Netgear R8500 Router DoS

The vulnerability in the wizpptp.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the pptpuserip parameter. Exploiting this vulnerability allows a...

Netgear XR300 genie_dyn.cgi Command Execution

The vulnerability in the geniedyn.cgi script of the Netgear XR300 router software lies in the lack of measures to neutralize special elements used in the operating system’s command when processing the parameter systemname. Exploiting this vulnerability allows a remote attacker to execute arbitrar...

Netgear R8500 genie_fix2.cgi Command Execution

The vulnerability of the geniefix2.cgi microprogramming software for Netgear R8500 routers lies in the lack of measures to neutralize special elements used in the operating system’s commands when processing the wangateway parameter. Exploiting this vulnerability allows a remote attacker to execut...

Netgear R8500 Router Command Execution

The vulnerability in the password.cgi script of Netgear R8500 router microprogramming software exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by...

Netgear bsw_pptp.cgi DoS

The vulnerability in the bswpptp.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the pptpuserip parameter. Exploiting this vulnerability allows a...

Netgear bsw_pppoe.cgi DoS

The vulnerability in the bswpppoe.cgi script of Netgear XR300, R7000P, and R6400 v2 routers stems from the copying of buffer data without checking the size of the input data during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows a malicious actor to cause servic...

Netgear XR300 DoS

The vulnerability in the bridgewirelessmain.cgi script of the Netgear XR300 router software lies in the copying of buffers without checking the size of the input data during the processing of the ssid parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by...

Netgear XR300 wizpppoe.cgi DoS

The vulnerability in the wizpppoe.cgi microprogramming software of Netgear XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of input data during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows a malicious actor to cause servic...

Netgear R7000P Router DoS

The vulnerability in the wizpptp.cgi script of the Netgear R7000P router’s microprogramming system is related to the copying of buffers without checking the size of the input data during the processing of the pptpusernetmask parameter. Exploiting this vulnerability allows a malicious actor to cau...

Netgear R7000P USB ISP Detail Edit DoS

The vulnerability in the usbISPdetailedit.cgi script of Netgear R7000P router microprogramming software relates to the copying of buffers without checking the size of input data during the processing of the apn parameter. Exploiting this vulnerability allows a malicious actor to cause service...

Netgear R7000P ru_wan_flow.cgi DoS

The vulnerability in the ruwanflow.cgi microprogramming system of Netgear R7000P routers is related to the copying of buffers without checking the size of input data during the processing of the pptpusernetmask parameter. Exploiting this vulnerability allows a malicious actor to cause service...

genie_fix2.cgi Arbitrary Command Execution

The vulnerability of the geniefix2.cgi microprogramming software for Netgear XR300, R7000P, and R6400 v2 lies in the lack of measures taken to neutralize special elements used in the operating system’s commands when processing the wangateway parameter. Exploiting this vulnerability allows a remot...

Netgear genie_pptp.cgi DoS

The vulnerability in the geniepptp.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 stems from the practice of copying buffers without checking the size of the input data during the processing of the pptpuserip parameter. Exploiting this vulnerabili...

Netgear XR300 DoS

The vulnerability in the bridgewirelessmain.cgi script of the Netgear XR300 router software lies in the copying of buffers without checking the size of the input data during the processing of the passphrase parameter. Exploiting this vulnerability allows a malicious actor to cause a service failu...

PT-2025-13825 · NetGear · Netgear Wnr854T

Name of the Vulnerable Software and Affected Versions: Netgear WNR854T version 1.5.2 Description: The issue concerns a stack-based buffer overflow in the M-SEARCH Host header of the UPNP service, located at /usr/sbin/upnp. Recommendations: For Netgear WNR854T version 1.5.2, consider disabling the...

PT-2025-13830

Name of the Vulnerable Software and Affected Versions Netgear WNR854T version 1.5.2 Description The issue concerns a command injection vulnerability in the UPNP service, specifically in the addmap exec function. This function parses the NewInternalClient parameter of the "AddPortMapping" SOAPActi...

PT-2025-13829

Name of the Vulnerable Software and Affected Versions Netgear WNR854T version 1.5.2 Description The issue allows for arbitrary command execution in cmd.cgi, enabling the execution of system commands via the web interface. Recommendations For Netgear WNR854T version 1.5.2, consider disabling acces...

PT-2025-13831

Name of the Vulnerable Software and Affected Versions Netgear WNR854T version 1.5.2 Description The issue is a stack-based buffer overflow due to an unconstrained use of sscanf in the SetDefaultConnectionService function. This allows for control of the program counter and can be used to achieve...

PT-2025-13832

Name of the Vulnerable Software and Affected Versions Netgear Inc WNR854T version 1.5.2 Description The issue is a stack-based buffer overflow due to the use of a request header parameter in a strncpy function where the size is determined based on the input specified. This occurs in the parse st...

PT-2025-13827 · NetGear · Netgear Wnr854T

Name of the Vulnerable Software and Affected Versions: Netgear WNR854T version 1.5.2 Description: The issue allows an attacker to send a specially crafted request to "post.cgi", updating the wan hostname parameter in nvram, which can lead to command injection and force a reboot. Recommendations:...