14696 matches found
CVE-2023-38924
Netgear DGN3500 (firmware 1.1.00.37) is affected by a buffer overflow in the setup.cgi http_password parameter. Multiple sources concur that improper validation of the input length can allow a remote attacker to leverage the overflow, potentially enabling arbitrary code execution or denial of ser...
CVE-2023-39550
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the checkauth function...
NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...
NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within th...
NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of NETGEAR ProSAFE Network Management System. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MyHandlerInterceptor class. The issue results from improper...
NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within th...
NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within th...
NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within th...
NETGEAR RAX50 Update Code Execution
The vulnerability of the update function in NETGEAR RAX50 integrated software lies in errors in the certificate validation process. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted CURL POST request...
NETGEAR RAX30 system() Code Execution
The vulnerability of the system function in NETGEAR RAX30 microprogramming devices stems from insufficient validation of input data during the processing of port discovery requests via UPnP. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Netgear R6250 Buffer Overflow
The vulnerability in the embedded software of Netgear R6250 routers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to trigger buffer overflows remotely...
NETGEAR RAX30 UPnP Command Injection Vulnerability
The NETGEAR RAX30 is a wireless router from NETGEAR. The NETGEAR RAX30 suffers from a command injection vulnerability that stems from a command injection vulnerability when processing UPnP port mapping requests, which can be exploited by an attacker to execute arbitrary commands...
PT-2023-4222 · NetGear · Netgear Wnr2000V2 +2
Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 Netgear XWN5001 version 0.4.1.1 Netgear XAVN2001v2 version 0.4.0.7 Description: The issue is related to buffer overflows in the update auth function, which can be exploited via the http passwd and http...
NETGEAR Multiple Routers curl_post Improper Certificate Validation Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the update functionality, which operates...
NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of UPnP port mapping requests. The issue results from the...
NETGEAR RAX30 Router Code Execution
The vulnerability of the cmsCliauthenticate function in NETGEAR RAX30 router microprogramming devices is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
NETGEAR RAX30 Router Use Encrypted Login Full Access
The vulnerability of NETGEAR RAX30 router microprogramming software lies in the use of strictly encrypted login credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the system...
NETGEAR RAX30 Router Symbolic Link Disclosure
The vulnerability of NETGEAR RAX30 router microprogramming software is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to disclose confidential information...
NETGEAR R6250 Buffer Overflow Vulnerability
The NETGEAR R6250 is a wireless router from NETGEAR. The NETGEAR R6250 version 1.0.4.48 suffers from a buffer overflow vulnerability that originates from an application boundary error when handling untrusted input. A remote attacker could exploit the vulnerability to execute arbitrary code on the...
