CVE-2023-36499: Buffer Copy without Checking Size of Input

Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wlassid and wlgssid parameters at genieapwifichange.cgi...

The vulnerability of the built-in software of NETGEAR XR300, R7000P, and R6900P routers lies in the lack of measures to sanitize input data, allowing attackers to execute arbitrary commands.

The vulnerability of NETGEAR XR300, R7000P, and R6900P router’s built-in software lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2022-37653

Уязвимость микропрограммного обеспечения Wi-Fi роутеров NETGEAR D6220, D7000, D7000v2, R6400v2, R6700v3, R7000, R7100LG, XR300 связана с переполнением буфера на стеке. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...

CVE-2021-45609

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D8500 before 1.0.3.58, R6250 before 1.0.4.48, R7000 before 1.0.11.116, R7100LG before 1.0.0.64, R7900 before 1.0.4.38, R8300 before 1.0.2.144, R8500 before 1.0.2.144, XR300 before 1.0.3.68, R700...

CVE-2021-45605

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 before 1.0.1.68, R7000 before 1.0.11.116, R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7900 before 1.0.4.38, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, and XR300 before...

CVE-2021-45610: Buffer Copy without Checking Size of Input

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.66, D6400 before 1.0.0.100, D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, DC112A before 1.0.0.52, DGN2200v4 before 1.0.0.118, EAX80 before 1.0.1.64, R6250 before 1.0.4.48,...

PT-2021-6212

Name of the Vulnerable Software and Affected Versions NETGEAR XR300 versions prior to 1.0.3.68 NETGEAR R7000P versions prior to 1.3.3.140 NETGEAR R6900P versions prior to 1.3.3.140 Description The issue is related to command injection by an unauthenticated attacker due to the lack of input data...

PT-2021-5914

Name of the Vulnerable Software and Affected Versions NETGEAR D8500 versions prior to 1.0.3.58 NETGEAR R6250 versions prior to 1.0.4.48 NETGEAR R7000 versions prior to 1.0.11.116 NETGEAR R7100LG versions prior to 1.0.0.64 NETGEAR R7900 versions prior to 1.0.4.38 NETGEAR R8300 versions prior to...

PT-2021-5911

Name of the Vulnerable Software and Affected Versions NETGEAR DC112A versions prior to 1.0.0.52 NETGEAR R6400 versions prior to 1.0.1.68 NETGEAR RAX200 versions prior to 1.0.3.106 NETGEAR WNDR3400v3 versions prior to 1.0.1.38 NETGEAR XR300 versions prior to 1.0.3.68 NETGEAR R8500 versions prior t...

PT-2021-6474 · NetGear · Netgear R6400V2 +14

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400 versions prior to the fixed version NETGEAR R6400v2 versions prior to the fixed version NETGEAR R6700v3 version 1.0.4.120 10.0.91 NETGEAR R6900P versions prior to the fixed version NETGEAR R7000 versions prior to the fixed versi...

PT-2021-4631

Name of the Vulnerable Software and Affected Versions NETGEAR R7000 version 1.0.11.116 10.2.100 NETGEAR D7000v2 affected versions not specified NETGEAR R6400 affected versions not specified NETGEAR R6400v2 affected versions not specified NETGEAR R6700v3 affected versions not specified NETGEAR...

PT-2021-5915

Name of the Vulnerable Software and Affected Versions NETGEAR R6400 versions prior to 1.0.1.68 NETGEAR R7000 versions prior to 1.0.11.116 NETGEAR R6900P versions prior to 1.3.3.140 NETGEAR R7000P versions prior to 1.3.3.140 NETGEAR R7900 versions prior to 1.0.4.38 NETGEAR RAX75 versions prior to...

PT-2021-22174

Name of the Vulnerable Software and Affected Versions NETGEAR R6400 versions prior to 1.0.1.70 NETGEAR RAX75 versions prior to 1.0.4.120 NETGEAR RAX80 versions prior to 1.0.4.120 NETGEAR XR300 versions prior to 1.0.3.50 Description The issue affects certain NETGEAR devices, causing out-of-bounds...

CVE-2020-15636: Stack-based Buffer Overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R6400, R6700, R7000, R7850, R7900, R8000, RS400, and XR300 routers with firmware 1.0.4.8410.0.58. Authentication is not required to exploit this vulnerability. The specific flaw exists within...

PT-2020-14558

Name of the Vulnerable Software and Affected Versions NETGEAR R6400, R6700, R7000, R7850, R7900, R8000, RS400, and XR300 routers with firmware 1.0.4.84 10.0.58 Description This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to...