12213 matches found
PT-2023-4499 · NetGear · Netgear Rax30
Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this issue. The...
PT-2023-4500 · NetGear · Netgear Rax30
Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: The issue is related to a stack-based buffer overflow in the telnet CLI service of NETGEAR RAX30 routers, allowing network-adjacent attackers to execute arbitrary code on affected...
NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DHCP server. The issue results from the lack of proper validation of...
PT-2023-4498 · NetGear · Netgear Rax30
Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. The specific flaw exists within the UPnP service, resulting...
NETGEAR DGN3500 Buffer Overflow Vulnerability
The NETGEAR DGN3500 is a wireless router from NETGEAR. The NETGEAR DGN3500 version 1.1.00.37 suffers from a buffer overflow vulnerability, which originates from the httppassword parameter in setup.cgi failing to properly validate the length of the input data, which can be exploited by a remote...
NETGEAR DG834Gv5 Buffer Overflow Vulnerability
The NETGEAR DG834Gv5 is a wireless ADSL firewall modem from NETGEAR. The NETGEAR DG834Gv5 version 1.6.01.34 suffers from a buffer overflow vulnerability that originates from a failure to properly validate the length of the input data in the wlassid and wlatempssid parameters via bswssid.cgi, whic...
NETGEAR XR300 Buffer Overflow Vulnerability
The NETGEAR XR300 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR XR300 v1.0.3.78, which originates from a failure to properly validate the length of the input data via the wlassid and wlgssid parameters of genieapwifichange.cgi, which can be exploited by a...
Schneider Electric GP-Pro EX is a set of HMI interface editing and logic programming software from Schneider Electric (France). A buffer overflow vulnerability exists in Schneider Electric Pro-face GP-Pro EX. The vulnerability stems from improper manipulation of restrictions within memory buffer ranges and can be exploited by an attacker to cause memory corruption.
The NETGEAR R7100LG is a router from the American company NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. The NETGEAR R7100LG version 1.0.0.78 suffers from a command injection vulnerability that stems from the password parameter in...
NETGEAR EX6200 Buffer Overflow Vulnerability
NETGEAR EX6200 is a wireless network signal extender from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR EX6200 v1.0.3.94, which originates from the wlatempssid parameter in acosNvramConfigset that fails to correctly validate the length and size of the input data, and can be...
NETGEAR R6900P Buffer Overflow Vulnerability
The NETGEAR R6900P is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR R6900P v1.3.3.154, which originates from a failure to properly validate the length of input data via the wlassid and wlgssid parameters of iaapsetting.cgi, and can be exploited by a remote...
The vulnerability of the upgrade_handler() functions in the microprogramming software for Netgear WG302v2 and Netgear WAG302v2 allows a hacker to execute arbitrary commands.
The vulnerability of the upgradehandler function in Netgear WG302v2 and Netgear WAG302v2 routers lies in the lack of measures to neutralize special elements during the processing of parameters firmwareRestore and firmwareServerip. Exploiting this vulnerability allows a remote attacker to execute...
PT-2023-7114 · NetGear · Netgear Prosafe Network Management System
Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: This issue allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Authentication is require...
PT-2023-7060 · NetGear · Netgear Prosafe Network Management System
Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. The specific flaw exis...
The vulnerabilities of the `update_auth()` and `check_auth()` functions in Netgear Wi-Fi router software models such as JWNR2000v2, Netgear XWN5001, and Netgear XAVN2001v2 allow a hacker to execute arbitrary code.
The vulnerabilities of the updateauth and checkauth functions in Netgear Wi-Fi routers such as JWNR2000v2, Netgear XWN5001, and Netgear XAVN2001v2 involve the execution of operations outside of the buffer in memory. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary co...
PT-2023-7963 · NetGear · Netgear Prosafe Network Management System
Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: The issue is related to the saveNodeLabel method in the NETGEAR ProSAFE Network Management System, which lacks proper validation of user-supplied data. Thi...
ChurchCRM SQL注入漏洞
The NETGEAR R7100LG is a router from the American company NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. The NETGEAR R7100LG version 1.0.0.78 suffers from a command injection vulnerability that stems from the password parameter in...
CVE-2023-39550
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the checkauth function...
CVE-2023-39550
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the checkauth function...
CVE-2023-39550
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the checkauth function...