14699 matches found
CVE-2024-51007
Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at wireless.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2024-52028
Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at wizpptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2024-52018
Netgear XR300 v1.0.3.78 was discovered to contain a command injection vulnerability in the systemname parameter at geniedyn.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...
CVE-2024-51016
Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the addName%d parameter in usbapprove.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2024-50994
Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component ipv6fix.cgi via the ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, and ipv6lanlength parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST...
PT-2024-8367 · NetGear · Netgear R8500
Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Description: The issue is related to a command injection vulnerability in the sysNewPasswd parameter at the "admin account.cgi" endpoint. This vulnerability allows attackers to execute arbitrary OS commands via...
CVE-2024-51000
Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component wireless.cgi via the opmode, opmodean, and opmodean2 parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2024-52021
Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wangateway parameter at bswfix.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...
CVE-2024-51017
Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the l2tpusernetmask parameter at l2tp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2024-51014
Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssidan parameter in bridgewirelessmain.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2024-51014
The Netgear XR300 router, specifically version v1.0.3.78 , is susceptible to a stack overflow vulnerability within the bridge_wireless_main.cgi script. The root cause is the improper handling of the ssid_an parameter, which allows a remote attacker to trigger a Denial of Service (DoS) by sending ...
CVE-2024-52013
Several Netgear router models, including R8500 v1.0.2.160 , XR300 v1.0.3.78 , R7000P v1.3.3.154 , and R6400 v2 1.0.4.128 , are vulnerable to a stack overflow in the wiz_pptp.cgi script. The root cause is the improper copying of buffers without verifying the size of the input data when processing ...
CVE-2024-51012
The Netgear R8500 router (version 1.0.2.160 ) is vulnerable to a stack overflow within the ipv6_fix.cgi script. The root cause is a failure to correctly validate the length of incoming data for the ipv6_pri_dns parameter. A remote attacker can exploit this by sending a specially crafted POST requ...
CVE-2024-51005
The Netgear R8500 router (firmware version v1.0.2.160 ) is susceptible to a command injection vulnerability within the usb_remote_smb_conf.cgi script. The root cause is the failure to properly neutralize special elements in the operating system's command when processing the share_name parameter. ...
CVE-2024-52029
The Netgear R7000P wireless router (version v1.3.3.154 ) is vulnerable to a stack overflow within the genie_pptp.cgi script. The flaw is triggered by the pptp_user_netmask parameter, which fails to properly validate the length of input data when copying it into a buffer. A remote attacker can exp...
CVE-2024-50999
Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at password.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...
PT-2024-8245
Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue is related to a buffer overflow in the bridge wireless main.cgi script of the Netgear XR300 router's firmware, specifically when handling the passphrase parameter. This can be exploited by...
CVE-2024-50999
Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at password.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...
PT-2024-8320 · NetGear · Netgear R8500
Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This allows a remote attacker to execute arbitrary commands by sending a specially...
PT-2024-8377 · NetGear · Netgear Xr300
Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue is related to a buffer overflow in the wireless.cgi script of the Netgear XR300 router's firmware, specifically when handling the passphrase parameter. This can be exploited by a remote...