12220 matches found
CVE-2024-35519
Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operatingmode.cgi via the apmode parameter...
CVE-2024-35520
Netgear R7000 1.0.11.136 is vulnerable to Command Injection in RMTinvite.cgi via devicename2 parameter...
CVE-2024-35520
Netgear R7000 1.0.11.136 is vulnerable to Command Injection in RMTinvite.cgi via devicename2 parameter...
CVE-2024-35518
Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in geniefix2.cgi via the wandns1pri parameter...
NETGEAR EX6120、EX6100和EX3700 安全漏洞
NETGEAR EX3700 and others are products of NETGEAR Corporation USA.NETGEAR EX3700 is a wireless network signal extender.NETGEAR EX6100 is a WiFi range extender.NETGEAR EX6120 is a wireless extender. A security vulnerability exists in the Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and...
Unspecified Vulnerability in NETGEAR EX3700 (CNVD-2024-41044)
NETGEAR EX3700 is a wireless network signal extender from NETGEAR. A security vulnerability exists in the NETGEAR EX3700 prior to version 1.0.0.98, which originates from an authenticated command injection of the apmode parameter in workingmode.cgi. No details of the vulnerability are available at...
CVE-2024-35519
Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operatingmode.cgi via the apmode parameter...
CVE-2024-35519
Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operatingmode.cgi via the apmode parameter...
NETGEAR R7000 安全漏洞
The NETGEAR R7000 is a wireless router from NETGEAR. The NETGEAR R7000 version 1.0.11.136 suffers from a command injection vulnerability that stems from the devicename2 parameter failing to correctly filter constructed command special characters, commands, and so on. An attacker could exploit thi...
CVE-2024-35520
Netgear R7000 (version 1.0.11.136) is affected by a Command Injection in RMT_invite.cgi via the device_name2 parameter. Root cause: insufficient input sanitization when processing this parameter, enabling arbitrary command execution by a remote attacker. Documented impact is high for confidential...
NETGEAR EX6120 安全漏洞
The NETGEAR EX6120 is a wireless extender from NETGEAR. A command injection vulnerability exists in the NETGEAR EX6120 v1.0.0.68, which stems from the wandns1pri parameter failing to properly filter constructed command special characters, commands, and so on. An attacker can exploit this...
CVE-2024-35518
CVE-2024-35518 affects Netgear EX6120 v1.0.0.68. The vulnerability is a command injection in the genie_fix2.cgi script via the wan_dns1_pri parameter, enabling arbitrary command execution. Public sources (CNVD/CNNVD/NVD) corroborate the flaw in the same version. CVSS details in the NVD/CVE record...
Unspecified Vulnerability in NETGEAR XR1000 (CNVD-2024-41045)
The NETGEAR XR1000 is a dual-band Wi-Fi 6 router from NETGEAR designed for gaming. A security vulnerability exists in NETGEAR XR1000 version v1.0.0.64, which stems from vulnerability to command injection attacks with the sharename parameter. No details of the vulnerability are provided at this ti...
CVE-2024-35518
Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in geniefix2.cgi via the wandns1pri parameter...
CVE-2024-35519
Netgear EX6120 v1.0.0.68, EX6100 v1.0.2.28, and EX3700 v1.0.0.96 are affected by a command-injection flaw in the operating_mode.cgi script, exploitable via the ap_mode parameter. Root cause: lack of input validation on ap_mode in operating_mode.cgi leading to command execution. Impact per documen...
CVE-2024-35522
Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injection in operatingmode.cgi via the apmode parameter with ap24gmanual set to 1 and ap24gmanualsec set to NotNone...
CVE-2024-35522
Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injection in operatingmode.cgi via the apmode parameter with ap24gmanual set to 1 and ap24gmanualsec set to NotNone...
CVE-2024-35517
Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usbremotesmbconf.cgi via the sharename parameter...