CVE-2024-52018

Netgear XR300 v1.0.3.78 was discovered to contain a command injection vulnerability in the systemname parameter at geniedyn.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...

NETGEAR XR300 安全漏洞

The NETGEAR XR300 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR XR300 v1.0.3.78, which originates from the passphrase parameter in the wireless.cgi component that fails to properly validate the length of the input data, and can be exploited by a remote...

NETGEAR XR300 安全漏洞

NETGEAR XR300 is a wireless router from NETGEAR. A security vulnerability exists in NETGEAR XR300 version v1.0.3.78, which stems from a buffer overflow vulnerability contained in the ssid parameter in the bridgewirelessmain.cgi component...

PT-2024-8271 · NetGear · Netgear R6400 +3

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Netgear XR300 version 1.0.3.78 Netgear R7000P version 1.3.3.154 Netgear R6400 v2 version 1.0.4.128 Description: The issue is related to a stack overflow vulnerability in the genie pptp.cgi script of Netgear...

PT-2024-8361 · NetGear · Netgear Xr300 +3

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Netgear XR300 version 1.0.3.78 Netgear R7000P version 1.3.3.154 Netgear R6400 v2 version 1.0.4.128 Description: The issue is related to a stack overflow in the pptp.cgi script of Netgear routers, specifically...

CVE-2024-52030

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at ruwanflow.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51017

Netgear R7000P v1.3.3.154 contains a stack overflow in the l2tp.cgi component, triggered by the l2tp_user_netmask input. Multiple sources (NVD, Red Hat, CNVD, CNNVD) describe this as a vulnerability that can be exploited by sending crafted POST requests to cause Denial of Service; CNVD additional...

CVE-2024-50998

Netgear R8500 v1.0.2.160 is affected by CVE-2024-50998 due to multiple stack overflow vulnerabilities in the openvpn.cgi component. The openvpn_service_port and openvpn_service_port_tun parameters can trigger a buffer/stack overflow, leading to a Denial of Service (DoS) and, in some sources, pote...

CVE-2024-50996

The CVE-2024-50996 issue affects Netgear devices (R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, R6400 v2 1.0.4.128) due to a stack overflow in the genie_bpa.cgi script via the bpa_server parameter. A crafted POST request can trigger a Denial of Service. Multiple sources confirm the vulner...

CVE-2024-52016

Netgear devices (R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, R6400 v2 1.0.4.128) are affected by multiple stack overflow vulnerabilities in the wlg_adv.cgi component. The root cause is improper handling of the apmode_dns1_pri and apmode_dns1_sec parameters, enabling a crafted POST reque...

CVE-2024-50995

CVE-2024-50995 affects Netgear R8500 v1.0.2.160. A stack overflow in the usb_remote_smb_conf.cgi component, triggered by the share_name parameter, allows a crafted POST request to cause a Denial of Service. The Red Hat, NVD, CVE lists and enrichment sources confirm this vulnerability and its basi...

CVE-2024-52021

CVE-2024-52021 affects Netgear R8500 v1.0.2.160. The vulnerability is a command injection in the wan_gateway parameter of the bsw_fix.cgi endpoint, caused by inadequate filtering of input used in OS commands. An attacker can execute arbitrary OS commands via a crafted request, enabling high-sever...

CVE-2024-51009

Netgear R8500 v1.0.2.160 is affected by a command-injection vulnerability in the ether.cgi endpoint, exploitable via the wan_gateway parameter. Root cause across sources is improper handling/filtering of command-related characters, enabling arbitrary OS command execution through a crafted request...

CVE-2024-51001

Affected product: Netgear R8500 v1.0.2.160. Vulnerability: stack overflow in the ddns.cgi component via the sysDNSHost parameter. Impact: Denial of Service (DoS) via a crafted POST request. Root cause (as described): improper handling/validation of input length leading to a stack overflow. Exploi...

CVE-2024-51012

CVE-2024-51012 affects Netgear R8500 v1.0.2.160. The vulnerability is a stack overflow in the ipv6_fix.cgi component triggered by the ipv6_pri_dns parameter, allowing an attacker to cause a Denial of Service via a crafted POST request. Public details consistently name the affected firmware/versio...

CVE-2024-52024

The CVE-2024-52024 issue affects Netgear XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400 v2 (1.0.4.128). It is a stack overflow in the wizpppoe.cgi component triggered by the pppoe_localip parameter, allowing a crafted POST request to cause a Denial of Service. Publicly available details in con...

CVE-2024-51010

Netgear router family (R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, R6400 v2 1.0.4.128) contains a command injection vulnerability in the ap_mode.cgi component via the apmode_gateway parameter. Root cause: failure to neutralize special OS command elements when processing the apmode_gatew...

CVE-2024-51011

The CVE-2024-51011 entry covers a stack overflow vulnerability in NETGEAR devices (XR300 v1.0.3.78, R7000P v1.3.3.154, R6400 v2 1.0.4.128) triggered by the pppoe_localip parameter in pppoe.cgi. Exploitation can cause a Denial of Service via a crafted POST request. The available connected document...

CVE-2024-52015

The CVE-2024-52015 issue affects Netgear R8500 (v1.0.2.160), XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400 v2 (v1.0.4.128). A stack overflow in the bsw_pptp.cgi component is triggered by the pptp_user_ip parameter, enabling a crafted POST request to cause Denial of Service. The vulnerability ...

CVE-2024-51020

Netgear R7000P is affected by CVE-2024-51020 due to a stack overflow in the USB ISP web interface. The vulnerability stems from improper handling of the apn parameter in usbISP_detail_edit.cgi, allowing a crafted POST request to trigger a DoS. Affected device: Netgear R7000P (v1.3.3.154). Root ca...