Lucene search
+L

12205 matches found

Positive Technologies
Positive Technologies
added 2024/10/28 12:0 a.m.8 views

PT-2024-8322 · NetGear · Netgear Xr300 +3

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Netgear XR300 version 1.0.3.78 Netgear R7000P version 1.3.3.154 Netgear R6400 v2 version 1.0.4.128 Description: The issue is related to multiple stack overflow vulnerabilities in the ap mode.cgi component. Thes...

5.7CVSS7.7AI score0.00305EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/10/28 12:0 a.m.7 views

PT-2024-8388 · NetGear · Netgear Xr300

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue is related to a stack overflow vulnerability in the bridge wireless main.cgi script of the NETGEAR XR300 router's firmware when handling the ssid an parameter. This can be exploited by a...

5.7CVSS6.8AI score0.00305EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2024/10/25 12:0 a.m.18 views

The vulnerability in the `usb_remote_smb_conf.cgi` script of NETGEAR XR1000 Wi-Fi routers allows a hacker to execute arbitrary commands.

The vulnerability in the usbremotesmbconf.cgi script of NETGEAR XR1000 Wi-Fi routers lies in the lack of measures for sanitizing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the sharename parameter...

8.4CVSS5.9AI score0.14536EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/25 12:0 a.m.14 views

The vulnerability in the operating_mode.cgi script of NETGEAR EX3700 microprogramming devices allows a hacker to execute arbitrary commands.

The vulnerability of the operatingmode.cgi script in NETGEAR EX3700 microprogramming devices lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the apmode parameter...

8.4CVSS5.9AI score0.01855EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:0 a.m.8 views

The vulnerability in the genie_fix2.cgi microprogramming software for NETGEAR EX6120 allows a hacker to execute arbitrary commands.

The vulnerability of the geniefix2.cgi microprogramming software for NETGEAR EX6120 routers is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the wandns1pri parameter...

8.4CVSS5.9AI score0.01039EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:0 a.m.11 views

The vulnerability in the operating_mode.cgi script of NETGEAR’s router microprogramming devices EX6120, EX6100, and EX3700 allows a hacker to execute arbitrary commands.

The vulnerability of the operatingmode.cgi script in NETGEAR’s microprogrammed router devices, such as EX6120, EX6100, and EX3700, is related to the lack of measures taken to protect data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.4CVSS5.9AI score0.01035EPSS
SaveExploits0References5Affected Software3
CNVD
CNVD
added 2024/10/17 12:0 a.m.6 views

NETGEAR EX6120 Command Injection Vulnerability

The NETGEAR EX6120 is a wireless extender from NETGEAR. A command injection vulnerability exists in the NETGEAR EX6120 v1.0.0.68, which stems from the wandns1pri parameter failing to properly filter constructed command special characters, commands, and so on. An attacker can exploit this...

8.4CVSS7.4AI score0.01039EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/10/17 12:0 a.m.11 views

NETGEAR R7000 Command Injection Vulnerability

The NETGEAR R7000 is a wireless router from NETGEAR. The NETGEAR R7000 version 1.0.11.136 suffers from a command injection vulnerability that stems from the devicename2 parameter failing to correctly filter constructed command special characters, commands, and so on. An attacker could exploit thi...

8.4CVSS7.4AI score0.09307EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/14 10:15 p.m.7 views

CVE-2024-35520

Netgear R7000 1.0.11.136 is vulnerable to Command Injection in RMTinvite.cgi via devicename2 parameter...

6.8CVSS5.8AI score0.09307EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/14 10:15 p.m.10 views

CVE-2024-35518

Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in geniefix2.cgi via the wandns1pri parameter...

6.8CVSS5.8AI score0.01039EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/14 10:15 p.m.8 views

CVE-2024-35519

Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operatingmode.cgi via the apmode parameter...

6.8CVSS5.8AI score0.01035EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/14 10:15 p.m.17 views

CVE-2024-35518

Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in geniefix2.cgi via the wandns1pri parameter...

8.4CVSS0.01039EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/14 10:15 p.m.18 views

CVE-2024-35519

Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operatingmode.cgi via the apmode parameter...

8.4CVSS0.01035EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/14 10:15 p.m.19 views

CVE-2024-35520

Netgear R7000 1.0.11.136 is vulnerable to Command Injection in RMTinvite.cgi via devicename2 parameter...

8.4CVSS0.09307EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/14 12:0 a.m.23 views

CVE-2024-35518

Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in geniefix2.cgi via the wandns1pri parameter...

8.4CVSS0.01039EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/14 12:0 a.m.25 views

CVE-2024-35519

Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operatingmode.cgi via the apmode parameter...

8.4CVSS0.01035EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/14 12:0 a.m.11 views

CVE-2024-35519

Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operatingmode.cgi via the apmode parameter...

8.4CVSS7.4AI score0.01035EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/14 12:0 a.m.6 views

NETGEAR EX6120、EX6100和EX3700 安全漏洞

NETGEAR EX3700 and others are products of NETGEAR Corporation USA.NETGEAR EX3700 is a wireless network signal extender.NETGEAR EX6100 is a WiFi range extender.NETGEAR EX6120 is a wireless extender. A security vulnerability exists in the Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and...

8.4CVSS7.4AI score0.01035EPSS
SaveExploits0References2
CNVD
CNVD
added 2024/10/14 12:0 a.m.11 views

Unspecified Vulnerability in NETGEAR EX3700 (CNVD-2024-41044)

NETGEAR EX3700 is a wireless network signal extender from NETGEAR. A security vulnerability exists in the NETGEAR EX3700 prior to version 1.0.0.98, which originates from an authenticated command injection of the apmode parameter in workingmode.cgi. No details of the vulnerability are available at...

8.4CVSS7.2AI score0.01855EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/10/14 12:0 a.m.26 views

CVE-2024-35520

Netgear R7000 1.0.11.136 is vulnerable to Command Injection in RMTinvite.cgi via devicename2 parameter...

8.4CVSS0.09307EPSS
SaveExploits0References1
Rows per page
Query Builder