CVE-2024-51003

Netgear routers, specifically the R8500 v1.0.2.160 , XR300 v1.0.3.78 , R7000P v1.3.3.154 , and R6400 v2 1.0.4.128 , are susceptible to multiple stack overflow vulnerabilities within the ap_mode.cgi component. The root cause is improper handling of the apmode_dns1_pri and apmode_dns1_sec parameter...

CVE-2024-51017

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the l2tpusernetmask parameter at l2tp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-52020

The Netgear R8500 router (v1.0.2.160) contains a command injection vulnerability within the wiz_fix2.cgi component, specifically involving the wan_gateway parameter. The root cause is a failure to properly neutralize special elements used in operating system commands when processing this paramete...

CVE-2024-52023

Netgear XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400 v2 (v1.0.4.128) are vulnerable to a stack overflow in the pppoe2.cgi component. The root cause is a buffer copy operation that fails to check the size of input data when processing the pppoe_localip parameter. A remote attacker can exploit...

CVE-2024-50997

Several Netgear router models, including the R8500 (v1.0.2.160), XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400 v2 (v1.0.4.128), are vulnerable to a stack overflow in the pptp.cgi script. The root cause is a buffer copy operation that fails to check the size of input data when processing the p...

CVE-2024-52015: Buffer Copy without Checking Size of Input

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptpuserip parameter at bswpptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51008

The Netgear XR300 wireless router, specifically version v1.0.3.78 , contains a command injection vulnerability in the wiz_dyn.cgi script. The root cause is the failure to properly neutralize special elements and characters within the system_name parameter when processing incoming requests. A remo...

CVE-2024-50993

The Netgear R8500 wireless router (version 1.0.2.160 ) contains a command injection vulnerability in the admin_account.cgi component. The root cause is the failure to properly neutralize special elements in the operating system command when processing the sysNewPasswd parameter. A remote attacker...

CVE-2024-51011: Buffer Copy without Checking Size of Input

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoelocalip parameter at pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2024-8370

Name of the Vulnerable Software and Affected Versions Netgear R8500 version 1.0.2.160 Description The issue is related to multiple stack overflow vulnerabilities in the wireless.cgi component of the Netgear R8500 router's firmware. These vulnerabilities are caused by uncontrolled copying of user...

NETGEAR XR300 安全漏洞

The NETGEAR XR300 is a wireless router from NETGEAR. NETGEAR XR300 version v1.0.3.78 suffers from a command injection vulnerability that stems from the systemname parameter in the wizdyn.cgi component failing to properly filter constructed command special characters, commands, and so on. An...

CVE-2024-51001

The Netgear R8500 wireless router, specifically version v1.0.2.160 , is vulnerable to a stack overflow in the ddns.cgi component. The root cause is a failure to correctly validate the length of input data when processing the sysDNSHost parameter, specifically during buffer copying operations. A r...

CVE-2024-52026

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoelocalip parameter at bswpppoe.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50999

The Netgear R8500 router (version v1.0.2.160 ) is vulnerable to a command injection vulnerability within the password.cgi component. The root cause is the failure to neutralize special elements used in operating system commands when processing the sysNewPasswd parameter. A remote attacker can exp...

CVE-2024-51000

The Netgear R8500 wireless router (version v1.0.2.160 ) contains multiple stack overflow vulnerabilities in the wireless.cgi component. The root cause is the copying of buffers without sufficient input size validation during the processing of the opmode , opmode_an , and opmode_an_2 parameters. A...

CVE-2024-52019

The Netgear R8500 (version 1.0.2.160) is vulnerable to a command injection vulnerability within the genie_fix2.cgi component. The flaw exists because the wan_gateway parameter fails to properly neutralize or filter special characters used in operating system commands. A remote attacker can exploi...

PT-2024-8361 · NetGear · Netgear Xr300 +3

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Netgear XR300 version 1.0.3.78 Netgear R7000P version 1.3.3.154 Netgear R6400 v2 version 1.0.4.128 Description: The issue is related to a stack overflow in the pptp.cgi script of Netgear routers, specifically...

CVE-2024-52025

Netgear routers, including the XR300 (v1.0.3.78) , R7000P (v1.3.3.154) , and R6400 v2 (v1.0.4.128) , are vulnerable to a stack overflow in the geniepppoe.cgi component. The root cause is the copying of buffers without validating the input data size during the processing of the pppoe_localip param...

CVE-2024-52015

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptpuserip parameter at bswpptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50999

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at password.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...