Lucene search
+L

14717 matches found

BDU FSTEC
BDU FSTEC
•added 2022/03/05 12:00 a.m.•30 views

NETGEAR Integrated Routing Software Command Injection

The vulnerability of NETGEAR’s integrated routing software, including models like RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.4CVSS7.1AI score0.0058EPSS
SaveExploits0References3Affected Software6
BDU FSTEC
BDU FSTEC
•added 2022/03/05 12:00 a.m.•25 views

NETGEAR Router Service Disclosure

The vulnerability of the built-in software of NETGEAR routers such as R6400v2, R6700v3, R7000, R6900P, and R7000P lies in the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose the protected information...

7.9CVSS5.9AI score0.00265EPSS
SaveExploits0References3Affected Software5
attackerkb
attackerkb
•added 2022/03/04 4:15 p.m.•11 views

CVE-2021-46382

Unauthenticated cross-site scripting XSS in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijacking...

6.1CVSS6.5AI score0.0073EPSS
SaveExploits1References3
NVD
NVD
•added 2022/03/04 4:15 p.m.•36 views

CVE-2021-46382

Unauthenticated cross-site scripting XSS in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijacking...

6.1CVSS0.0073EPSS
SaveExploits1References2
Prion
Prion
•added 2022/03/04 4:15 p.m.•29 views

Cross site scripting

Unauthenticated cross-site scripting XSS in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijacking...

4.3CVSS5.9AI score0.0073EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/03/04 3:32 p.m.•37 views

CVE-2021-46382

Unauthenticated cross-site scripting XSS in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijacking...

6.2AI score0.0073EPSS
SaveExploits1References2
CVE
CVE
•added 2022/03/04 3:32 p.m.•97 views

CVE-2021-46382

The CVE-2021-46382 entry concerns the Netgear WAC120 AC Access Point, with an unauthenticated cross-site scripting (XSS) vulnerability. Connected records consistently describe this as XSS that could enable session hijacking and, in some notes, clipboard hijacking. The NVD entry provides CVSS scor...

6.1CVSS5.9AI score0.0073EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/04 12:00 a.m.•11 views

CVE-2021-46382: Improper Neutralization of Input During Web Page Generation

Unauthenticated cross-site scripting XSS in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijacking...

6.1CVSS6.6AI score0.0073EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2022/03/04 12:00 a.m.•19 views

NETGEAR Router Data Compromise

The vulnerability of the embedded software of NETGEAR routers such as EAX20, EAX80, EX3700, EX3800, EX6120, EX6130, EX7500, R7960P, R7900P, R8000P, RAX15, RAX20, RAX200, RAX45, RAX50, RAX75, and RAX80 exists due to the lack of measures taken to protect the website structure. Exploiting this...

7.5CVSS5.6AI score0.00432EPSS
SaveExploits0References3Affected Software17
BDU FSTEC
BDU FSTEC
•added 2022/03/04 12:00 a.m.•35 views

NETGEAR Router Command Injection

The vulnerability of NETGEAR’s integrated routing software, including models such as D7800, DM200, EX2700, EX6150v2, EX6200v2, EX6250, EX6400, EX6400v2, EX6410, EX6420, EX7300, EX7300v2, EX7320, R7500v2, R7800, R8900, R9000, RAX120, WN3000RPv2, WN3000RPv3, WNR2000v5, XR500, RBK20, RBR20, RBS20,...

9CVSS8AI score0.00953EPSS
SaveExploits0References3Affected Software28
BDU FSTEC
BDU FSTEC
•added 2022/03/04 12:00 a.m.•35 views

NETGEAR Router Command Injection

The vulnerability of the embedded software of NETGEAR routers such as R8000, RAX200, R8000P, R7900P, RBR850, RBS850, and RBK852 lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

8.4CVSS7.1AI score0.00638EPSS
SaveExploits0References3Affected Software7
BDU FSTEC
BDU FSTEC
•added 2022/03/04 12:00 a.m.•53 views

NETGEAR Router Command Injection

The vulnerability of NETGEAR’s integrated routing software modules—AC2100, AC2400, AC2600, D7000, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450—is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a...

9CVSS7.6AI score0.01092EPSS
SaveExploits0References3Affected Software17
BDU FSTEC
BDU FSTEC
•added 2022/03/04 12:00 a.m.•22 views

NETGEAR EAX20 EAX80 EX3700 EX3800 EX6120 EX6130 EX7500

The vulnerability of the embedded software of NETGEAR routers such as EAX20, EAX80, EX3700, EX3800, EX6120, EX6130, EX7500, RBW30, RBK752, RBR750, RBS750, RBK852, RBR850, RBS850, and RBS40V exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability ca...

7.5CVSS5.6AI score0.00432EPSS
SaveExploits0References3Affected Software15
CNNVD
CNNVD
•added 2022/03/04 12:00 a.m.•18 views

NETGEAR WAC120 Cross-Site Script Vulnerability

Netgear NETGEAR WAC120 is a wireless access point AP from Netgear, Inc. A cross-site scripting vulnerability exists in the Netgear WAC120 AC Access Point, which stems from unauthenticated cross-site scripting XSS could lead to a variety of attacks, such as session hijacking or even clipboard...

6.1CVSS5.2AI score0.0073EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2022/03/04 12:00 a.m.•21 views

NETGEAR Router Buffer Overflow

The vulnerability of the embedded software of NETGEAR routers such as D6220, D6400, D7000v2, D8500, DC112A, R6300v2, R6400, R7000, R7100LG, RBS40V, RBW30, RS400, R7000P, and R6900 arises due to buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to compromise the...

10CVSS8.2AI score0.01585EPSS
SaveExploits0References3Affected Software13
BDU FSTEC
BDU FSTEC
•added 2022/03/04 12:00 a.m.•16 views

NETGEAR Router Service Information Disclosure

The vulnerability of NETGEAR’s embedded routing software, such as RBK352, RBR350, and RBS350, is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

7.8CVSS7.2AI score0.01081EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/03/04 12:00 a.m.•25 views

NETGEAR Routers Website Structure Compromise

The vulnerability of the embedded software of NETGEAR’s R7000, R7900, R8000, RAX200, R7000P, RAX80, R6900P, and RAX75 routers exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and...

5.4CVSS5.9AI score0.00494EPSS
SaveExploits0References3Affected Software8
BDU FSTEC
BDU FSTEC
•added 2022/03/04 12:00 a.m.•36 views

NETGEAR RAX200 MR60 RAX20 RAX45 RAX80 MS60 RAX15 RAX

The vulnerability of the embedded software of NETGEAR’s RAX200, MR60, RAX20, RAX45, RAX80, MS60, RAX15, RAX50, RAX75, RBR750, RBR850, RBS750, RBS850, RBK752, and RBK852 routers exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a...

4.9CVSS5.6AI score0.00432EPSS
SaveExploits0References3Affected Software12
BDU FSTEC
BDU FSTEC
•added 2022/03/04 12:00 a.m.•35 views

NETGEAR Router Command Injection

The vulnerability of the embedded software of NETGEAR routers such as RBR20, RBR40, RBR50, RBS20, RBS40, RBR50, RBK20, RBK40, and RBK50 lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

8.4CVSS7.1AI score0.00781EPSS
SaveExploits0References3Affected Software7
BDU FSTEC
BDU FSTEC
•added 2022/03/04 12:00 a.m.•37 views

NETGEAR Router Command Injection

The vulnerability of NETGEAR’s integrated routing software devices such as R7850, R7900P, R7960P, R8000, R8000P, RAX200, RAX75, RAX80, RBK852, RBR850, and RBS850 lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

8.4CVSS7.1AI score0.00631EPSS
SaveExploits0References3Affected Software11
Rows per page
Query Builder