Lucene search
+L

12213 matches found

Richard Bejtlich's blog
Richard Bejtlich's blog
added 2022/08/10 1:30 p.m.21 views

The Humble Hub

Over the weekend I organized some old computing equipment. I found this beauty in one of my boxes. It's a Netgear EN104TP hub. I've mentioned this device before, in this blog and my books. This sort of device was the last of the true hubs. In an age where cables seem reserved for data centers or...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/08/01 12:0 a.m.9 views

PT-2022-4902 · NetGear · Netgear Nighthawk Ac1900 Smart Wifi Dual Band Gigabit Router

Name of the Vulnerable Software and Affected Versions: Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router version R7000-V1.0.11.134 10.2.119 Description: The issue is related to a buffer overflow vulnerability caused by the strncpy function in the wl binary of the firmware. This...

7.8CVSS7.6AI score0.00513EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2022/08/01 12:0 a.m.8 views

PT-2022-4913 · NetGear · Netgear Nighthawk Ac1900 Smart Wifi Dual Band Gigabit Router R7000

Name of the Vulnerable Software and Affected Versions: Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000 version 1.0.11.134 10.2.119 Description: The issue is related to a buffer overflow vulnerability caused by the strncat function in the firmware of the Netgear Nighthawk AC1900...

10CVSS9.3AI score0.01018EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2022/07/12 12:0 a.m.16 views

NETGEAR Wireless-N Router Web Detection

Binary data netgearwirelessnrouterwebdetect.nbin...

7.3AI score
SaveExploits0References5
Schneier on Security
Schneier on Security
added 2022/06/30 8:4 p.m.14 views

ZuoRAT Malware Is Targeting Routers

Wired is reporting on a new remote-access Trojan that is able to infect at least eighty different targets: So far, researchers from Lumen Technologies Black Lotus Labs say theyve identified at least 80 targets infected by the stealthy malware, including routers made by Cisco, Netgear, Asus, and...

0.4AI score
SaveExploits0
CNVD
CNVD
added 2022/06/21 12:0 a.m.128 views

NETGEAR WNAP320 Access Control Error Vulnerability

The NETGEAR WNAP320 is a wireless access point AP from NETGEAR. An access control error vulnerability exists in the NETGEAR WNAP320 version v2.0.3, which stems from incorrect access control in /recreate.php, which can be exploited by an attacker to obtain a user's cookie...

5.3CVSS5.1AI score0.01253EPSS
SaveExploits1References1
Check Point Advisories
Check Point Advisories
added 2022/06/20 12:0 a.m.30 views

Netgear Routers Buffer Overflow (CVE-2017-6862)

A buffer overflow vulnerability exists in Netgear Routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

7.5CVSS7.6AI score0.42696EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/06/17 8:15 p.m.3 views

CVE-2022-31876

netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...

5.3CVSS5.3AI score0.01253EPSS
SaveExploits1References3
OSV
OSV
added 2022/06/17 8:15 p.m.9 views

CVE-2022-31876

netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...

5.3CVSS5.8AI score0.01253EPSS
SaveExploits1References2
NVD
NVD
added 2022/06/17 8:15 p.m.36 views

CVE-2022-31876

netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...

5.3CVSS0.01253EPSS
SaveExploits1References2
Prion
Prion
added 2022/06/17 8:15 p.m.27 views

Improper access control

netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...

5CVSS5.3AI score0.01253EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2022/06/17 7:15 p.m.74 views

CVE-2022-31876

Netgear WNAP320 router (firmware V2.0.3) is affected by an Incorrect Access Control vulnerability in /recreate.php that can leak user cookies. Root cause: insufficient access control on that endpoint. Impact: partial confidentiality (cookies exposed); CVSS ~5.0–5.3 (Network, Low complexity, no au...

5.3CVSS5.2AI score0.01253EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/06/17 7:15 p.m.35 views

CVE-2022-31876

netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...

5.6AI score0.01253EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/17 12:0 a.m.8 views

NETGEAR WNAP320 安全漏洞

The NETGEAR WNAP320 is a wireless access point AP from NETGEAR. An access control error vulnerability exists in the NETGEAR WNAP320 version v2.0.3, which stems from incorrect access control in /recreate.php, which can be exploited by an attacker to obtain a user's cookie...

5.3CVSS5.6AI score0.01253EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/06/17 12:0 a.m.7 views

PT-2022-20967 · NetGear · Netgear Wnap320

Name of the Vulnerable Software and Affected Versions: Netgear WNAP320 router version WNAP320 V2.0.3 firmware Description: The issue is related to Incorrect Access Control, which can be exploited via the /recreate.php endpoint, potentially leaking all users' cookies. Recommendations: For Netgear...

5.3CVSS5.1AI score0.01253EPSS
SaveExploits1References5
CISA KEV Catalog
CISA KEV Catalog
added 2022/06/08 12:0 a.m.49 views

NETGEAR Multiple Devices Buffer Overflow Vulnerability

Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution...

9.8CVSS4.5AI score0.42696EPSS
SaveIn wildExploits0
VulnCheck KEV
VulnCheck KEV
added 2022/06/07 12:0 a.m.7 views

VulnCheck KEV: CVE-2017-6862

Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution...

9.8CVSS7.8AI score0.42696EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/05/31 12:0 a.m.10 views

PT-2022-4903 · NetGear · Netgear N300

Name of the Vulnerable Software and Affected Versions: Netgear N300 wireless router version 1.0.0.70 Description: The issue is related to a stack overflow via strcpy in uhttpd, which can lead to a buffer overflow when processing configuration files in the uHTTPd web server. This can potentially...

9.8CVSS9.6AI score0.01018EPSS
SaveExploits0References8
OSV
OSV
added 2022/05/13 1:15 p.m.8 views

CVE-2022-29383

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi...

9.8CVSS7.3AI score0.48537EPSS
SaveExploits1References2
NVD
NVD
added 2022/05/13 1:15 p.m.28 views

CVE-2022-29383

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi...

9.8CVSS0.48537EPSS
SaveExploits1References2
Rows per page
Query Builder