nsdp-discover

nsdp-discover UDP 포트 63322 및 63324에서 Netgear Switch Discovery ProtocolNSDP을 식별하기 위한 Nmap 스크립트입니다. 이 스크립트는 디스커버리 요청을 전송하고 응답을 수신하기 위해 UDP 서버를 생성합니다. 이 스크립트로 수집되는 정보: 장치 유형, 이름, MAC, 위치, IP, 넷마스크, 게이트웨이, 펌웨어 버전 및 현재 펌웨어. 사용법 nmap -sU -p 63322,63324 --script=nsdp-discover PORT STATE SERVICE 63322/ud...

netgear-telenetenable

telnetenable.py Paul Gebheim 다음에서 제공되는 C 소스에서 번역됨: http://wiki.openwrt.org/oldwiki/openwrtdocs/hardware/netgear/telnetconsole 실행: python telnetenable.py IP - Netgear 장치의 IP 주소로, 일반적으로 192.168.1.1입니다. MAC - MAC 주소는 Netgear 장치의 LAN 포트 MAC 주소여야 하며, ":" 없이 입력합니다. 예: "00:40:5E:21:14:4E"는 "00405E21144E...

netgear-telenetenable

telnetenable.py - Paul Gebheim 제작 insanid가 최신 Netgear 라우터R7000, R7500에서 작동하도록 수정 다음 C 소스에서 번역되었습니다. http://wiki.openwrt.org/toh/netgear/telnet.console 실행: python telnetenable.py IP - Netgear 장치의 IP 주소로, 보통 192.168.1.1입니다. MAC - MAC 주소는 Netgear 장치의 LAN 포트 MAC 주소여야 하며, 콜론":" 없이 입력합니다. 예:...

Netgear_Pwn2Own2021

Netgear R6700v3 WAN RCE - Pwn2Own 2021 이 코드는 Pwn2Own 2021에서 Netgear R6700v3에 대한 원격 셸을 획득하기 위해 사용된 것입니다. 블로그 포스트: https://synacktiv.com/publications/pwn2own-austin-2021-defeating-the-netgear-r6700v3 요구 사항 flask가 설치된 python3 dnsmasq 사용 방법 1. 루트로 ./play.sh ifname을 실행합니다. ifname은 라우터에 연결된 인터페이스 이름입니다...

NUUO NVR camera `debugging_center_utils_.php` - Command Execution

debuggingcenterutils.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the log parameter. id: CVE-2016-5674 info: name: NUUO NVR camera debuggingcenterutils.p...

NETGEAR Routers - Remote Code Execution

NETGEAR routers R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly others allow...

wax214v2-telnetenable-auth-bypass

WAX214v2 firmware diff — telnetenable auth bypass PSV-2024-01...

NETGEAR WNAP320 Access Point Firmware - Remote Command Injection

NETGEAR WNAP320 Access Point Firmware version 2.0.3 could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. id: CVE-2016-1555 info: name: NETGEAR WNAP320 Access Point Firmware - Remote Command Injection author: gy741 severity: critical...

CVE-2026-9216

An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...

CVE-2026-9215

A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...

CVE-2026-9216 Insufficient input validation vulnerability exists in certain NETGEAR RAX Models

An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...

CVE-2026-9216

An insufficient input validation vulnerability affects several NETGEAR RAX series routers (RAX30, RAX35, RAX38, RAX40, RAXE300 ). A network-adjacent attacker with low privileges (e.g., WiFi credentials) can crash the router's management UI , causing limited availability impact. No confidentiality...

EUVD-2026-73164

An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...

CVE-2026-9216 Insufficient input validation vulnerability exists in certain NETGEAR RAX Models

An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...

EUVD-2026-73163

A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...

CVE-2026-9215 A CSRF vulnerability exists in certain NETGEAR XR series devices

A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...

CVE-2026-9215

A CSRF vulnerability in the web interfaces of NETGEAR XR500, XR1000, and XR1000v2 routers allows an attacker, via social engineering , to induce a router administrator into tampering with router configuration, resulting in high integrity and availability impact with no confidentiality impact. The...

CVE-2026-9215 A CSRF vulnerability exists in certain NETGEAR XR series devices

A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...

CVE-2026-9216: Stack-based Buffer Overflow

An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...

PT-2026-88156

A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...