CVE-2021-34236

Buffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to execute arbitrary code or cause a denial-of-service by sending a crafted POST to '/bdgeniecreateaccount.cgi' with a sufficiently long parameter 'registercountry'...

CVE-2021-34236

Buffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to execute arbitrary code or cause a denial-of-service by sending a crafted POST to '/bdgeniecreateaccount.cgi' with a sufficiently long parameter 'registercountry'...

Buffer overflow

Buffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to execute arbitrary code or cause a denial-of-service by sending a crafted POST to '/bdgeniecreateaccount.cgi' with a sufficiently long parameter 'registercountry'...

NETGEAR R6200v2 操作系统命令注入漏洞

The NETGEAR R6200v2 is a dual-band Gigabit wireless router from NETGEAR that complies with the IEEE 802.11ac standard. The NETGEAR R6200v2 suffers from a command injection vulnerability that originates from allowing a remotely authenticated attacker to modify values in vulnerable parameters. No...

PT-2022-20002 · NetGear · Netgear D6200

Name of the Vulnerable Software and Affected Versions: Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 Description: A command injection issue was found in the /sbin/acos service binary, allowing remote authenticated attackers to modify values in a vulnerable parameter. This could potentially...

NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability

Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server...

CVE-2021-34236

Buffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to execute arbitrary code or cause a denial-of-service by sending a crafted POST to '/bdgeniecreateaccount.cgi' with a sufficiently long parameter 'registercountry'...

CVE-2021-34236

Netgear R8000 router (firmware 1.0.4.56) is affected by CVE-2021-34236 due to a buffer overflow in the /bd_genie_create_account.cgi endpoint triggered by a sufficiently long register_country parameter. This can allow remote attackers to execute arbitrary code or cause a denial of service. Mitigat...

CVE-2022-30078

NETGEAR R6200V2 firmware versions through R6200v2-V1.0.3.1210.1.11 and R6300V2 firmware versions through R6300v2-V1.0.4.5210.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6fix.cgi ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, or...

CVE-2022-30078

NETGEAR R6200V2 firmware versions through R6200v2-V1.0.3.1210.1.11 and R6300V2 firmware versions through R6300v2-V1.0.4.5210.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6fix.cgi ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, or...

CVE-2022-30078

NETGEAR R6200V2 firmware versions through R6200v2-V1.0.3.1210.1.11 and R6300V2 firmware versions through R6300v2-V1.0.4.5210.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6fix.cgi ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, or...

Design/Logic Flaw

NETGEAR R6200V2 firmware versions through R6200v2-V1.0.3.1210.1.11 and R6300V2 firmware versions through R6300v2-V1.0.4.5210.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6fix.cgi ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, or...

CVE-2022-30078

MODE C: Affected NETGEAR R6200 V2 and R6300 V2 devices are exposed to a command-injection vulnerability in ipv6_fix.cgi where shell metacharacters in ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, or ipv6_lan_length enable remote authenticated execution of arbitrary commands. Affected firmwar...

CVE-2022-30078

NETGEAR R6200V2 firmware versions through R6200v2-V1.0.3.1210.1.11 and R6300V2 firmware versions through R6300v2-V1.0.4.5210.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6fix.cgi ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, or...

PT-2022-20001 · NetGear · Netgear R6300V2 +1

Name of the Vulnerable Software and Affected Versions: NETGEAR R6200 V2 versions through R6200v2-V1.0.3.12 10.1.11 NETGEAR R6300 V2 versions through R6300v2-V1.0.4.52 10.0.93 Description: The issue allows remote authenticated attackers to execute arbitrary commands via shell metacharacters in the...

PT-2022-10328 · NetGear · Netgear R8000 Router

Name of the Vulnerable Software and Affected Versions: Netgear R8000 Router version 1.0.4.56 Description: A buffer overflow issue allows remote attackers to execute arbitrary code or cause a denial-of-service. This is achieved by sending a crafted POST to "/bd genie create account.cgi" with a...

NETGEAR R6300v2和NETGEAR R6200v2 操作系统命令注入漏洞

The NETGEAR R6300v2 and NETGEAR R6200v2 are both wireless routers from NETGEAR. An operating system command injection vulnerability exists in the NETGEAR R6200v2 and R6300v2 routers, which can be exploited to execute arbitrary commands via shell metacharacters or the ipv6lanlength parameter in...

NETGEAR R8000 安全漏洞

NETGEAR R8000 is a wireless router from NETGEAR. A security vulnerability exists in NETGEAR R8000 v1.0.4.56, which is caused by a buffer overflow, and can be exploited by an attacker to execute arbitrary code or cause a denial of service by sending a crafted POST to bdgeniecreateaccount.cgi with ...

VulnCheck KEV: CVE-2021-20167

Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. The readycloud cgi application is vulnerable to command injection in the name parameter...

VulnCheck KEV: CVE-2021-20166

Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the applicaiton...