CVE-2023-1205

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF protections...

CVE-2023-27851

The CVE-2023-27851 issue affects NETGEAR Nighthawk WiFi 6 Router firmware prior to v1.0.10.94, where a file sharing mechanism incorrectly handles permissions, enabling a user with upload rights to execute arbitrary code on the device. The vulnerability is described across multiple sources as a re...

CVE-2023-1205

NETGEAR Nighthawk WiFi 6 Router (prior to v1.0.10.94) is affected by a CSRF vulnerability caused by improperly implemented protections on all endpoints. This allows cross-site requests to be forged without user interaction. The issue is documented in CVE-2023-1205 and corroborated by multiple sou...

CVE-2023-27851

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users with upload permissions to execute arbitrary code on the device...

CVE-2023-27853

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary code on the device...

CVE-2023-27850: Improper Link Resolution Before File Access

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that allows users with access to this feature to access arbitrary files on the device...

CVE-2023-27853: Buffer Copy without Checking Size of Input

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary code on the device...

CVE-2023-27852: Buffer Copy without Checking Size of Input

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms that could allow an attacker to execute arbitrary code on the device...

CVE-2023-27850

The CVE-2023-27850 issue affects NETGEAR Nighthawk WiFi6 Router versions prior to V1.0.10.94. Root cause: insufficient access control in the router’s file-sharing mechanism, enabling users with access to this feature to read arbitrary files on the device. Impact (as described): potential exposure...

CVE-2023-1205

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF protections...

CVE-2023-27852

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms that could allow an attacker to execute arbitrary code on the device...

CVE-2023-27853

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary code on the device...

NETGEAR Nighthawk Cross-Site Request Forgery Vulnerability

The NETGEAR Nighthawk WiFi6 Router is a series of routers from NETGEAR that support WiFi 6 technology and are aimed at users seeking a high-speed Internet experience. The NETGEAR Nighthawk WiFi6 Router suffers from a cross-site request forgery vulnerability that stems from the device not properly...

CVE-2023-27852

CVE-2023-27852 affects NETGEAR Nighthawk WiFi6 Router versions prior to V1.0.10.94. The issue is a buffer overflow in various CGI mechanisms, enabling an attacker to execute arbitrary code on the device. Affected component: CGI handling in the router’s firmware. Root cause: insufficient input siz...

CVE-2023-27850

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that allows users with access to this feature to access arbitrary files on the device...

CVE-2023-1205: Cross-Site Request Forgery (CSRF)

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF protections...

NETGEAR Nighthawk security vulnerabilities

The NETGEAR Nighthawk WiFi6 Router is a series of wireless routers from NETGEAR. The NETGEAR Nighthawk WiFi6 Router suffers from a code execution vulnerability that stems from the fact that the device contains a file sharing mechanism that can be exploited by an attacker to execute arbitrary code...

CVE-2023-27851

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users with upload permissions to execute arbitrary code on the device...

CVE-2023-27851: Undefined Security Weakness

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users with upload permissions to execute arbitrary code on the device...

NETGEAR Nighthawk security vulnerabilities

The NETGEAR Nighthawk WiFi6 Router is a series of wireless routers from NETGEAR. The NETGEAR Nighthawk WiFi6 Router suffers from a buffer overflow vulnerability that stems from the presence of buffer overflows in the device's various CGI mechanisms, which can be exploited by an attacker to execut...