CVE-2024-51008

The Netgear XR300 wireless router, specifically version v1.0.3.78 , contains a command injection vulnerability in the wiz_dyn.cgi script. The root cause is the failure to properly neutralize special elements and characters within the system_name parameter when processing incoming requests. A remo...

CVE-2024-51009: Improper Neutralization of Special Elements used in an OS Command

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wangateway parameter at ether.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...

CVE-2024-52015

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptpuserip parameter at bswpptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2024-8390 · NetGear · Netgear R8500

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Description: The issue is related to a command injection vulnerability in the share name parameter at the "usb remote smb conf.cgi" endpoint. This vulnerability allows attackers to execute arbitrary OS commands...

PT-2024-8545 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.3.154 Description: The issue is related to a stack overflow in the pptp user netmask parameter at the "pptp.cgi" endpoint. This allows attackers to cause a Denial of Service DoS via a crafted POST request. The...

PT-2024-8541

Name of the Vulnerable Software and Affected Versions Netgear R7000P version 1.3.3.154 Description The issue is related to a stack overflow vulnerability in the l2tp.cgi script of the NETGEAR R7000P router's firmware. This vulnerability occurs when handling the l2tp user netmask parameter...

PT-2024-8537 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.3.154 Description: The issue is related to a stack overflow in the pppoe.cgi script when handling the pppoe localnetmask parameter. This allows attackers to cause a Denial of Service DoS via a crafted POST request t...

PT-2024-8543 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.3.154 Description: The issue is related to a command injection vulnerability via the device name2 parameter at the "operation mode.cgi" endpoint. This allows attackers to execute arbitrary OS commands via a crafted...

PT-2024-8322 · NetGear · Netgear Xr300 +3

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Netgear XR300 version 1.0.3.78 Netgear R7000P version 1.3.3.154 Netgear R6400 v2 version 1.0.4.128 Description: The issue is related to multiple stack overflow vulnerabilities in the ap mode.cgi component. Thes...

PT-2024-8525 · NetGear · Netgear R8500

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Description: A command injection issue has been discovered in the wan gateway parameter at the "ether.cgi" endpoint. This allows attackers to execute arbitrary OS commands via a crafted request. The vulnerabili...

PT-2024-8539 · NetGear · Netgear Xr300

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue is related to a stack overflow in the addName%d parameter of the usb approve.cgi script, which can be exploited by sending a specially crafted POST request. This can allow a remote attacke...

PT-2024-8378 · NetGear · Netgear R8500

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Description: The issue is related to a stack overflow vulnerability in the ipv6 fix.cgi script of the NETGEAR R8500 router's firmware, specifically when handling the ipv6 pri dns parameter. This can be exploite...

PT-2024-8388 · NetGear · Netgear Xr300

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue is related to a stack overflow vulnerability in the bridge wireless main.cgi script of the NETGEAR XR300 router's firmware when handling the ssid an parameter. This can be exploited by a...

PT-2024-8535 · NetGear · Netgear Xr300

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue is related to a command injection vulnerability in the system name parameter at the "wiz dyn.cgi" endpoint. This vulnerability can be exploited by sending a specially crafted request,...

PT-2024-8373

Name of the Vulnerable Software and Affected Versions Netgear XR300 version 1.0.3.78 Netgear R7000P version 1.3.3.154 Netgear R6400 v2 version 1.0.4.128 Description The issue is related to a stack overflow vulnerability in the pppoe.cgi script, specifically via the pppoe localip parameter. This...

PT-2024-8387 · NetGear · Netgear R8500 +1

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Netgear R7000P version 1.3.3.154 Description: The issue is related to multiple stack overflow vulnerabilities in the usb device.cgi component of Netgear routers. These vulnerabilities can be exploited via the...

PT-2024-8389 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.3.154 Description: The issue is related to a stack overflow vulnerability in the wireless.cgi script of the NETGEAR R7000P router's firmware, specifically when handling the RADIUSAddr%d wla parameter. This can be...

PT-2024-8391 · NetGear · Netgear Xr300 +3

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Netgear XR300 version 1.0.3.78 Netgear R7000P version 1.3.3.154 Netgear R6400 v2 version 1.0.4.128 Description: A command injection issue was discovered in the ap mode.cgi component of Netgear routers,...

PT-2024-9811 · NetGear · Netgear R8500

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Description: The issue is related to a stack overflow in the ipv6 tunnel function when handling the ipv6 static ip parameter. This can be exploited by a remote attacker to cause a Denial of Service DoS using a...

NETGEAR XR1000 Script Command Execution

The vulnerability in the usbremotesmbconf.cgi script of NETGEAR XR1000 Wi-Fi routers lies in the lack of measures for sanitizing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the sharename parameter...