NETGEAR RAX30 getblockschedule Buffer Overflow Vulnerability

NETGEAR RAX30 is a WiFi 6 router from NETGEAR that supports dual-band 2.4GHz and 5GHz with a maximum transmission rate of 2400Mbps, a three external antenna design, and a 1.5GHz triple-core processor that allows you to connect up to 20 devices simultaneously. The NETGEAR RAX30 suffers from a buff...

CVE-2023-48725

A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially crafted HTTP request can lead to code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2023-48725

A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially crafted HTTP request can lead to code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

Stack overflow

A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially crafted HTTP request can lead to code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2023-48725

A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially crafted HTTP request can lead to code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2023-48725

A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially crafted HTTP request can lead to code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2023-48725

Netgear RAX30 devices running 1.0.11.96 or 1.0.7.78 are affected by CVE-2023-48725. A stack-based buffer overflow in the JSON parsing getblockschedule() function can be triggered via an authenticated HTTP request. The TALOS report shows an unbounded strcpy to a stack buffer when the payload lacks...

Netgear RAX30 JSON Parsing getblockschedule() stack-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2023-1887 Netgear RAX30 JSON Parsing getblockschedule stack-based buffer overflow vulnerability March 7, 2024 CVE Number CVE-2023-48725 SUMMARY A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule functionality of Netgear RAX30...

NETGEAR RAX30 安全漏洞

NETGEAR RAX30 is a WiFi 6 router from NETGEAR that supports dual-band 2.4GHz and 5GHz with a maximum transmission rate of 2400Mbps, a three external antenna design, and a 1.5GHz triple-core processor that allows you to connect up to 20 devices simultaneously. The NETGEAR RAX30 suffers from a buff...

PT-2024-5191

Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. The specific flaw exis...

PT-2024-7220 · NetGear · Netgear Xr1000

Name of the Vulnerable Software and Affected Versions: Netgear XR1000 version 1.0.0.64 Description: The issue is related to a lack of input sanitization in the usb remote smb conf.cgi script of the NETGEAR XR1000 Wi-Fi router's firmware. This can be exploited by a remote attacker to execute...

PT-2024-7141 · NetGear · Netgear Ex6120

Name of the Vulnerable Software and Affected Versions: Netgear EX6120 version 1.0.0.68 Description: The issue is related to a Command Injection vulnerability in the genie fix2.cgi script via the wan dns1 pri parameter. This vulnerability may allow a remote attacker to execute arbitrary commands...

PT-2024-7144 · NetGear · Netgear Ex3700 +2

Name of the Vulnerable Software and Affected Versions: Netgear EX6120 version 1.0.0.68 Netgear EX6100 version 1.0.2.28 Netgear EX3700 version 1.0.0.96 Description: The issue is related to a command injection flaw in the operating mode.cgi script of Netgear EX Series Wi-Fi Extenders. This flaw is...

PT-2024-7222 · NetGear · Netgear Ex3700

Name of the Vulnerable Software and Affected Versions: Netgear EX3700 versions prior to 1.0.0.98 Description: The issue is related to a lack of input sanitization in the operating mode.cgi script of the NETGEAR EX3700 router's firmware. This can be exploited by a remote attacker to execute...

PT-2024-9318 · NetGear · Netgear R7000

Name of the Vulnerable Software and Affected Versions: Netgear R7000 version 1.0.11.136 Description: The issue is related to a Command Injection vulnerability in the RMT invite.cgi script, specifically via the device name2 parameter. This vulnerability can be exploited by a remote attacker to...

Netgear R7000 debuginfo.htm Information Disclosure Vulnerability

The Netgear R7000 is a Netgear dual-band Gigabit wireless router. A security vulnerability exists in Netgear R7000 debuginfo.htm, which can be exploited by a remote attacker to submit a special request that can obtain sensitive information...

CVE-2024-1431

A vulnerability was found in Netgear R7000 1.0.11.13610.2.120 and classified as problematic. Affected by this issue is some unknown functionality of the file /debuginfo.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed ...

CVE-2024-1431

A vulnerability was found in Netgear R7000 1.0.11.13610.2.120 and classified as problematic. Affected by this issue is some unknown functionality of the file /debuginfo.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed ...

Information disclosure

A vulnerability was found in Netgear R7000 1.0.11.13610.2.120 and classified as problematic. Affected by this issue is some unknown functionality of the file /debuginfo.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed ...

CVE-2024-1431 Netgear R7000 Web Management Interface debuginfo.htm information disclosure

A vulnerability was found in Netgear R7000 1.0.11.13610.2.120 and classified as problematic. Affected by this issue is some unknown functionality of the file /debuginfo.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed ...