12213 matches found
CVE-2023-50089
A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...
CVE-2023-50089
A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...
Command injection
A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...
CVE-2023-50089
CVE-2023-50089 affects NETGEAR WNR2000v4, specifically version 1.0.0.70. The issue is a command injection that arises when using HTTP for SOAP authentication, allowing command execution after successful authentication. The CVSS vector in the record indicates a network -facing, high/critical impac...
NETGEAR WNR2000 安全漏洞
The NETGEAR WNR2000 is a wireless router from NETGEAR. A command execution vulnerability exists in NETGEAR WNR2000 v4 version 1.0.0.70, which stems from an application failing to properly filter constructed command special characters, commands, and more. An attacker could exploit this vulnerabili...
CVE-2023-50089
A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...
CVE-2023-50089
A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...
NETGEAR RBR750 Buffer Overflow Vulnerability
The NETGEAR RBR750 is a home WiFi system from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR RBR750 prior to version V7.2.6.21, which originates from a boundary error in /usr/sbin/httpd when handling untrusted input. A remote attacker could exploit this vulnerability to execute...
The vulnerability of the strlcpy() function in Netgear Orbi RBR750 router software allows a hacker to cause a service failure.
The vulnerability of the strlcpy function in Netgear Orbi RBR750 router software lies in the fact that the operation escapes the buffer boundaries when processing the lengths of the X-Forwarded-For and X-Forwarded-Proto headers. Exploiting this vulnerability allows a remote attacker to cause...
CVE-2023-49007
In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd...
CVE-2023-49007
In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd...
Stack overflow
In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd...
NETGEAR RBR750 安全漏洞
The NETGEAR RBR750 is a home WiFi system from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR RBR750 prior to version V7.2.6.21, which originates from a boundary error in /usr/sbin/httpd when handling untrusted input. A remote attacker could exploit this vulnerability to execute...
CVE-2023-49007
In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd...
CVE-2023-49007
CVE-2023-49007 affects Netgear Orbi RBR750 prior to firmware 7.2.6.21. A stack-based buffer overflow in /usr/sbin/httpd is caused by boundary handling of inputs; an attacker could exploit this remotely (network vector) to cause crash or arbitrary code execution. Affected versions require upgradin...
NETGEAR Access Control Error Vulnerability (CNVD-2023-9749744)
NETGEAR is a router from the American company NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. An access control error vulnerability exists in the NETGEAR ProSAFE Network Management System v1.7.0.26 and earlier versions, which can be exploited ...
NETGEAR ProSAFE Network Management System Access Control Error Vulnerability
NETGEAR ProSAFE Network Management System is a network management system from NETGEAR for centralized management, monitoring, and configuration of network devices. An Access Control Error vulnerability exists in the NETGEAR ProSAFE Network Management System that originates from an unauthenticated...
PT-2023-7869 · NetGear · Netgear Wnr2000V4
Name of the Vulnerable Software and Affected Versions: NETGEAR WNR2000v4 version 1.0.0.70 Description: A Command Injection issue exists when using HTTP for SOAP authentication, allowing command execution after successful authentication. This can be exploited by sending specially crafted HTTP...
CVE-2023-49693
NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol JDWP listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code...
CVE-2023-49694
A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYSTEM...