NETGEAR RAX30 soap_serverd Authentication Bypass Code Execution

The vulnerability of the binary file soapserverd in NETGEAR RAX30 router microprogramming systems arises due to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to bypass authentication procedures and execute arbitrary code...

NETGEAR RAX30 Router Buffer Overflow

The vulnerability of NETGEAR RAX30 router microprogramming software lies in the lack of proper verification of the length of user data before it is copied into the fixed-length stack buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the root context using...

NETGEAR RAX30 Configuration Disclosure

The vulnerability of NETGEAR RAX30 router microprogramming software’s configuration lies in the unencrypted storage of critical information. Exploiting this vulnerability can allow attackers to disclose protected data and compromise the system...

lighttpd HTTP Server Code Execution

The vulnerability of the HTTP-server configuration of the lighttpd microprogramming system for NETGEAR RAX30 routers arises due to the permission to execute files from unreliable sources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the root context...

Netgear SRX5308 Router XSS

The vulnerability in the web interface of Netgear SRX5308 integrated software routers exists because measures are not taken to protect the structure of the web page when processing the argument smtpServer.fromAddr. Exploiting this vulnerability allows a malicious actor to perform cross-site...

libcms_cli Module Code Execution

The vulnerability of the libcmscli module in NETGEAR RAX30 router microprogramming software is related to the lack of measures for cleaning input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the root context...

NETGEAR RAX30 RAX35 RAX38 RAX40 RAXE300 Code Execution

The vulnerability of the microprogrammed software of NETGEAR’s RAX30, RAX35, RAX38, RAX40, and RAXE300 routers lies in the lack of protection for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted SOAP requests...

NETGEAR RAX30 Router Code Execution

The vulnerability of NETGEAR RAX30 and NETGEAR RAXE300 router microprogramming systems exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the root context...

Netgear Routers' Flaws Expose Users to Malware, Remote Attacks, and Surveillance

As many as five security flaws have been disclosed in Netgear RAX30 routers that could be chained to bypass authentication and achieve remote code execution. "Successful exploits could allow attackers to monitor users' internet activity, hijack internet connections, and redirect traffic to...

Netgear Routers' Flaws Expose Users to Malware, Remote Attacks, and Surveillance

As many as five security flaws have been disclosed in Netgear RAX30 routers that could be chained to bypass authentication and achieve remote code execution. "Successful exploits could allow attackers to monitor users' internet activity, hijack internet connections, and redirect traffic to...

Netgear SRX5308 XSS

The vulnerability in the web interface for managing Netgear SRX5308 microprogramming software routers is related to insufficient protection of the web page structure when processing the USERDBUsers.Password argument. Exploiting this vulnerability allows a malicious actor to perform cross-site...

Netgear SRX5308 Router XSS

The vulnerability in the web interface of Netgear SRX5308 integrated router software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack remotely...

Netgear SRX5308 Router XSS

The vulnerability in the web interface for managing Netgear SRX5308 integrated software routers exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP request using...

Netgear SRX5308 Router XSS

The vulnerability in the web interface for managing Netgear SRX5308 integrated software routers exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP request using...

Netgear SRX5308 Router XSS

The vulnerability in the web interface for managing Netgear SRX5308 integrated software routers exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP request usin...

Netgear SRX5308 Router XSS

The vulnerability in the web interface for managing Netgear SRX5308 integrated software routers exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP request usin...

Netgear SRX5308 Router XSS

The vulnerability of the web interface for managing Netgear SRX5308 integrated software routers exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP request using...

Netgear SRX5308 Resource Leak DoS

The vulnerability of Netgear SRX5308 micro-programmed software routers is related to the improper release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Netgear SRX5308 XSS

The vulnerability in the web interface for managing Netgear SRX5308 microprogramming software routers is related to insufficient protection of the web page structure when processing the Login.userAgent parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripti...

Netgear SRX5308 Router XSS

The vulnerability in the web interface of Netgear’s SRX5308 router software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP request...