CVE-2024-7153

The provided connected documents confirm CVE-2024-7153 affects NETGEAR WN604 (up to 20240719), specifically the siteSurvey.php function. The vulnerability is described as an unknown function manipulation that can be triggered remotely via a direct request, with exploitation disclosed publicly. So...

PT-2024-38115 · NetGear · Netgear Wn604

Name of the Vulnerable Software and Affected Versions: Netgear WN604 up to 20240719 Description: A problematic vulnerability has been found, affecting an unknown function of the file siteSurvey.php. The manipulation leads to direct request and can be launched remotely. The exploit has been...

The vulnerability of the /downloadFile.php web interface of Netgear WN604 software, which allows a hacker to disclose protected information

The vulnerability of the /downloadFile.php web interface of Netgear WN604 router software lies in the insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

NETGEAR RAX30 Command Injection Vulnerability (CNVD-2024-33905)

The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. The NETGEAR RAX30 suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary code...

NETGEAR WN604 Information Disclosure Vulnerability

The NETGEAR WN604 is a small wireless router from NETGEAR. The NETGEAR WN604 suffers from an information disclosure vulnerability that originates in the parameter file of file/downloadFile.php, which is not sufficiently protected for sensitive information and can be exploited by an attacker to...

NETGEAR RAX30 Stack Buffer Overflow Vulnerability (CNVD-2024-33904)

The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. The NETGEAR RAX30 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

NETGEAR ProSAFE Arbitrary File Upload Vulnerability (CNVD-2024-33897)

NETGEAR ProSAFE is a network management system from NETGEAR. An arbitrary file upload vulnerability exists in NETGEAR ProSAFE, which can be exploited by an attacker to execute arbitrary code...

NETGEAR ProSAFE Directory Traversal Vulnerability

NETGEAR ProSAFE is a network management system from NETGEAR. NETGEAR ProSAFE suffers from a directory traversal vulnerability that can be exploited by an attacker to execute arbitrary code...

NETGEAR RAX30 Command Injection Vulnerability (CNVD-2024-35178)

The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. The NETGEAR RAX30 suffers from a command injection vulnerability that stems from the presence of an information disclosure vulnerability. No details of the vulnerability are provided at this time...

NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerability. The specific flaw exists within the getSortString method. The issue results from the lack of prope...

NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerability. The specific flaw exists within the getFilterString method. The issue results from the lack of...

NETGEAR RAX30 Information Disclosure Vulnerability

NETGEAR RAX30 is a WiFi 6 router from NETGEAR , supporting dual-band 2.4GHz and 5GHz with a maximum transmission rate of 2400Mbps, three external antenna design, and equipped with a 1.5GHz triple-core processor for simultaneous connection of up to 20 devices. An information disclosure vulnerabili...

NETGEAR ProSAFE Elevation of Privilege Vulnerability

NETGEAR ProSAFE is a network management system from NETGEAR. An elevation of privilege vulnerability exists in NETGEAR ProSAFE, which can be exploited by an attacker to elevate privileges...

NETGEAR RAX30 Information Disclosure Vulnerability (CNVD-2024-33909)

The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. The NETGEAR RAX30 suffers from an information disclosure vulnerability that can be exploited by attackers to disclose sensitive information...

NETGEAR ProSAFE Remote Code Execution Vulnerability

NETGEAR ProSAFE is a network management system from NETGEAR. NETGEAR ProSAFE suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code...

NETGEAR ProSAFE SQL Injection Vulnerability (CNVD-2024-33910)

NETGEAR ProSAFE is a network management system from NETGEAR. NETGEAR ProSAFE suffers from a SQL injection vulnerability that can be exploited by an attacker to execute arbitrary code...

NETGEAR ProSAFE Arbitrary File Upload Vulnerability

NETGEAR ProSAFE is a network management system from NETGEAR. An arbitrary file upload vulnerability exists in NETGEAR ProSAFE, which can be exploited by an attacker to execute arbitrary code...

NETGEAR ProSAFE SQL Injection Vulnerability

NETGEAR ProSAFE is a network management system from NETGEAR. NETGEAR ProSAFE suffers from a SQL injection vulnerability that can be exploited by an attacker to elevate privileges...

NETGEAR RAX30 Stack Buffer Overflow Vulnerability (CNVD-2024-33665)

The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. The NETGEAR RAX30 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute remote code...

NETGEAR RAX30 Stack Buffer Overflow Vulnerability (CNVD-2024-33664)

The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. The NETGEAR RAX30 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to bypass authentication...