CVE-2022-29383: Improper Neutralization of Special Elements used in an SQL Command

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi...

NETGEAR ProSafe SSL VPN firmware FVS336G has a SQL injection vulnerability

The NETGEAR FVS336G is a VPN Virtual Private Network firewall router from NETGEAR. A security vulnerability exists in the NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 versions, which stems from a missing filter escape in USERDBDomains.Domainname in cgi-bin/platform.cgi, which can be...

PT-2022-2562

Name of the Vulnerable Software and Affected Versions NETGEAR ProSafe SSL VPN firmware versions FVS336Gv2 and FVS336Gv3 Description The issue is related to a SQL injection vulnerability via USERDBDomains.Domainname at "cgi-bin/platform.cgi". This vulnerability may allow a remote attacker to execu...

NETGEAR Router Buffer Overflow

The vulnerability in the embedded software of NETGEAR routers such as NETGEAR R6400, NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R6900P, NETGEAR R7000, NETGEAR R7000P, NETGEAR R8500, NETGEAR RS400, NETGEAR WNDR3400v3, NETGEAR WNR3500Lv2, NETGEAR XR300, NETGEAR D6220, NETGEAR D6400, NETGEAR D7000v2,...

NETGEAR Router Buffer Overflow

The vulnerability of the embedded software of NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R6900P, NETGEAR R7000, NETGEAR R7000P, NETGEAR RS400, and NETGEAR CBR40 lies in buffer overflow in the stack. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code using a special...

NETGEAR Router Code Execution

The vulnerability of the embedded software of NETGEAR routers such as NETGEAR R6400, NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R6900P, NETGEAR R7000, NETGEAR R7000P, NETGEAR R8500, NETGEAR RAX15, NETGEAR RAX20, NETGEAR RAX35v2, NETGEAR RAX38v2, NETGEAR RAX40v2, NETGEAR RAX42, NETGEAR RAX43, NETGE...

readycloud_control.cgi Authentication Bypass

The vulnerability of the readycloudcontrol.cgi file in NETGEAR’s integrated routing software for models such as NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R7000, NETGEAR R8500, NETGEAR RAX15, NETGEAR RAX20, NETGEAR RAX35v2, NETGEAR RAX38v2, NETGEAR RAX40v2, NETGEAR RAX42, NETGEAR RAX43, NETGEAR...

NETGEAR HTTPS Protocol Data Compromise

The vulnerability of the HTTPS protocol implementation in NETGEAR’s embedded software for routers such as NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R6900P, NETGEAR R7000, NETGEAR R7000P, NETGEAR RS400, and NETGEAR CBR40 stems from errors in the certificate validation process. Exploiting this...

httpd-demon NETGEAR Router Authentication Bypass

The vulnerability of httpd-demon in NETGEAR’s integrated router software—NETGEAR R6400, NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R6900P, NETGEAR R7000, NETGEAR R7000P, NETGEAR R8500, NETGEAR RAX15, NETGEAR RAX20, NETGEAR RAX35v2, NETGEAR RAX38v2, NETGEAR RAX40v2, NETGEAR RAX42, NETGEAR RAX43,...

NETGEAR R6700v3 Input Validation Error Vulnerability

NETGEAR R6700v3 is the Nighthawk AC1750 Smart Dual Band Gigabit Router from Netgear USA. The NETGEAR R6700v3 suffers from an input validation error vulnerability that lacks proper validation of user-supplied data. An attacker can exploit the vulnerability to execute arbitrary code...

NetUSB Module Code Execution

The vulnerability of the NetUSB module in the embedded software of Netgear routers such as D7800, R6220, R6230, R6400v2, R6700v3, R7000, and R7800 is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely by using port...

(Pwn2Own) Netgear R6700v3 NetUSB Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB module. The issue results from the lack of proper validatio...

NETGEAR R8500 Command Injection Vulnerability

The NETGEAR R8500 is a wireless router from the American company Netgear. A security vulnerability exists in the NETGEAR R8500, which can be exploited by an attacker to execute arbitrary commands e.g. telnetd via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters of...

NETGEAR R6700 has a vulnerability related to input validation errors

NETGEAR R6700v3 is the Nighthawk AC1750 Smart Dual Band Gigabit Router from Netgear USA. The NETGEAR R6700v3 suffers from an input validation error vulnerability that lacks proper validation of user-supplied data. An attacker can exploit the vulnerability to execute arbitrary code...

NETGEAR R8500 Command Injection Vulnerability (CNVD-2022-28464)

The NETGEAR R8500 is a wireless router from the American company Netgear. A security vulnerability exists in the NETGEAR R8500 that can be exploited to execute arbitrary commands e.g., telnetd via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters of adminaccount.cgi...

NETGEAR R8500 Command Injection Vulnerability (CNVD-2022-28463)

The NETGEAR R8500 is a wireless router from the American company Netgear. A security vulnerability exists in the NETGEAR R8500, which can be exploited by an attacker to execute arbitrary commands such as telnetd...

Netgear WAC120 Router XSS

The vulnerability of Netgear WAC120 wireless access points’ microprogramming software is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Netgear Wireless Access Point Authentication Bypass

The vulnerability of Microprogrammed Software in Netgear WAC104 wireless access points, Netgear R7450, R6900v2, R7800, and R6220 routers is related to deficiencies in authentication procedures when processing the BRStop.html web page. Exploiting this vulnerability can allow attackers to gain...

CVE-2022-27947

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands such as telnetd via shell metacharacters in the ipv6fix.cgi ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, or ipv6lanlength parameter...

CVE-2022-27947

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands such as telnetd via shell metacharacters in the ipv6fix.cgi ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, or ipv6lanlength parameter...