Multiple Netgear products have command injection vulnerabilities

Netgear RBK753 and others are products of Netgear USA.RBK753 is a home WiFi system.RBR750 is a home WiFi system.NETGEAR is a router. A command injection vulnerability exists in multiple Netgear products that allows an unauthenticated attacker to inject commands. The following products and version...

Netgear NETGEAR command injection vulnerability

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. NETGEAR suffers from a command injection vulnerability that could allow an unauthenticated attacker to inject commands. The following product...

CVE-2021-29067: Undefined Security Weakness

Certain NETGEAR devices are affected by authentication bypass. This affects RBW30 before 2.6.2.2, RBS40V before 2.6.2.4, RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753 before 3.2.17.12,...

CVE-2021-29077: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBW30 before 2.6.2.2, RBS40V before 2.6.2.4, RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12,...

CVE-2021-29082: Undefined Security Weakness

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBW30 before 2.6.1.4, RBS40V before 2.6.1.4, RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBK754 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 befo...

CVE-2021-29076: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12...

CVE-2021-29080: Weak Password Recovery Mechanism for Forgotten Password

Certain NETGEAR devices are affected by password reset by an unauthenticated attacker. This affects RBK852 before 3.2.10.11, RBK853 before 3.2.10.11, RBR854 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11, CBR40 before 2.5.0.10, R7000 before 1.0.11.116, R6900P before 1.3.2.126,...

Netgear NETGEAR command injection vulnerability

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A command injection vulnerability exists in NETGEAR that allows command injection by an authenticated user. The following products and versio...

PT-2021-18060

Name of the Vulnerable Software and Affected Versions: NETGEAR RBK852 versions prior to 3.2.17.12 NETGEAR RBK853 versions prior to 3.2.17.12 NETGEAR RBK854 versions prior to 3.2.17.12 NETGEAR RBR850 versions prior to 3.2.17.12 NETGEAR RBS850 versions prior to 3.2.17.12 NETGEAR RBR752 versions pri...

PT-2021-18064

Name of the Vulnerable Software and Affected Versions: RBW30 versions prior to 2.6.2.2 RBK852 versions prior to 3.2.17.12 RBR850 versions prior to 3.2.17.12 RBS850 versions prior to 3.2.17.12 RBK752 versions prior to 3.2.17.12 RBK753 versions prior to 3.2.17.12 RBK753S versions prior to 3.2.17.12...

Netgear NETGEAR buffer error vulnerability

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. Certain NETGEAR has a buffer error vulnerability that allows an authenticated user to cause a stack-based buffer overflow. The following...

New Mirai Variant and ZHtrap Botnet Malware Emerge in the Wild

Cybersecurity researchers on Monday disclosed a new wave of ongoing attacks exploiting multiple vulnerabilities to deploy new Mirai variants on internet connected devices. "Upon successful exploitation, the attackers try to download a malicious shell script, which contains further infection...

VulnCheck KEV: CVE-2020-26919

NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level...

NETGEAR JGS516PE/GS116Ev2 Arbitrary Data Write Vulnerability

The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. An arbitrary data write vulnerability exists in the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. The vulnerability stems from the TFTP firmware update mechanism not properly implementing firmware validation. A remote...

NETGEAR JGS516PE/GS116Ev2 Denial of Service Vulnerability

The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. A denial of service vulnerability exists in the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. The vulnerability stems from the TFTP server not being able to handle multiple connections. An attacker could exploit the...

NETGEAR JGS516PE/GS116Ev2 NSDP Authentication Bypass Vulnerability

The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. An authentication bypass vulnerability exists in the NSDP protocol implementation of the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. An attacker could exploit this vulnerability to bypass access control and take full...

NETGEAR JGS516PE/GS116Ev2 Authentication Token Reuse Vulnerability

The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. An authentication token reuse vulnerability exists in the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. The vulnerability stems from the authentication token required to perform an NSDP write request not being properly...

NETGEAR JGS516PE/GS116Ev2 Information Disclosure Vulnerability

The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. An information disclosure vulnerability exists in the NSDP protocol implementation of the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. A remote, unauthenticated attacker can exploit this vulnerability by sending a...

NETGEAR JGS516PE/GS116Ev2 Integer Overflow Vulnerability

The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. An integer overflow vulnerability exists in the Web Management Panel of the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. An attacker could exploit this vulnerability to cause a denial of service...

NETGEAR JGS516PE/GS116Ev2 Buffer Overflow Vulnerability

The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. A buffer overflow vulnerability exists in the access control section of the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. An attacker can exploit this vulnerability by injecting IP addresses into a whitelist via the...