CVE-2024-35520

Netgear R7000 1.0.11.136 is vulnerable to Command Injection in RMTinvite.cgi via devicename2 parameter...

NETGEAR R7000 安全漏洞

The NETGEAR R7000 is a wireless router from NETGEAR. The NETGEAR R7000 version 1.0.11.136 suffers from a command injection vulnerability that stems from the devicename2 parameter failing to correctly filter constructed command special characters, commands, and so on. An attacker could exploit thi...

Unspecified Vulnerability in NETGEAR XR1000 (CNVD-2024-41045)

The NETGEAR XR1000 is a dual-band Wi-Fi 6 router from NETGEAR designed for gaming. A security vulnerability exists in NETGEAR XR1000 version v1.0.0.64, which stems from vulnerability to command injection attacks with the sharename parameter. No details of the vulnerability are provided at this ti...

NETGEAR EX6120 安全漏洞

The NETGEAR EX6120 is a wireless extender from NETGEAR. A command injection vulnerability exists in the NETGEAR EX6120 v1.0.0.68, which stems from the wandns1pri parameter failing to properly filter constructed command special characters, commands, and so on. An attacker can exploit this...

CVE-2024-35520

Netgear R7000 (version 1.0.11.136) is affected by a Command Injection in RMT_invite.cgi via the device_name2 parameter. Root cause: insufficient input sanitization when processing this parameter, enabling arbitrary command execution by a remote attacker. Documented impact is high for confidential...

CVE-2024-35518

CVE-2024-35518 affects Netgear EX6120 v1.0.0.68. The vulnerability is a command injection in the genie_fix2.cgi script via the wan_dns1_pri parameter, enabling arbitrary command execution. Public sources (CNVD/CNNVD/NVD) corroborate the flaw in the same version. CVSS details in the NVD/CVE record...

CVE-2024-35518

Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in geniefix2.cgi via the wandns1pri parameter...

CVE-2024-35519

Netgear EX6120 v1.0.0.68, EX6100 v1.0.2.28, and EX3700 v1.0.0.96 are affected by a command-injection flaw in the operating_mode.cgi script, exploitable via the ap_mode parameter. Root cause: lack of input validation on ap_mode in operating_mode.cgi leading to command execution. Impact per documen...

CVE-2024-35522

Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injection in operatingmode.cgi via the apmode parameter with ap24gmanual set to 1 and ap24gmanualsec set to NotNone...

CVE-2024-35522

Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injection in operatingmode.cgi via the apmode parameter with ap24gmanual set to 1 and ap24gmanualsec set to NotNone...

CVE-2024-35517

Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usbremotesmbconf.cgi via the sharename parameter...

CVE-2024-35517

Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usbremotesmbconf.cgi via the sharename parameter...

CVE-2024-35517

Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usbremotesmbconf.cgi via the sharename parameter...

CVE-2024-35522

Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injection in operatingmode.cgi via the apmode parameter with ap24gmanual set to 1 and ap24gmanualsec set to NotNone...

NETGEAR EX3700 安全漏洞

NETGEAR EX3700 is a wireless network signal extender from NETGEAR. A security vulnerability exists in the NETGEAR EX3700 prior to version 1.0.0.98, which originates from an authenticated command injection of the apmode parameter in workingmode.cgi. No details of the vulnerability are available at...

CVE-2024-35522

The CVE-2024-35522 case is about NETGEAR EX3700 firmware prior to 1.0.0.98, which contains an authenticated command-injection vulnerability in the operating_mode.cgi script. The root cause is lack of input sanitization in the API handling the ap_mode/ap 24g manual controls (ap_mode parameter with...

CVE-2024-35522

Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injection in operatingmode.cgi via the apmode parameter with ap24gmanual set to 1 and ap24gmanualsec set to NotNone...

NETGEAR XR1000 安全漏洞

The NETGEAR XR1000 is a dual-band Wi-Fi 6 router from NETGEAR designed for gaming. A security vulnerability exists in NETGEAR XR1000 version v1.0.0.64, which stems from vulnerability to command injection attacks with the sharename parameter. No details of the vulnerability are provided at this ti...

CVE-2024-35517

Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usbremotesmbconf.cgi via the sharename parameter...

CVE-2024-35517

The CVE-2024-35517 entry concerns NETGEAR XR1000 firmware v1.0.0.64 with a command-injection vulnerability in the usb_remote_smb_conf.cgi script, exploitable via the share_name parameter due to insufficient input sanitization. Affected component: usb_remote_smb_conf.cgi within XR1000 firmware; im...