The vulnerability in the genie_fix2.cgi microprogramming software for Netgear XR300, R7000P, and R6400 v2 allows a hacker to execute arbitrary commands.

The vulnerability of the geniefix2.cgi microprogramming software for Netgear XR300, R7000P, and R6400 v2 lies in the lack of measures taken to neutralize special elements used in the operating system’s commands when processing the wangateway parameter. Exploiting this vulnerability allows a remot...

The vulnerability in the genie_pptp.cgi script of Netgear router microprogramming systems such as R8500, XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the geniepptp.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 stems from the practice of copying buffers without checking the size of the input data during the processing of the pptpuserip parameter. Exploiting this vulnerabili...

The vulnerability of the wiz_fix2.cgi script of the Netgear R8500 router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the wizfix2.cgi microprogramming software for Netgear R8500 routers lies in the lack of measures to neutralize special elements used in the operating system’s commands when processing the wangateway parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability in the usbISP_detail_edit.cgi script of Netgear R7000P router software allows a hacker to induce a service failure.

The vulnerability in the usbISPdetailedit.cgi script of Netgear R7000P router microprogramming software relates to the copying of buffers without checking the size of input data during the processing of the apn parameter. Exploiting this vulnerability allows a malicious actor to cause service...

The vulnerability in the geniepppoe.cgi script of Netgear’s router software models R7000P and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the geniepppoe.cgi microprogramming software for Netgear XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of input data during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows a malicious actor to cause...

The vulnerability in the bsw_fix.cgi script of Netgear R8500 router software allows a hacker to execute arbitrary commands.

The vulnerability of the bswfix.cgi script of the Netgear R8500 router software relates to the failure to eliminate special elements used in the operating system’s commands when processing the wangateway parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary comman...

The vulnerability in the wlg_adv.cgi script of Netgear’s router microprogramming software for models R8500, XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the wlgadv.cgi script of Netgear’s router microprogramming devices, such as R8500, XR300, R7000P, and R6400 v2, stems from the copying of buffers without checking the size of the input data during the processing of parameters apmodedns1pri and apmodedns1sec. Exploiting this...

The vulnerability in the bsw_pptp.cgi script of Netgear router microprogramming systems such as R8500, XR300, R7000P, and R6400 v2 allows a hacker to induce a service failure.

The vulnerability in the bswpptp.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the pptpuserip parameter. Exploiting this vulnerability allows a...

The vulnerability in the wiz_pptp.cgi script of the Netgear R7000P router’s software allows a hacker to induce a service failure.

The vulnerability in the wizpptp.cgi script of the Netgear R7000P router’s microprogramming system is related to the copying of buffers without checking the size of the input data during the processing of the pptpusernetmask parameter. Exploiting this vulnerability allows a malicious actor to cau...

The vulnerability in the wlg_adv.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 allows a hacker to execute arbitrary commands.

The vulnerability in the wlgadv.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 relates to the failure to take data cleaning measures at the control level when processing the apmodegateway parameter. Exploiting this vulnerability allows a remote...

The vulnerability in the genie_fix2.cgi microprogramming software of Netgear R8500’s routers allows a hacker to execute arbitrary commands.

The vulnerability of the geniefix2.cgi microprogramming software for Netgear R8500 routers lies in the lack of measures to neutralize special elements used in the operating system’s commands when processing the wangateway parameter. Exploiting this vulnerability allows a remote attacker to execut...

The vulnerability in the ap_mode.cgi script of NETGEAR’s router microprogramming devices R8500, XR300, R7000P, and R6400 v2 allows a hacker to induce a service failure.

The vulnerability of the apmode.cgi script in NETGEAR’s router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in a buffer overflow that occurs during the processing of the apmodedns1pri and apmodedns1sec parameters. Exploiting this vulnerability allows an attacker to...

The vulnerability in the wiz_pptp.cgi script of the Netgear R8500, XR300, R7000P, and R6400 v2 router software allows a hacker to cause a service failure.

The vulnerability in the wizpptp.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the pptpuserip parameter. Exploiting this vulnerability allows a...

The vulnerability in the password.cgi script of Netgear R8500 router software allows a hacker to execute arbitrary commands.

The vulnerability in the password.cgi script of Netgear R8500 router microprogramming software exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by...

The vulnerability in the ru_wan_flow.cgi script of the Netgear R7000P router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability in the ruwanflow.cgi microprogramming system of Netgear R7000P routers is related to the copying of buffers without checking the size of input data during the processing of the pptpusernetmask parameter. Exploiting this vulnerability allows a malicious actor to cause service...

The vulnerability in the bridge_wireless_main.cgi script of the Netgear XR300 router’s software allows a hacker to induce a service failure.

The vulnerability in the bridgewirelessmain.cgi script of the Netgear XR300 router software lies in the copying of buffers without checking the size of the input data during the processing of the ssid parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by...

The vulnerability in the bsw_pppoe.cgi script of Netgear’s router software models XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the bswpppoe.cgi script of Netgear XR300, R7000P, and R6400 v2 routers stems from the copying of buffer data without checking the size of the input data during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows a malicious actor to cause servic...

The vulnerability in the genie_dyn.cgi script of the Netgear XR300 router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability in the geniedyn.cgi script of the Netgear XR300 router software lies in the lack of measures to neutralize special elements used in the operating system’s command when processing the parameter systemname. Exploiting this vulnerability allows a remote attacker to execute arbitrar...

The vulnerability in the bridge_wireless_main.cgi script of the Netgear XR300 router’s software allows a hacker to induce a service failure.

The vulnerability in the bridgewirelessmain.cgi script of the Netgear XR300 router software lies in the copying of buffers without checking the size of the input data during the processing of the passphrase parameter. Exploiting this vulnerability allows a malicious actor to cause a service failu...

PT-2025-13827 · NetGear · Netgear Wnr854T

Name of the Vulnerable Software and Affected Versions: Netgear WNR854T version 1.5.2 Description: The issue allows an attacker to send a specially crafted request to "post.cgi", updating the wan hostname parameter in nvram, which can lead to command injection and force a reboot. Recommendations:...