CVE-2024-52023: Buffer Copy without Checking Size of Input

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoelocalip parameter at pppoe2.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

NETGEAR XR300 安全漏洞

The NETGEAR XR300 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR XR300 v1.0.3.78, which originates from the passphrase parameter in the wireless.cgi component that fails to properly validate the length of the input data, and can be exploited by a remote...

CVE-2024-52025

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoelocalip parameter at geniepppoe.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51008

Netgear XR300 v1.0.3.78 was discovered to contain a command injection vulnerability in the systemname parameter at wizdyn.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...

CVE-2024-52016

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component wlgadv.cgi via the apmodedns1pri and apmodedns1sec parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS vi...

NETGEAR R8500 安全漏洞

The NETGEAR R8500 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR R8500 v1.0.2.160, which originates from the openvpnserviceport and openvpnserviceporttun parameters in the openvpn.cgi component failing to correctly validate the length and size of the inpu...

CVE-2024-50998

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component openvpn.cgi via the openvpnserviceport and openvpnserviceporttun parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2024-8365

Name of the Vulnerable Software and Affected Versions Netgear R8500 version 1.0.2.160 Description The issue is related to multiple stack overflow vulnerabilities in the openvpn.cgi component of the Netgear R8500 router's firmware. These vulnerabilities are caused by uncontrolled copying of user...

CVE-2024-50998

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component openvpn.cgi via the openvpnserviceport and openvpnserviceporttun parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2024-8376

Name of the Vulnerable Software and Affected Versions Netgear R8500 version 1.0.2.160 Netgear XR300 version 1.0.3.78 Netgear R7000P version 1.3.3.154 Netgear R6400 v2 version 1.0.4.128 Description The issue is related to a stack overflow vulnerability via the l2tp user ip parameter at the...

CVE-2024-50998: Buffer Copy without Checking Size of Input

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component openvpn.cgi via the openvpnserviceport and openvpnserviceporttun parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51003

Netgear routers, specifically the R8500 v1.0.2.160 , XR300 v1.0.3.78 , R7000P v1.3.3.154 , and R6400 v2 1.0.4.128 , are susceptible to multiple stack overflow vulnerabilities within the ap_mode.cgi component. The root cause is improper handling of the apmode_dns1_pri and apmode_dns1_sec parameter...

CVE-2024-51017

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the l2tpusernetmask parameter at l2tp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-52020

The Netgear R8500 router (v1.0.2.160) contains a command injection vulnerability within the wiz_fix2.cgi component, specifically involving the wan_gateway parameter. The root cause is a failure to properly neutralize special elements used in operating system commands when processing this paramete...

CVE-2024-52023

Netgear XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400 v2 (v1.0.4.128) are vulnerable to a stack overflow in the pppoe2.cgi component. The root cause is a buffer copy operation that fails to check the size of input data when processing the pppoe_localip parameter. A remote attacker can exploit...

CVE-2024-50997

Several Netgear router models, including the R8500 (v1.0.2.160), XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400 v2 (v1.0.4.128), are vulnerable to a stack overflow in the pptp.cgi script. The root cause is a buffer copy operation that fails to check the size of input data when processing the p...

CVE-2024-52015: Buffer Copy without Checking Size of Input

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptpuserip parameter at bswpptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51008

The Netgear XR300 wireless router, specifically version v1.0.3.78 , contains a command injection vulnerability in the wiz_dyn.cgi script. The root cause is the failure to properly neutralize special elements and characters within the system_name parameter when processing incoming requests. A remo...

CVE-2024-50993

The Netgear R8500 wireless router (version 1.0.2.160 ) contains a command injection vulnerability in the admin_account.cgi component. The root cause is the failure to properly neutralize special elements in the operating system command when processing the sysNewPasswd parameter. A remote attacker...

CVE-2024-51011: Buffer Copy without Checking Size of Input

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoelocalip parameter at pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...