Lucene search
+L

14694 matches found

CNNVD
CNNVD
•added 2024/04/03 12:00 a.m.•17 views

Netgear R6850 安全漏洞

The Netgear R6850 is a wireless router from NETGEAR. The Netgear R6850 suffers from an information disclosure vulnerability that originates from insufficient protection of sensitive information in the BRStop.html component, which can be exploited by an attacker to obtain sensitive information...

7.5CVSS6.1AI score0.13848EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/03 12:00 a.m.•7 views

CVE-2024-30572: Improper Neutralization of Special Elements used in a Command

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntpserver parameter...

8CVSS5.9AI score0.01484EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/04/03 12:00 a.m.•22 views

CVE-2024-30572

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntpserver parameter...

8AI score0.01484EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/03 12:00 a.m.•23 views

Netgear R6850 安全漏洞

The NETGEAR R6850 is a wireless router from NETGEAR. The NETGEAR R6850 suffers from a command injection vulnerability that stems from the ntpserver parameter failing to properly filter constructed command special characters, commands, and so on. An attacker can exploit this vulnerability to cause...

8CVSS7.8AI score0.01484EPSS
SaveExploits1References3
CVE
CVE
•added 2024/04/03 12:00 a.m.•89 views

CVE-2024-30571

The Netgear R6850 wireless router, specifically version v1.1.0.88 , contains an information disclosure vulnerability. The root cause is the insufficient protection of sensitive information within the BRS_top.html component. This flaw allows an unauthenticated attacker to obtain sensitive informat...

7.5CVSS6.4AI score0.13848EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2024/04/03 12:00 a.m.•35 views

CVE-2024-30569

An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

6.4AI score0.01907EPSS
SaveExploits2References2
Talos Blog
Talos Blog
•added 2024/03/20 4:00 p.m.•58 views

Netgear wireless router open to code execution after buffer overflow vulnerability

Cisco Talos Vulnerability Research team recently disclosed three vulnerabilities across a range of products, including one that could lead to remote code execution in a popular Netgear wireless router designed for home networks. There is also a newly disclosed vulnerability in a graphics driver f...

5.8CVSS8.9AI score0.19356EPSS
SaveExploits1
CNVD
CNVD
•added 2024/03/15 12:00 a.m.•30 views

NETGEAR DGND4000 Elevation of Privilege Vulnerability

The NETGEAR DGND4000 is a wireless router , with modem capabilities. An elevation of privilege vulnerability exists in the ETGEAR DGND4000 that originates from elevating privileges to the /setup.cgi component via the nextfile parameter. No details of the vulnerability are provided at this time...

8.8CVSS6.4AI score0.0032EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/14 10:15 p.m.•23 views

CVE-2023-50677

An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...

8.8CVSS6.8AI score0.0032EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/03/14 10:15 p.m.•15 views

CVE-2023-50677

An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...

8.8CVSS5.8AI score0.0032EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/03/14 10:15 p.m.•5 views

CVE-2023-50677

An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...

8.8CVSS5.8AI score0.0032EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/03/14 12:00 a.m.•37 views

CVE-2023-50677

An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...

7.2AI score0.0032EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/14 12:00 a.m.•7 views

CVE-2023-50677: Improper Privilege Management

An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...

8.8CVSS5.9AI score0.0032EPSS
SaveExploits0References2
CVE
CVE
•added 2024/03/14 12:00 a.m.•87 views

CVE-2023-50677

The NETGEAR-DGND4000 wireless router (version 1.1.00.15_1.00.15 ) contains an elevation of privilege vulnerability due to inadequate access control within its built-in software. A remote attacker can exploit the next_file parameter to gain elevated privileges within the /setup.cgi component. To m...

8.8CVSS7.1AI score0.0032EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/03/14 12:00 a.m.•16 views

NETGEAR DGND4000 安全漏洞

The NETGEAR DGND4000 is a wireless router , with modem capabilities. An elevation of privilege vulnerability exists in the ETGEAR DGND4000 that originates from elevating privileges to the /setup.cgi component via the nextfile parameter. No details of the vulnerability are provided at this time...

8.8CVSS7.1AI score0.0032EPSS
SaveExploits0References2
CNVD
CNVD
•added 2024/03/14 12:00 a.m.•22 views

NETGEAR CBR40/CBK40/CBM43 debuginfo.htm component information disclosure vulnerability

The NETGEAR CBR40/CBK40/CBM43 are all routers from NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. An information disclosure vulnerability exists in the NETGEAR CBR40/CBK40/CBM43, which stems from insufficient protection of sensitive informati...

5.4CVSS5.7AI score0.00428EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/03/14 12:00 a.m.•34 views

CVE-2023-50677

An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...

7.1AI score0.0032EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/03/14 12:00 a.m.•20 views

NETGEAR CBR40/CBK40/CBM43 currentsetting.htm component information disclosure vulnerability

The NETGEAR CBR40/CBK40/CBM43 are all routers from NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. An information disclosure vulnerability exists in the NETGEAR CBR40/CBK40/CBM43, which stems from insufficient protection of sensitive informati...

7.5CVSS5.7AI score0.00635EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/03/14 12:00 a.m.•22 views

PT-2024-2649 · NetGear · Netgear Dgnd4000

Name of the Vulnerable Software and Affected Versions: NETGEAR-DGND4000 version 1.1.00.15 1.00.15 Description: The issue allows a remote attacker to escalate privileges via the next file parameter to the "/setup.cgi" component. This is related to inadequate access control in the NETGEAR DGND4000...

8.8CVSS7.6AI score0.0032EPSS
SaveExploits0References8
NVD
NVD
•added 2024/03/12 5:15 p.m.•36 views

CVE-2024-28339

An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required...

5.4CVSS6.2AI score0.00428EPSS
SaveExploits1References2
Rows per page
Query Builder