CVE-2021-27257

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files v...

CVE-2021-27256

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

CVE-2021-27256

CVE-2021-27256 affects NETGEAR R7800 firmware 1.0.2.76. The flaw resides in the handling of the rc_service parameter passed to apply_save.cgi, where insufficient validation allows an attacker to execute arbitrary commands with root privileges. Although authentication is required, the authenticati...

CVE-2021-27254

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the applysave.cgi endpoint. This issue results from the use of hard-coded...

NETGEAR Remote Code Execution Vulnerability

The Netgear NETGEAR R7800 is a wireless router from the American company Netgear. The NETGEAR R7800 suffers from a remote code execution vulnerability that stems from a failure to properly validate server-supplied certificates, which can be exploited by an attacker to execute arbitrary code in...

Netgear NETGEAR R7800 Operating System Command Injection Vulnerability

The Netgear NETGEAR R7800 is a wireless router from Netgear, Inc. The NETGEAR R7800 suffers from an operating system command injection vulnerability that originates from the failure to properly validate a user-supplied string before executing a system call using it. An attacker could exploit the...

Netgear NETGEAR R7800 Access Control Error Vulnerability

The Netgear NETGEAR R7800 is a wireless router from Netgear, Inc. The NETGEAR R7800 suffers from an Access Control Error vulnerability that can be exploited by an attacker to execute arbitrary code on an affected device installation...

(Pwn2Own) NETGEAR R7800 apply_save.cgi rc_service Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the...

Netgear NETGEAR R7800 信任管理问题漏洞

The Netgear NETGEAR R7800 is a wireless router from the American company Netgear. The NETGEAR R7800 suffers from a remote code execution vulnerability that stems from a failure to properly validate server-supplied certificates, which can be exploited by an attacker to execute arbitrary code in...

(Pwn2Own) NETGEAR R7800 ready-genie-cloud Improper Certificate Validation Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files via FTP. The issue results...

(Pwn2Own) NETGEAR R7800 udchpd DHCP_REQUEST Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the vendorspecific DHCP opcode. The issue results from the lack ...

CVE-2020-35835

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10...

CVE-2020-35809

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, XR500 before 2.3.2.56,...

CVE-2020-35786

NETGEAR R7800 devices before 1.0.2.74 are affected by a buffer overflow by an authenticated user...

CVE-2020-35792

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7500v2 before 1.0.3.48, R8900 before 1.0.5.2, R9000 before 1.0.5.2, and R7800 before 1.0.2.68...

CVE-2020-35791

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.68, R8900 before 1.0.5.2, and R9000 before 1.0.5.2...

CVE-2020-35786

NETGEAR R7800 devices before 1.0.2.74 are affected by a buffer overflow by an authenticated user...

Buffer overflow

NETGEAR R7800 devices before 1.0.2.74 are affected by a buffer overflow by an authenticated user...

CVE-2020-35786

NETGEAR R7800 devices before 1.0.2.74 are affected by a buffer overflow by an authenticated user...

NETGEAR R7800 devices 缓冲区错误漏洞

The NETGEAR R7800 is an AC2600 dual-band Gigabit wireless router. A buffer overflow vulnerability exists in the NETGEAR R7800 versions prior to 1.0.2.74. No details of the vulnerability are provided at this time...