14729 matches found
Microsoft finds new NETGEAR firmware vulnerabilities that could lead to identity theft and full system compromise
The continuous improvement of security solutions has forced attackers to explore alternative ways to compromise systems. The rising number of firmware attacks and ransomware attacks via VPN devices and other internet-facing systems are examples of attacks initiated outside and below the operating...
Microsoft finds new NETGEAR firmware vulnerabilities that could lead to identity theft and full system compromise
The continuous improvement of security solutions has forced attackers to explore alternative ways to compromise systems. The rising number of firmware attacks and ransomware attacks via VPN devices and other internet-facing systems are examples of attacks initiated outside and below the operating...
CVE-2021-35973
NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/minihttpd, allowing an unauthenticated attacker to invoke any action by adding the ¤tsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows th...
CVE-2021-35973
NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/minihttpd, allowing an unauthenticated attacker to invoke any action by adding the ¤tsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows th...
Authentication flaw
NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/minihttpd, allowing an unauthenticated attacker to invoke any action by adding the ¤tsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows th...
CVE-2021-35973
NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/minihttpd, allowing an unauthenticated attacker to invoke any action by adding the ¤tsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows th...
CVE-2021-35973
The CVE-2021-35973 entry describes an authentication bypass in NETGEAR WAC104 devices (pre-1.0.4.15) via the mini_httpd component. Exploitation allows unauthenticated attackers to invoke actions by injecting the substring currentsetting.htm into HTTP queries, enabling password changes for the web...
CVE-2021-35973
NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/minihttpd, allowing an unauthenticated attacker to invoke any action by adding the ¤tsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows th...
Weak password vulnerability in NNETGEAR GS748Tv5
The NETGEAR GS748Tv5 is a Gigabit Ethernet switch. The NNETGEAR GS748Tv5 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...
PT-2021-21091
Name of the Vulnerable Software and Affected Versions: NETGEAR WAC104 versions prior to 1.0.4.15 Description: The issue allows an unauthenticated attacker to bypass authentication by invoking any action through the /usr/sbin/mini httpd service. This is achieved by adding the ¤tsetting.htm...
Netgear NETGEAR WAC104: Authorization issue vulnerability
NETGEAR WAC104 is a wireless access point AP from Netgear, Inc. The NETGEAR WAC104 authentication bypass vulnerability can be exploited by an unauthenticated attacker to bypass the AP by placing...
CVE-2021-35973: Incorrect Comparison
NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/minihttpd, allowing an unauthenticated attacker to invoke any action by adding the ¤tsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows th...
NETGEAR Smart Cloud Switch Detection (HTTP)
HTTP based detection of NETGEAR Smart Cloud Switches. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Weak password vulnerability in NETGEAR GS724Tv4
The GS724Tv4 is a 24-port Gigabit Smart Managed Professional Switch with 2 SFP ports. The NETGEAR GS724Tv4 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...
NETGEAR Smart Cloud Switch Command Injection Vulnerability (PSV-2021-0071)
Multiple NETGEAR Smart Cloud Switch devices are prone to an unauthenticated command injection vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Netgear WNAP320 2.0.3 - (macAddress) Remote Code Execution Exploit
Exploit Title: Netgear WNAP320 2.0.3 - 'macAddress' Remote Code Execution RCE Unauthenticated Vulnerability: Remote Command Execution on /boardDataWW.php macAddress parameter Notes: The RCE doesn't need to be authenticated Exploit Author: Bryan Leong IoT Device: Netgear WNAP320 Access Point...
Netgear WNAP320 2.0.3 Remote Code Execution
Exploit Title: Netgear WNAP320 2.0.3 - 'macAddress' Remote Code Execution RCE Unauthenticated Vulnerability: Remote Command Execution on /boardDataWW.php macAddress parameter Notes: The RCE doesn't need to be authenticated Date: 26/06/2021 Exploit Author: Bryan Leong IoT Device: Netgear WNAP320...
Netgear WNAP320 2.0.3 - 'macAddress' Remote Code Execution (RCE) (Unauthenticated)
Exploit Title: Netgear WNAP320 2.0.3 - 'macAddress' Remote Code Execution RCE Unauthenticated Vulnerability: Remote Command Execution on /boardDataWW.php macAddress parameter Notes: The RCE doesn't need to be authenticated Date: 26/06/2021 Exploit Author: Bryan Leong IoT Device: Netgear WNAP320...
Netgear ProSAFE Network Management System Arbitrary File Upload (CVE-2021-27274)
An unrestricted file upload vulnerability exists in Netgear ProSAFE NMS300. The vulnerability is due to improper validation of the uploaded file in the MFileUploadController class...