PT-2022-27867 · NetGear · Netgear Wnr2000V1

Name of the Vulnerable Software and Affected Versions: Netgear WNR2000v1 versions 1.2.3.7 and earlier Description: An exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router. An attacker can conduct a Man-in-the-Middle MITM attack to modify the user-uploaded...

NETGEAR Nighthawk WiFi6 Router Command Injection Vulnerability

The NETGEAR Nighthawk WiFi6 Router is a series of routers that support WiFi 6 technology and are designed for users who are looking for a high-speed Internet experience. The NETGEAR Nighthawk WiFi6 Router suffers from a command injection vulnerability that originates from improper user input...

CVE-2022-46422

The CVE-2022-46422 entry affects Netgear WNR2000 router (v1, 1.2.3.7 and earlier). The flaw exists in the firmware update process, enabling an authenticated attacker to upload a crafted firmware image to trigger a Denial of Service. Impact described as Availability: HIGH; other impacts are NONE. ...

CVE-2022-46424: Undefined Security Weakness

An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM Man-in-the-Middle attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or...

NETGEAR Nighthawk WiFi6 Router Authorization Issues Vulnerability

The NETGEAR Nighthawk WiFi6 Router is a series of routers that support WiFi 6 technology and are designed for users who are looking for a high-speed Internet experience. The NETGEAR Nighthawk WiFi6 Router suffers from an authorization issue vulnerability that stems from having four user default...

NETGEAR WNR2000 Command Injection Vulnerability

The NETGEAR WNR2000v1 Router is a single-band wireless router based on the IEEE 802.11n standard . A denial of service vulnerability exists in the NETGEAR WNR2000v1 Router. An attacker can exploit this vulnerability to cause a denial of service by uploading a specially crafted firmware image...

NETGEAR XWN5001 Command Injection Vulnerability

The NETGEAR XWN5001 is a wireless access point from NETGEAR. A command injection vulnerability exists in NETGEAR XWN5001 Powerline 500 WiFi v0.4.1.1 and earlier versions, which can be exploited by an attacker to conduct a MITM Man-in-the-Middle attack to modify a user-uploaded firmware image,...

NETGEAR WNR2000 Command Injection Vulnerability

NETGEAR WNR2000 is a wireless router from NETGEAR. NETGEAR WNR2000 v1 1.2.3.7 and earlier versions suffer from a command injection vulnerability, which can be exploited by an attacker to conduct a MITM Man-in-the-Middle attack to modify the firmware image uploaded by the user to bypass CRC...

PT-2022-27868 · NetGear · Netgear Xwn5001 Powerline 500 Wifi Access Point

Name of the Vulnerable Software and Affected Versions: Netgear XWN5001 Powerline 500 WiFi Access Point versions v0.4.1.1 and earlier Description: An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a...

NETGEAR Nighthawk Operating System Command Injection Vulnerability

The NETGEAR Nighthawk WiFi6 Router is a series of routers that support WiFi 6 technology and are designed for users who are looking for a high-speed Internet experience. The NETGEAR Nighthawk WiFi6 Router suffers from a command injection vulnerability that originates from improper user input...

PT-2022-28036 · NetGear · Rax30 Firmware

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The default console presented to users over telnet, when enabled, is restricted to a subset of commands. However, commands issued at this console appear...

NETGEAR Nighthawk Operating System Command Injection Vulnerability

The NETGEAR Nighthawk WiFi6 Router is a series of routers that support WiFi 6 technology and are designed for users who are looking for a high-speed Internet experience. The NETGEAR Nighthawk WiFi6 Router suffers from a command injection vulnerability that stems from the fact that the default...

A week in security (December 5 - 11)

Last week on Malwarebytes Labs: Security advisories are falling short. Here's why, with Dustin Childs: Lock and Code S03E25 Eufy "no cloud" security cameras streaming data to the cloud Snapchat gives Californians more power over their personal data Update now! Emergency fix for Google Chrome's V8...

CVE-2022-4390

A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions...

CVE-2022-4390

A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions...

Design/Logic Flaw

A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions...

CVE-2022-4390

A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions...

Netgear RAX30 WAN Interface Access

The vulnerability of the WAN interface of Netgear RAX30 microprogrammed software routers is related to errors during access control for IPv6 traffic. Exploiting this vulnerability can allow a malicious actor to gain access to running services and open ports...

CVE-2022-4390

CVE-2022-4390 affects NETGEAR RAX30 AX2400 series routers prior to version 1.0.9.90. A network misconfiguration enables IPv6 on the WAN by default, and IPv6 firewall rules are not consistently applied, potentially allowing arbitrary access to IPv6 services (e.g., SSH/Telnet on ports 22/23) from t...

CVE-2022-4390: Undefined Security Weakness

A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions...