Lucene search
+L

14694 matches found

Cvelist
Cvelist
•added 2024/04/03 12:00 a.m.•38 views

CVE-2024-30570

An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

6.4AI score0.01221EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2024/04/03 12:00 a.m.•13 views

CVE-2024-30569

An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

6.5AI score0.01907EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2024/04/03 12:00 a.m.•34 views

CVE-2024-30568

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter...

7.8AI score0.46918EPSS
SaveExploits1References2
CVE
CVE
•added 2024/04/03 12:00 a.m.•115 views

CVE-2024-30570

The Netgear R6850 wireless router, specifically running firmware version v1.1.0.88 , contains an information disclosure vulnerability within the debuginfo.htm page. This hidden interface lacks authentication, allowing unauthenticated attackers to access sensitive system details, including the pro...

5.3CVSS6.4AI score0.01221EPSS
SaveExploits2References2Affected Software1
CVE
CVE
•added 2024/04/03 12:00 a.m.•119 views

CVE-2024-30569

The Netgear R6850 wireless router (firmware version v1.1.0.88 ) contains an information disclosure vulnerability. The root cause is an unprotected hidden interface at the currentsetting.htm page, which lacks authentication. This allows unauthenticated attackers to obtain sensitive system informat...

7.5CVSS6.4AI score0.01907EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/04/03 12:00 a.m.•7 views

PT-2024-23500

Name of the Vulnerable Software and Affected Versions Netgear R6850 version 1.1.0.88 Description A command injection issue was discovered, which can be exploited via the ntp server parameter. Recommendations For Netgear R6850 version 1.1.0.88, avoid using the ntp server parameter until a fix is...

8CVSS5.8AI score0.01484EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2024/04/03 12:00 a.m.•36 views

CVE-2024-30572

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntpserver parameter...

7.8AI score0.01484EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/04/03 12:00 a.m.•21 views

CVE-2024-30570

An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

6.5AI score0.01221EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2024/04/03 12:00 a.m.•21 views

PT-2024-23496 · NetGear · Netgear R6850

Name of the Vulnerable Software and Affected Versions: Netgear R6850 version 1.1.0.88 Description: The issue is an information leak in the currentsetting.htm file, allowing attackers to obtain sensitive information without requiring any authentication. Recommendations: For Netgear R6850 version...

7.5CVSS6.7AI score0.01907EPSS
SaveExploits2References6
Vulnrichment
Vulnrichment
•added 2024/04/03 12:00 a.m.•12 views

CVE-2024-30568

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter...

8AI score0.46918EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/04/03 12:00 a.m.•16 views

CVE-2024-30571

An information leak in the BRStop.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

6.5AI score0.13848EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/03 12:00 a.m.•8 views

CVE-2024-30571: Exposure of Sensitive Information to an Unauthorized Actor

An information leak in the BRStop.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

7.5CVSS5.6AI score0.13848EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/03 12:00 a.m.•10 views

CVE-2024-30569: Exposure of Sensitive Information to an Unauthorized Actor

An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

7.5CVSS5.6AI score0.01907EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2024/04/03 12:00 a.m.•18 views

Netgear R6850 安全漏洞

The Netgear R6850 is a wireless router from NETGEAR. The Netgear R6850 suffers from an information disclosure vulnerability that originates from insufficient protection of sensitive information in currentsetting.htm, which can be exploited by an attacker to obtain sensitive information...

7.5CVSS6.1AI score0.01907EPSS
SaveExploits2References3
CVE
CVE
•added 2024/04/03 12:00 a.m.•90 views

CVE-2024-30568

The Netgear R6850 wireless router, specifically firmware version 1.1.0.88 , is vulnerable to a command injection vulnerability in the ping_test functionality. The root cause is the c4-IPAddr parameter failing to properly filter special characters and commands. An unauthenticated attacker can expl...

9.8CVSS7.9AI score0.46918EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2024/04/03 12:00 a.m.•89 views

CVE-2024-30571

The Netgear R6850 wireless router, specifically version v1.1.0.88 , contains an information disclosure vulnerability. The root cause is the insufficient protection of sensitive information within the BRS_top.html component. This flaw allows an unauthenticated attacker to obtain sensitive informat...

7.5CVSS6.4AI score0.13848EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2024/04/03 12:00 a.m.•35 views

CVE-2024-30569

An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

6.4AI score0.01907EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/03 12:00 a.m.•6 views

CVE-2024-30568: Improper Control of Generation of Code

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter...

9.8CVSS5.9AI score0.46918EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/03 12:00 a.m.•6 views

PT-2024-23495

Name of the Vulnerable Software and Affected Versions Netgear R6850 version 1.1.0.88 Description A command injection issue was discovered, which can be exploited via the c4-IPAddr parameter. Recommendations For Netgear R6850 version 1.1.0.88, avoid using the c4-IPAddr parameter in the affected AP...

9.8CVSS5.8AI score0.46918EPSS
SaveExploits1References8
CVE
CVE
•added 2024/04/03 12:00 a.m.•92 views

CVE-2024-30572

The Netgear R6850 wireless router, specifically version 1.1.0.88 , contains a command injection vulnerability (CWE-77) rooted in the ntp_server parameter. The flaw occurs because the parameter fails to properly filter constructed command special characters, allowing an attacker to execute arbitra...

8CVSS7.9AI score0.01484EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder