(Pwn2Own) NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within fingdil service. The issue results from the lack of proper validation of...

PT-2024-4356 · NetGear · Netgear Rax30

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. The specific flaw exists within the fing dil service,...

(Pwn2Own) NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files via HTTPS. The issu...

PT-2024-4344 · NetGear · Netgear Rax30

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 routers affected versions not specified Description: This issue allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations. The flaw exists within the downloading of files v...

CVE-2024-36790

Netgear WNR614 JNR1010V2/N300-V1.1.0.541.0.1 was discovered to store credentials in plaintext...

CVE-2024-36788

Netgear WNR614 JNR1010V2 N300-V1.1.0.541.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices...

CVE-2024-36789

An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.541.0.1 allows attackers to create passwords that do not conform to defined security standards...

CVE-2024-36792

An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.541.0.1 allows attackers to gain access to the router's pin...

CVE-2024-36789

An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.541.0.1 allows attackers to create passwords that do not conform to defined security standards...

CVE-2024-36792

An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.541.0.1 allows attackers to gain access to the router's pin...

CVE-2024-36787

An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.541.0.1 allows attackers to bypass authentication and access the administrative interface via unspecified vectors...

CVE-2024-36787

An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.541.0.1 allows attackers to bypass authentication and access the administrative interface via unspecified vectors...

CVE-2024-36788

Netgear WNR614 JNR1010V2 N300-V1.1.0.541.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices...

CVE-2024-36790

Netgear WNR614 JNR1010V2/N300-V1.1.0.541.0.1 was discovered to store credentials in plaintext...

CVE-2024-36788

Netgear WNR614 JNR1010V2 N300-V1.1.0.541.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices...

CVE-2024-36788

CVE-2024-36788 affects Netgear WNR614 (JNR1010V2, N300-V1.1.0.54_1.0.1). The issue is improper setting of the HTTPOnly flag on cookies, which could allow an attacker to intercept and access sensitive communications between the router and connected devices. The core technical detail documented acr...

CVE-2024-36790

Netgear WNR614 JNR1010V2/N300-V1.1.0.541.0.1 was discovered to store credentials in plaintext...

CVE-2024-36790

Netgear WNR614 JNR1010V2/N300-V1.1.0.541.0.1 was discovered to store credentials in plaintext...

CVE-2024-36790

CVE-2024-36790 applies to Netgear WNR614 (JNR1010V2/N300) with firmware versions 1.1.0.54 and 1.0.1, where credentials are stored in plaintext. The root cause is unencrypted storage of protected information on the device, enabling potential disclosure of credentials. The NVD entry lists a high im...

CVE-2024-36789

CVE-2024-36789 concerns the Netgear WNR614 router (N300 series) where the weak password policy allows creation of passwords that do not meet defined security standards (under firmware N300-V1.1.0.54_1.0.1). The vulnerability arises from password requirements that do not enforce strong, compliant ...