CVE-2024-30571

An information leak in the BRStop.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

PT-2024-23498 · NetGear · Netgear R6850

Name of the Vulnerable Software and Affected Versions: Netgear R6850 version 1.1.0.88 Description: The issue is related to an information leak in the debuginfo.htm file, which allows attackers to obtain sensitive information without requiring any authentication. Recommendations: For Netgear R6850...

CVE-2024-30572

CVE-2024-30572 affects Netgear R6850 firmware 1.1.0.88, where the ntp_server parameter is vulnerable to command injection, enabling arbitrary command execution. Root cause: inadequate validation/filtering of input fed to ntp_server. Impact per the CVSSv3.1 vector (AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/...

CVE-2024-30570

An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

CVE-2024-30571

An information leak in the BRStop.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

CVE-2024-30569

Affected product: Netgear R6850 router, version 1.1.0.88. Vulnerability: Information disclosure in the currentsetting.htm page, exposing sensitive system information without authentication. Root cause (per sources): Hidden interface in currentsetting.htm that is not protected by authentication; u...

CVE-2024-30569

An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

NETGEAR R6850 安全漏洞

The NETGEAR R6850 is a wireless router from NETGEAR. The NETGEAR R6850 suffers from a command injection vulnerability that stems from the c4-IPAddr parameter failing to properly filter constructed command special characters, commands, and so on. An attacker can exploit this vulnerability to cause...

CVE-2024-30572

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntpserver parameter...

CVE-2024-30568

Netgear R6850 router, firmware v1.1.0.88, is affected by a command injection vulnerability in the ping_test function triggered via the c4_IPAddr parameter. The issue arises because input is not properly validated/filtered, allowing an unauthenticated attacker to inject arbitrary system commands, ...

CVE-2024-30570

An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

Netgear wireless router open to code execution after buffer overflow vulnerability

Cisco Talos Vulnerability Research team recently disclosed three vulnerabilities across a range of products, including one that could lead to remote code execution in a popular Netgear wireless router designed for home networks. There is also a newly disclosed vulnerability in a graphics driver f...

NETGEAR DGND4000 Elevation of Privilege Vulnerability

The NETGEAR DGND4000 is a wireless router , with modem capabilities. An elevation of privilege vulnerability exists in the ETGEAR DGND4000 that originates from elevating privileges to the /setup.cgi component via the nextfile parameter. No details of the vulnerability are provided at this time...

CVE-2023-50677

An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...

CVE-2023-50677

An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...

CVE-2023-50677

An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...

PT-2024-2649 · NetGear · Netgear Dgnd4000

Name of the Vulnerable Software and Affected Versions: NETGEAR-DGND4000 version 1.1.00.15 1.00.15 Description: The issue allows a remote attacker to escalate privileges via the next file parameter to the "/setup.cgi" component. This is related to inadequate access control in the NETGEAR DGND4000...

CVE-2023-50677

NETGEAR DGND4000 router (firmware v1.1.00.15_1.00.15) is affected by CVE-2023-50677. The issue allows a remote attacker to escalate privileges via the next_file parameter to the /setup.cgi component, reported due to inadequate access control. Exploitation details, impact scope, and patch informat...

CVE-2023-50677

An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...

NETGEAR CBR40/CBK40/CBM43 currentsetting.htm component information disclosure vulnerability

The NETGEAR CBR40/CBK40/CBM43 are all routers from NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. An information disclosure vulnerability exists in the NETGEAR CBR40/CBK40/CBM43, which stems from insufficient protection of sensitive informati...