CVE-2021-44261

CVE-2021-44261 affects Netgear W104 (WAC104-V1.0.4.13). The issue is in the BRS_top.html page where a remote attacker can access the page without authentication, exposing device firmware version information. The NVD metrics indicate network access, no authentication, and partial confidentiality i...

CVE-2021-44261

A vulnerability is in the 'BRStop.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes firmware version information for the device...

CVE-2021-44262

A vulnerability is in the 'MNUtop.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information for the device...

CVE-2021-44262

The CVE-2021-44262 entry concerns Netgear W104/WAC104-V1.0.4.13. The connected sources confirm a vulnerability in the MNU_top.htm page that allows a remote attacker to access this page without authentication, leading to disclosure of sensitive device information. Affected product/version: Netgear...

Netgear W104 Access Control Vulnerability

Netgear W104 is a wireless access point from Netgear, Inc. A security vulnerability exists in Netgear W104 WAC104-V1.0.4.13, which stems from a lack of protection and privilege restrictions for sensitive information in the MNUtop.htm page. An attacker without authentication can access the page an...

Netgear W104 Access Control Vulnerability

Netgear W104 is a wireless access point from Netgear, Inc. A security vulnerability exists in Netgear W104 WAC104-V1.0.4.13, which stems from a lack of protection and privilege restrictions for sensitive information on the BRStop.html page. An unauthenticated attacker could access the page and us...

CVE-2021-44262: Missing Authentication for Critical Function

A vulnerability is in the 'MNUtop.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information for the device...

CVE-2021-44261: Missing Authentication for Critical Function

A vulnerability is in the 'BRStop.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes firmware version information for the device...

PT-2022-12034

Name of the Vulnerable Software and Affected Versions Netgear W104 version WAC104-V1.0.4.13 Description A vulnerability in the 'MNU top.htm' page allows a remote attacker to access this page without authentication, exposing key device information. Recommendations For Netgear W104 version...

NETGEAR Integrated Routing Software Command Injection

The vulnerability of NETGEAR’s integrated routing software, including models such as CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

NETGEAR Router Command Injection

The vulnerability of NETGEAR’s integrated routing software, including CBR750, LAX20, MK62, MR60, MS60, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2, RAX43, RAX45, RAX50, RAX75, RAX80, RBK752, RBK852, RBR750, RBR850, RBS750, RBS850,...

NETGEAR Router Command Injection

The vulnerability of the embedded software of NETGEAR’s RAX200, RAX75, RAX80, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 routers lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

NETGEAR Router Command Injection

The vulnerability of the embedded software of NETGEAR routers such as D3600, D6000, D6100, D6220, D6400, D7800, D8500, DGN2200Bv4, DGN2200v4, R6250, R6300v2, R6400, R6400v2, R6700, R6700v3, R6900, R6900P, R7000, R7000P, R7100LG, R7300, R7900, R7900P, R8000, R8000P, R8300, R8500, WNDR3400v3,...

NETGEAR RAX43 Router Buffer Overflow

The vulnerability of NETGEAR RAX43 router’s built-in software is caused by buffer overflow. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

NETGEAR Router Service Information Disclosure

The vulnerability of the embedded software of NETGEAR routers such as EX6100v2, EX6150v2, EX6250, EX6400, EX6400v2, EX6410, EX6420, EX7300, EX7300v2, EX7320, EX7700, LBR1020, LBR20, RBK352, RBK50, RBR350, RBR50, and RBS350 lies in the lack of protection for service data. Exploiting this...

NETGEAR R6300v2 Buffer Overflow

The vulnerability of the embedded software of NETGEAR routers such as R6300v2, R6400, R6900, R7000, R7900, R8000, R7900P, R8000P, RAX75, RAX80, and WNR3500v2 arises due to buffer overflows. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

NETGEAR Router Command Injection

The vulnerability of the embedded software of NETGEAR’s RAX200, RAX75, RAX80, RBK852, RBR850, and RBS850 routers lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

NETGEAR Router Command Injection

The vulnerability of the embedded software of NETGEAR routers such as GS108Tv2, GS110TPP, GS110TPv2, GS110TPv3, GS308T, GS310TP, GS724TPP, GS724TPv2, GS728TPPv2, GS728TPv2, GS752TPP, GS752TPv2, MS510TXM, and MS510TXUP lies in the absence of measures for cleaning incoming data. Exploiting this...

NETGEAR Router Command Injection

The vulnerability of NETGEAR’s integrated routing software devices such as R7850, R7900P, R7960P, R8000, R8000P, RAX200, RAX75, RAX80, RBK752, RBK852, RBR750, RBR850, RBS750, and RBS850 lies in the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to...

NETGEAR Router Command Injection

The vulnerability of NETGEAR’s integrated routing software devices such as R7850, R7900P, R7960P, R8000, R8000P, RAX200, RAX75, RAX80, RBK752, RBK852, RBR750, RBR850, RBS750, and RBS850 lies in the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to...