CVE-2021-27257: Improper Certificate Validation

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files v...

CVE-2021-27256: Improper Neutralization of Special Elements used in an OS Command

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

CVE-2021-27255: Missing Authentication for Critical Function

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the refreshstatus.aspx endpoint. The issue results from a lack o...

CVE-2021-27254: Use of Hard-coded Password

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the applysave.cgi endpoint. This issue results from the use of hard-coded...

NETGEAR Remote Code Execution Vulnerability

The Netgear NETGEAR R7800 is a wireless router from the American company Netgear. The NETGEAR R7800 suffers from a remote code execution vulnerability that stems from a failure to properly validate server-supplied certificates, which can be exploited by an attacker to execute arbitrary code in...

PT-2021-17360

Name of the Vulnerable Software and Affected Versions: NETGEAR R7800 version 1.0.2.76 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can...

Netgear NETGEAR R7800 Operating System Command Injection Vulnerability

The Netgear NETGEAR R7800 is a wireless router from Netgear, Inc. The NETGEAR R7800 suffers from an operating system command injection vulnerability that originates from the failure to properly validate a user-supplied string before executing a system call using it. An attacker could exploit the...

PT-2021-17361

Name of the Vulnerable Software and Affected Versions: NETGEAR R7800 firmware version 1.0.2.76 Description: This issue allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations. Authentication is not required to exploit this issue. The...

(Pwn2Own) NETGEAR R7800 funjsq_httpd Missing Authentication for Critical Function Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the refreshstatus.aspx endpoint. The issue results from a lack of authentication required ...

Netgear NETGEAR R7800 has vulnerabilities related to trust management.

The Netgear NETGEAR R7800 is a wireless router from the American company Netgear. The NETGEAR R7800 suffers from a remote code execution vulnerability that stems from a failure to properly validate server-supplied certificates, which can be exploited by an attacker to execute arbitrary code in...

PT-2021-17359

Name of the Vulnerable Software and Affected Versions: NETGEAR R7800 version 1.0.2.76 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the "refresh status.aspx...

Netgear NETGEAR R7800 Access Control Error Vulnerability

The Netgear NETGEAR R7800 is a wireless router from Netgear, Inc. The NETGEAR R7800 suffers from an Access Control Error vulnerability that can be exploited by an attacker to execute arbitrary code on an affected device installation...

(Pwn2Own) NETGEAR R7800 apply_save.cgi rc_service Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the...

(Pwn2Own) NETGEAR R7800 ready-genie-cloud Improper Certificate Validation Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files via FTP. The issue results...

PT-2021-17358

Name of the Vulnerable Software and Affected Versions: NETGEAR R7800 affected versions not specified Description: This issue allows network-adjacent attackers to bypass authentication on affected installations. The specific flaw exists within the "apply save.cgi" endpoint, resulting from the use ...

Netgear NETGEAR Trust Management Issues Vulnerabilities

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in the NETGEAR Nighthawk R7800, which can be exploited by an attacker to execute arbitrary code in the root...

(Pwn2Own) NETGEAR Nighthawk R7800 Use of Hard-coded Password Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the applysave.cgi endpoint. This issue results from the use of hard-coded...

PT-2021-17345

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400 and R6700 firmware version 1.0.4.98 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR routers. Authentication is not required to exploit this issue. The...

(Pwn2Own) NETGEAR Nighthawk R7800 ready-genie-cloud Insecure Download of Critical Component Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Authentication is not required to exploit this vulnerability The specific flaw exists within handling of firmware updates. The issue results from a fallback to a...

PT-2021-17357

Name of the Vulnerable Software and Affected Versions: NETGEAR Nighthawk R7800 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing...