EUVD-2018-13636

Malware in sbrugna...

EUVD-2018-13634

Malware in sbrugna...

EUVD-2018-13633

Malware in sbrugna...

EUVD-2018-13635

Malware in sbrugna...

The vulnerability of the embedded software of Netgear XR1000, Netgear XR1000v2, and Netgear XR500 lies in improper code generation, allowing attackers to execute arbitrary code.

The vulnerability of the embedded software on Netgear XR1000, Netgear XR1000v2, and Netgear XR500 is related to incorrect code generation. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

CVE-2025-25246

NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users...

CVE-2025-25246

NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users...

CVE-2025-25246: Improper Control of Generation of Code

NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users...

NETGEAR XR1000和NETGEAR XR500 安全漏洞

NETGEAR XR500 and NETGEAR XR1000 are both products of NETGEAR Corporation.NETGEAR XR500 is a wireless router.NETGEAR XR1000 is a dual-band Wi-Fi 6 router designed for gaming. A security vulnerability exists in the NETGEAR XR1000 prior to version 1.0.0.74, the XR1000v2 prior to version 1.1.0.22, a...

PT-2025-5621

Name of the Vulnerable Software and Affected Versions NETGEAR XR1000 versions 1.0.0.0 through 1.0.0.73 NETGEAR XR1000v2 versions 1.0.0.0 through 1.1.0.21 NETGEAR XR500 versions 2.3.2.0 through 2.3.2.133 Description The issue allows remote code execution by unauthenticated users, potentially...

The vulnerability of NETGEAR XR450 and XR500 Wi-Fi routers’ built-in software lies in the lack of measures taken to clean data at the management level, allowing attackers to execute arbitrary commands.

The vulnerability of NETGEAR XR450 and XR500 Wi-Fi routers’ built-in software relates to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted data remotely...

PT-2022-37675

Уязвимость встроенного программного обеспечения Wi-Fi роутеров NETGEAR XR450 и XR500 связана с непринятием мер по чистке данных на управляющем уровне. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнять произвольные команды путем передачи специально созданных данн...

CVE-2021-45623

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R7800 before 1.0.2.74, R9000 before 1.0.5.2, and XR500 before 2.3.2.66...

PT-2021-5917

Name of the Vulnerable Software and Affected Versions NETGEAR R7800 versions prior to 1.0.2.74 NETGEAR R9000 versions prior to 1.0.5.2 NETGEAR XR500 versions prior to 2.3.2.66 Description The issue is related to insufficient input validation, allowing an unauthenticated attacker to perform comman...

CVE-2021-29069

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects XR450 before 2.3.2.114, XR500 before 2.3.2.114, and WNR2000v5 before 1.0.0.76...

PT-2021-18058

Name of the Vulnerable Software and Affected Versions: NETGEAR XR450 versions prior to 2.3.2.114 NETGEAR XR500 versions prior to 2.3.2.114 NETGEAR WNR2000v5 versions prior to 1.0.0.76 Description: The issue is related to command injection by an authenticated user. Recommendations: For NETGEAR XR4...

多款Netgear产品命令注入漏洞

Netgear NETGEAR XR500 and others are products of Netgear, Inc.NETGEAR XR500 is a wireless router.NETGEAR WNR2000v5 is a router.NETGEAR XR450 is a router. A command injection vulnerability exists in multiple NETGEAR models that allows command injection by an authenticated user. The following...

CVE-2020-35835

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10...

CVE-2020-35809

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, XR500 before 2.3.2.56,...

CVE-2020-35828: Improper Neutralization of Input During Web Page Generation

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30,...