NETGEAR XR300 安全漏洞

The NETGEAR XR300 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR XR300 v1.0.3.78, which originates from the passphrase parameter in the bridgewirelessmain.cgi component that fails to correctly validate the length of the input data, and can be exploited by a...

PT-2024-8265 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.3.154 Description: The issue is related to a stack overflow in the ru wan flow.cgi script, specifically via the pptp user netmask parameter. This allows attackers to cause a Denial of Service DoS by sending a crafte...

CVE-2024-50995

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the sharename parameter at usbremotesmbconf.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50995

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the sharename parameter at usbremotesmbconf.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50994

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component ipv6fix.cgi via the ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, and ipv6lanlength parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST...

NETGEAR R8500 安全漏洞

The NETGEAR R8500 is a wireless router from NETGEAR. A command injection vulnerability exists in the NETGEAR R8500 v1.0.2.160, which stems from the sysNewPasswd parameter in the adminaccount.cgi component failing to correctly filter constructed command special characters, commands, and so on. An...

CVE-2024-52021

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wangateway parameter at bswfix.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...

NETGEAR XR300 安全漏洞

The NETGEAR XR300 is a wireless router from NETGEAR. NETGEAR XR300 version v1.0.3.78 suffers from a command injection vulnerability that stems from the systemname parameter in the wizdyn.cgi component failing to properly filter constructed command special characters, commands, and so on. An...

CVE-2024-52020

Netgear R8500 v1.0.2.160 is affected by a command-injection vulnerability in the wan_gateway parameter of wiz_fix2.cgi. The issue arises from improper neutralization of special elements in the operating-system command when processing the wan_gateway parameter, enabling an attacker to execute arbi...

CVE-2024-52018

CVE-2024-52018 affects Netgear XR300 v1.0.3.78. A command-injection vulnerability exists in the genie_dyn.cgi endpoint through the system_name parameter, allowing an attacker to execute arbitrary OS commands via a crafted request. From the provided documents, the CVSS v3.1 base score is 8.0 (HIGH...

CVE-2024-51005

Netgear R8500 v1.0.2.160 is affected by a command injection vulnerability in the share_name parameter of the usb_remote_smb_conf.cgi endpoint. The underlying issue is failure to neutralize or validate input in the share_name parameter, enabling an attacker to craft a request that executes arbitra...

CVE-2024-52030

Netgear R7000P v1.3.3.154 is affected by a stack/buffer overflow in ru_wan_flow.cgi triggered via the pptp_user_netmask parameter. A crafted POST request can cause Denial of Service (DoS). Some sources additionally note potential arbitrary-code concerns, but the primary detail is DoS via a crafte...

CVE-2024-51014

Netgear XR300 v1.0.3.78 is affected by a stack overflow in the bridge_wireless_main.cgi component, triggered by the ssid_an parameter. The vulnerability allows remote attackers to cause a Denial of Service by sending a crafted POST request to the bridge wireless main.cgi endpoint. The available s...

CVE-2024-51007

CVE-2024-51007 concerns Netgear XR300 wireless router firmware, specifically version 1.0.3.78 . The vulnerability is a stack overflow in the wireless.cgi component triggered by the passphrase parameter, which can be exploited by a remote attacker to cause a Denial of Service (DoS) via a crafted P...

CVE-2024-52023

Netgear XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400 v2 (v1.0.4.128) are affected by a stack overflow in the pppoe_localip parameter of the pppoe2.cgi endpoint. The vulnerability allows a remote attacker to cause a Denial of Service (DoS) via a crafted POST request. Multiple independent sour...

CVE-2024-51000

Netgear R8500 v1.0.2.160 contains multiple stack overflow vulnerabilities in the wireless.cgi component, reachable via the opmode, opmode_an, and opmode_an_2 parameters. The issues allow an attacker to cause a Denial of Service (DoS) with a crafted POST request. Affected software is Netgear R8500...

CVE-2024-51019

Netgear R7000P v1.3.3.154 contains a stack overflow in the pppoe.cgi component triggered by the pppoe_localnetmask parameter. A crafted POST request can cause a Denial of Service (DoS). Public sources diverge on whether arbitrary code execution is possible; several CNVD/Red Hat/NVD variants descr...

CVE-2024-51016

CVE-2024-51016 affects Netgear XR300 v1.0.3.78 and is caused by a stack overflow in the addName%d parameter of the usb_approve.cgi script, exploitable by a crafted POST request to induce a DoS. The available documents consistently describe a buffer/stack overflow in usb_approve.cgi without citing...

CVE-2024-51022

Netgear XR300, v1.0.3.78, contains a stack overflow in bridge_wireless_main.cgi when processing the ssid parameter, allowing a crafted POST to cause a Denial of Service. Public details across NVD/Red Hat/CVE records confirm the issue but do not provide an attacker’s exploit vector beyond the POST...

CVE-2024-52028

CVE-2024-52028 affects NETGEAR R7000P (firmware v1.3.3.154). The vulnerability is a stack/buffer overflow in the wiz_pptp.cgi component, caused by improper handling of the pptp_user_netmask parameter, which can be triggered by a crafted POST request to trigger a Denial of Service. Multiple connec...