v3 version 1.0.4.120 10.0.91 NETGEAR R6900P versions prior to the fixed version NETGEAR R7000 versions prior to the fixed versi...

8.8CVSS8.9AI score0.00836EPSS
Exploits0References7
exploitpack
exploitpack
added 2015/10/29 12:0 a.m.42 views

NetUSB - Kernel Stack Buffer Overflow

NetUSB - Kernel Stack Buffer Overflow !/usr/bin/env python -- coding: utf-8 -- Exploit Title: NetUSB Kernel Stack Buffer Overflow Date: 9/10/15 Exploit Author: Adrian Ruiz Bermudo Vendor Homepage: http://www.kcodes.com/ Version: Multiple:...

10CVSS0.9AI score0.70085EPSS
Exploits7
Rows per page
Query Builder