CVE-2020-15634: Use of Externally-Controlled Format String

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 routers with firmware 1.0.4.8410.0.58. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads...

CVE-2020-15636: Stack-based Buffer Overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R6400, R6700, R7000, R7850, R7900, R8000, RS400, and XR300 routers with firmware 1.0.4.8410.0.58. Authentication is not required to exploit this vulnerability. The specific flaw exists within...

NETGEAR R6700 Remote Code Execution Vulnerability

The NETGEAR R6700 is an AC1750 Smart WiFi Router. A remote code execution vulnerability exists in the handling of string table file uploads in the NETGEAR R6700 versions prior to 1.0.4.98. The vulnerability stems from a failure to properly validate user-supplied strings before using them as forma...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2020-46224)

The NETGEAR R6400, among others, is a wireless router from NETGEAR. A buffer overflow vulnerability exists in the checkra service in multiple NETGEAR products. A remote attacker can exploit this vulnerability to execute arbitrary code with the help of a specially crafted raePolicyVersion...

NETGEAR R6700 Stack Buffer Overflow Vulnerability

The NETGEAR R6700 is an AC1750 Smart WiFi Router. A stack buffer overflow vulnerability exists in the acsd service in the NETGEAR R6700 prior to version 1.0.4.98. The vulnerability stems from a failure to properly validate the length of user-supplied data before copying it to a fixed-length stack...

PT-2020-14556

Name of the Vulnerable Software and Affected Versions NETGEAR R6700 version 1.0.4.84 10.0.58 Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The flaw exists within the handling of...

NETGEAR Multiple Routers check_ra Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R6400, R6700, R7000, R7850, R7900, R8000, RS400, and XR300 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the checkra service. A crafte...

NETGEAR R6700 acsd Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the acsd service, which listens on TCP port 5916 by default. The issue...

NETGEAR R6700 httpd strtblupgrade Format String Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. The issue results from the la...

PT-2020-14558

Name of the Vulnerable Software and Affected Versions NETGEAR R6400, R6700, R7000, R7850, R7900, R8000, RS400, and XR300 routers with firmware 1.0.4.84 10.0.58 Description This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to...

PT-2020-14557

Name of the Vulnerable Software and Affected Versions NETGEAR R6700 version 1.0.4.84 10.0.58 Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the acsd...

Netgear Won't Patch 45 Router Models Vulnerable to Serious Flaw

UPDATE Netgear will not patch 45 router models that are vulnerable to a high-severity remote code execution flaw, the router company revealed last week. However, the company says that routers that won’t receive updates are outdated or have reached EOL End of Life. The remote code execution...

NETGEAR R6700 Buffer Overflow Vulnerability (CNVD-2020-45110)

The NETGEAR R6700 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in the UPnP service in the NETGEAR R6700 version V1.0.4.8410.0.58, which stems from the program failing to properly validate the length of user-submitted data before copying it to a fixed stack-based buffe...

NETGEAR R6700 Buffer Overflow Vulnerability

The NETGEAR R6700 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR R6700 version V1.0.4.8410.0.58. The vulnerability stems from the program failing to properly validate the length of user-supplied data before copying it to a stack-based fixed buffer. An attacke...

NETGEAR R6700 Input Validation Error Vulnerability

The NETGEAR R6700 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR R6700 version V1.0.4.8410.0.58, which originates from the program failing to properly validate user-submitted data. An attacker can exploit the vulnerability to execute arbitrary code...

NETGEAR R6700 Encryption Issues Vulnerabilities

The NETGEAR R6700 is a wireless router from NETGEAR. A cryptographic issue vulnerability exists in the encryption of the firmware update image in the NETGEAR R6700 V1.0.4.8410.0.58 release, which stems from an incorrect encryption algorithm. An attacker could exploit this vulnerability among othe...

NETGEAR R6700 Buffer Overflow Vulnerability (CNVD-2020-43667)

The NETGEAR R6700 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in the httpd service in the NETGEAR R6700 version V1.0.4.8410.0.58, which originates when the program fails to properly validate the length of user-supplied data before copying it into a fixed stack-based...

NETGEAR R6700 Trust Management Issue Vulnerability

The NETGEAR R6700 is a wireless router from NETGEAR. A trust management issue vulnerability exists in File Download HTTPS in the NETGEAR R6700 version V1.0.4.8410.0.58, which originates when the program fails to properly validate the server's certificate. An attacker could exploit this...

NETGEAR R6700 Code Issue Vulnerability

The NETGEAR R6700 is a wireless router from NETGEAR. A code issue vulnerability exists in the UPnP service in the NETGEAR R6700 version V1.0.4.8410.0.58. The vulnerability stems from an improper design or implementation during code development of a network system or product. An attacker could...

NETGEAR R6700 Buffer Overflow Vulnerability (CNVD-2020-43666)

The NETGEAR R6700 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR R6700 version V1.0.4.8410.0.58, which originates from a program failing to properly validate the length of user-submitted data before copying it to a heap-based fixed buffer. An attacker cou...