CVE-2021-34978

CVE-2021-34978 affects NETGEAR R6260 routers with firmware 1.1.0.78_1.0.1. The flaw resides in setupwizard.cgi and allows a crafted SOAP request to overflow a fixed-length stack-based buffer, enabling remote code execution with root privileges. The attack is network-adjacent, requires no authenti...

CVE-2021-34977

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.11610.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results fro...

CVE-2021-34977

The CVE-2021-34977 entry corresponds to an authentication-bypass vulnerability in NETGEAR R7000 routers (firmware around 1.0.11.116_10.2.100) where SOAP request processing fails to verify authentication before performing a password reset. This network-adjacent flaw enables an attacker to reset th...

NETGEAR R8000 Buffer Overflow Vulnerability (CNVD-2022-06691)

NETGEAR R8000 is a wireless router from Netgear, Inc. The NETGEAR R8000 device is vulnerable to a buffer overflow vulnerability, which originates in NETGEAR R8000 devices prior to 1.0.4.62 and allows authenticated users to perform buffer overflows. An attacker could conduct a buffer overflow atta...

NETGEAR R7000 Buffer Overflow Vulnerability (CNVD-2022-06690)

Netgear NETGEAR R7000 is a wireless router from Netgear, Inc. NETGEAR R7000 devices are vulnerable to a buffer overflow vulnerability that originates in NETGEAR R7000 devices prior to 1.0.9.42 that allows authenticated users to cause a buffer overflow. An attacker could exploit this vulnerability...

NETGEAR R6700v2 Privilege Permission and Access Control Issue Vulnerability

NETGEAR R6700v2 is a wireless router from Netgear, Inc. NETGEAR R6700v2 is vulnerable to a permission and access control issue, which stems from the fact that NETGEAR R6700v2 devices prior to version 1.2.0.88 are affected by an authentication bypass. An attacker could exploit this vulnerability t...

The vulnerability of NETGEAR R6700v2 Wi-Fi routers’ microprogramming software, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of NETGEAR R6700v2 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

The vulnerabilities of NETGEAR Wi-Fi router microprogramming systems, such as AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450, are related to authentication process flaws, which allow attackers to exploit these vulnerabilities to gain increased privileges.

The vulnerabilities of NETGEAR Wi-Fi router software models AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450 are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can...

The vulnerability of NETGEAR D7000 Wi-Fi routers’ microprogramming software, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of NETGEAR D7000 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

The vulnerability of NETGEAR D7000 Wi-Fi routers’ microprogramming software, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of NETGEAR D7000 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

The vulnerability of NETGEAR D7000 Wi-Fi routers’ microprogramming software, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of NETGEAR D7000 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

PT-2022-4911 · NetGear · Netgear N300 Wireless Router

Name of the Vulnerable Software and Affected Versions: Netgear N300 wireless router wnr2000v4 version V1.0.0.70 Description: The issue is related to a buffer overflow vulnerability caused by the strcpy function in the uhttpd web server, which can lead to a stack overflow. This vulnerability can b...

Netgear NETGEAR D7000 Buffer Overflow Vulnerability

The Netgear NETGEAR D7000 is a wireless modem from Netgear USA. A security vulnerability exists in the NETGEAR D7000 prior to version 1.0.1.82, which can be exploited by an unauthenticated attacker to conduct a stack-based buffer overflow...

Netgear RAX43 Buffer Overflow Vulnerability

The Netgear RAX43 is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between them. A buffer overflow vulnerability exists in Netgear RAX43 version 1.0.3.96. The vulnerability is caused by the URL parsing functionality of the...

Netgear Nighthawk R6700 Encryption Issue Vulnerability (CNVD-2022-02653)

Netgear Nighthawk R6700 is a wireless router from Netgear, Inc. An encryption vulnerability exists in the Netgear Nighthawk R6700, which stems from the product's failure to use the soap secure communication method. An attacker could obtain sensitive information from HTTP requests through this...

Netgear RAX43 has an unspecified vulnerability (CNVD-2022-02647)

A security vulnerability exists in the Netgear RAX43, a wireless router from Netgear, which stems from the non-use of secure communication with the web interface. By default, all communication to and from the device is sent over HTTP, which can result in potentially sensitive information such as...

Unspecified Vulnerability in Netgear RAX43

The Netgear RAX43 is a wireless router from Netgear USA. A security vulnerability exists in the Netgear RAX43 that stems from storing sensitive information in plaintext. All usernames and passwords for device-related services are stored on the device in plaintext. No details of the vulnerability...

Netgear Nighthawk R6700 Encryption Issue Vulnerability

The Netgear Nighthawk R6700 is a wireless router from Netgear, Inc. An encryption vulnerability exists in the Netgear Nighthawk R6700, which stems from the fact that the product does not effectively encrypt configuration files. An attacker could modify the backup configuration by extracting the...

Netgear Nighthawk R6700 Information Disclosure Vulnerability

An information disclosure vulnerability exists in the Netgear Nighthawk R6700, a wireless router from Netgear, which stems from the product's failure to encrypt HTTP requests. An attacker could gain access to sensitive information through this vulnerability...

Netgear RAX43 Command Injection Vulnerability

Netgear RAX43 is a wireless router from Netgear, Inc. A command injection vulnerability exists in Netgear RAX43, which stems from the inclusion of a command injection vulnerability. The readycloud cgi application is vulnerable to command injection in the name parameter. No details of the...