CVE-2024-57235

NETGEAR RAX5 (AX1600) firmware 1.0.2.26 is affected by CVE-2024-57235 due to a command injection in the iface parameter of the vif_enable function. Public sources describe an attack that can execute arbitrary commands via this parameter. The NVD/CVE metadata indicates a high-severity, network-bas...

CVE-2024-57233

NETGEAR RAX5 AX1600 WiFi Router v1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...

PT-2025-19721 · NetGear · Netgear Rax5

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the ifname parameter in the apcli do enr pin wps function. Recommendations: For version 1.0.2.26, consider...

CVE-2024-57232

CVE-2024-57232 affects NETGEAR RAX5 (AX1600 WiFi Router) with a command injection vulnerability in the ifname parameter of the apcli_wps_gen_pincode function (v1.0.2.26). The issue arises from insufficient input filtering of crafted characters, enabling potential arbitrary command execution via t...

CVE-2024-57232

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...

PT-2025-19724 · NetGear · Netgear Rax5

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the iface parameter in the vif enable function. This allows for potential exploitation. Recommendations: For versio...

NETGEAR RAX5 安全漏洞

The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability, which stems from the devname parameter in the resetwifi function failing to correctly filter constructed command special characters, commands, etc. The vulnerability can be exploited t...

CVE-2024-57235: Improper Neutralization of Special Elements used in a Command

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...

CVE-2024-57230: Improper Neutralization of Special Elements used in a Command

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpinwps function...

CVE-2024-57234: Improper Neutralization of Special Elements used in a Command

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclicancelwps function...

CVE-2024-57233: Improper Neutralization of Special Elements used in a Command

NETGEAR RAX5 AX1600 WiFi Router v1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...

CVE-2024-57232: Improper Neutralization of Special Elements used in a Command

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...

NETGEAR RAX5 安全漏洞

The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability that stems from the failure of the ifname parameter in the apclidoenrpbcwps function to correctly filter constructed command special characters, commands, and so on. An attacker can...

CVE-2024-57229: Improper Neutralization of Special Elements used in a Command

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...

CVE-2024-57231: Improper Neutralization of Special Elements used in a Command

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpbcwps function...

CVE-2024-57231

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpbcwps function...

CVE-2025-4150

A vulnerability was found in Netgear EX6200 1.0.3.94. It has been declared as critical. This vulnerability affects the function sub54340. The manipulation of the argument host leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this disclosure but...

CVE-2025-4149

A vulnerability was found in Netgear EX6200 1.0.3.94. It has been classified as critical. This affects the function sub54014. The manipulation of the argument host leads to buffer overflow. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but di...

CVE-2025-4148

A vulnerability was found in Netgear EX6200 1.0.3.94 and classified as critical. Affected by this issue is the function sub503FC. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...

CVE-2025-4147

A vulnerability has been found in Netgear EX6200 1.0.3.94 and classified as critical. Affected by this vulnerability is the function sub47F7C. The manipulation of the argument host leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about this disclosure...