Netgear Router DoS

The vulnerability in the wlgadv.cgi script of Netgear’s router microprogramming devices, such as R8500, XR300, R7000P, and R6400 v2, stems from the copying of buffers without checking the size of the input data during the processing of parameters apmodedns1pri and apmodedns1sec. Exploiting this...

Netgear XR300 wizpppoe.cgi DoS

The vulnerability in the wizpppoe.cgi microprogramming software of Netgear XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of input data during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows a malicious actor to cause servic...

Netgear R7000P Router DoS

The vulnerability in the wizpptp.cgi script of the Netgear R7000P router’s microprogramming system is related to the copying of buffers without checking the size of the input data during the processing of the pptpusernetmask parameter. Exploiting this vulnerability allows a malicious actor to cau...

Netgear genie_pptp.cgi DoS

The vulnerability in the geniepptp.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 stems from the practice of copying buffers without checking the size of the input data during the processing of the pptpuserip parameter. Exploiting this vulnerabili...

Netgear Router Arbitrary Command Execution

The vulnerability in the wlgadv.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 relates to the failure to take data cleaning measures at the control level when processing the apmodegateway parameter. Exploiting this vulnerability allows a remote...

Netgear R8500 Router DoS

The vulnerability in the wizpptp.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the pptpuserip parameter. Exploiting this vulnerability allows a...

NETGEAR Router Heap Buffer Overflow DoS

The vulnerability of the apmode.cgi script in NETGEAR’s router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in a buffer overflow that occurs during the processing of the apmodedns1pri and apmodedns1sec parameters. Exploiting this vulnerability allows an attacker to...

Netgear XR300 PPPoe2.cgi DoS

The vulnerability in the pppoe2.cgi microprogramming of Netgear XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of input data during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows a malicious actor to cause service failures ...

Netgear R7000P USB ISP Detail Edit DoS

The vulnerability in the usbISPdetailedit.cgi script of Netgear R7000P router microprogramming software relates to the copying of buffers without checking the size of input data during the processing of the apn parameter. Exploiting this vulnerability allows a malicious actor to cause service...

Netgear R8500 genie_fix2.cgi Command Execution

The vulnerability of the geniefix2.cgi microprogramming software for Netgear R8500 routers lies in the lack of measures to neutralize special elements used in the operating system’s commands when processing the wangateway parameter. Exploiting this vulnerability allows a remote attacker to execut...

Netgear XR300 genie_dyn.cgi Command Execution

The vulnerability in the geniedyn.cgi script of the Netgear XR300 router software lies in the lack of measures to neutralize special elements used in the operating system’s command when processing the parameter systemname. Exploiting this vulnerability allows a remote attacker to execute arbitrar...

Netgear R8500 Router Command Execution

The vulnerability in the password.cgi script of Netgear R8500 router microprogramming software exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by...

Netgear XR300 DoS

The vulnerability in the bridgewirelessmain.cgi script of the Netgear XR300 router software lies in the copying of buffers without checking the size of the input data during the processing of the passphrase parameter. Exploiting this vulnerability allows a malicious actor to cause a service failu...

PT-2025-13825 · NetGear · Netgear Wnr854T

Name of the Vulnerable Software and Affected Versions: Netgear WNR854T version 1.5.2 Description: The issue concerns a stack-based buffer overflow in the M-SEARCH Host header of the UPNP service, located at /usr/sbin/upnp. Recommendations: For Netgear WNR854T version 1.5.2, consider disabling the...

PT-2025-13830

Name of the Vulnerable Software and Affected Versions Netgear WNR854T version 1.5.2 Description The issue concerns a command injection vulnerability in the UPNP service, specifically in the addmap exec function. This function parses the NewInternalClient parameter of the "AddPortMapping" SOAPActi...

PT-2025-13829

Name of the Vulnerable Software and Affected Versions Netgear WNR854T version 1.5.2 Description The issue allows for arbitrary command execution in cmd.cgi, enabling the execution of system commands via the web interface. Recommendations For Netgear WNR854T version 1.5.2, consider disabling acces...

PT-2025-13831

Name of the Vulnerable Software and Affected Versions Netgear WNR854T version 1.5.2 Description The issue is a stack-based buffer overflow due to an unconstrained use of sscanf in the SetDefaultConnectionService function. This allows for control of the program counter and can be used to achieve...

PT-2025-13832

Name of the Vulnerable Software and Affected Versions Netgear Inc WNR854T version 1.5.2 Description The issue is a stack-based buffer overflow due to the use of a request header parameter in a strncpy function where the size is determined based on the input specified. This occurs in the parse st...

PT-2025-13827 · NetGear · Netgear Wnr854T

Name of the Vulnerable Software and Affected Versions: Netgear WNR854T version 1.5.2 Description: The issue allows an attacker to send a specially crafted request to "post.cgi", updating the wan hostname parameter in nvram, which can lead to command injection and force a reboot. Recommendations:...

PT-2025-13828

Name of the Vulnerable Software and Affected Versions Netgear WNR854T version 1.5.2 Description The issue allows an attacker to perform Command Injection. This can be achieved by sending a specially crafted request to the "post.cgi" endpoint, updating the get email parameter in nvram. After...