CVE-2021-27252

CVE-2021-27252 affects NETGEAR R7800 firmware 1.0.2.76. The vulnerability stems from the vendor_specific DHCP opcode handling where a user-supplied string is not properly validated before being used in a system call, enabling network-adjacent attackers to execute code with root privileges. Exploi...

CVE-2021-27251

CVE-2021-27251 affects NETGEAR Nighthawk R7800. The flaw is in the firmware update handling where updates may be delivered over an insecure protocol, enabling network-adjacent attackers to execute arbitrary code with root privileges. Evidence from multiple sources (including ZDI-21-247 and Red Ha...

CVE-2021-27251

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Authentication is not required to exploit this vulnerability The specific flaw exists within handling of firmware updates. The issue results from a fallback to a...

CVE-2021-27251: Cleartext Transmission of Sensitive Information

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Authentication is not required to exploit this vulnerability The specific flaw exists within handling of firmware updates. The issue results from a fallback to a...

CVE-2021-27252: Improper Neutralization of Special Elements used in an OS Command

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the vendorspecific DHCP opcode. The...

CVE-2021-27253: Heap-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handli...

Netgear NETGEAR security vulnerabilities

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in the NETGEAR Nighthawk R7800, which can be exploited by an attacker to execute arbitrary code on an affecte...

Netgear NETGEAR R7800: Operating System Command Injection Vulnerability

The Netgear NETGEAR R7800 is a wireless router from Netgear, Inc. A security vulnerability exists in the NETGEAR R7800 firmware that can be exploited by an attacker to execute arbitrary code on the affected firmware version...

Netgear NETGEAR buffer error vulnerability

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in the NETGEAR Nighthawk R7800 that could allow a network neighbor attacker to execute arbitrary code on the...

NETGEAR GS808E Service Data Protection Failure

The vulnerability of NETGEAR GS808E switch microprogramming software is related to the lack of protection for service data. Exploiting this vulnerability could allow an intruder to cause a service failure...

NETGEAR EX7000 Wi-Fi Router XSS

The vulnerability of NETGEAR EX7000, R6250, R6400, R6400v2, and R7100LG Wi-Fi routers stems from the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

NETGEAR Wi-Fi Router Operational Data Protection

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as D6200, D7000, R6020, R6080, R6050, and JR6150, stems from the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...

NETGEAR Wireless Controller Command Injection

The vulnerability of microprogrammed wireless controller software from NETGEAR, including WC7500, WC7600, WC7600v2, and WC9500, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow an intruder to execute arbitrary commands...

NETGEAR ProSafe Plus JGS516PE DoS

The vulnerability of NETGEAR ProSafe Plus JGS516PE microcontroller-based devices lies in the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

NETGEAR Wireless Controller XSS

The vulnerability of microprogrammed wireless controller software from NETGEAR, including WC7500, WC7600, WC7600v2, and WC9500, is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting...

NETGEAR GS110EMX GS810EMX XS512EM XS724EM Authentication Failure

The vulnerability of the microprogrammed software of NETGEAR’s GS110EMX, GS810EMX, XS512EM, and XS724EM devices is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to cause service failures...

NETGEAR Orbi Wi-Fi Software Command Execution

The vulnerability of NETGEAR Orbi Wi-Fi systems’ microprogramming software is related to insufficient cleaning of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

NETGEAR EX7000 Wi-Fi Router XSS

The vulnerability of NETGEAR EX7000, R6250, R6400, R6400v2, and R7100LG Wi-Fi routers stems from the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

NETGEAR WAC720 WAC730 Service Data Unauthorized Access

The vulnerability of NETGEAR WAC720 and WAC730 wireless access points lies in the lack of protection for service data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

NETGEAR R6220 R6230 Wi-Fi Router Command Execution

The vulnerability of NETGEAR R6220 and R6230 Wi-Fi routers’ microprogramming software is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...