Lucene search
+L

12226 matches found

CVE
CVE
added 2024/02/11 12:31 a.m.191 views

CVE-2024-1430

CVE-2024-1430 affects Netgear R7000 (firmware 1.0.11.136_10.2.120) and relates to an information-disclosure vulnerability in the Web Management Interface’s file /currentsetting.htm . The vulnerability description indicates that manipulating this unknown functionality can disclose information. Pub...

6.5CVSS4.8AI score0.0063EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2024/02/11 12:00 a.m.10 views

NETGEAR R7000 安全漏洞

The Netgear R7000 is a Netgear dual-band Gigabit wireless router. A security vulnerability exists in Netgear R7000 debuginfo.htm, which can be exploited by a remote attacker to submit a special request that can obtain sensitive information...

6.5CVSS6.7AI score0.00525EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/02/11 12:00 a.m.13 views

NETGEAR R7000 Security Vulnerability

NETGEAR R7000 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR R7000 version 1.0.11.13610.2.120, which originates from an information disclosure vulnerability in the file /currentsetting.htm...

6.5CVSS6.2AI score0.0063EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/02/10 12:00 a.m.8 views

PT-2024-18041 · NetGear · Netgear R7000

Name of the Vulnerable Software and Affected Versions: Netgear R7000 version 1.0.11.136 10.2.120 Description: A vulnerability was found in the Web Management Interface of the Netgear R7000, affecting some unknown functionality of the file /debuginfo.htm. This issue leads to information disclosure...

6.5CVSS6.7AI score0.00525EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2024/02/10 12:00 a.m.11 views

PT-2024-18040 · NetGear · Netgear R7000

Name of the Vulnerable Software and Affected Versions: Netgear R7000 version 1.0.11.136 10.2.120 Description: A vulnerability has been found in the Web Management Interface of the Netgear R7000, affecting an unknown functionality of the file /currentsetting.htm. This vulnerability leads to...

6.5CVSS6.7AI score0.0063EPSS
SaveExploits1References10
The Hacker News
The Hacker News
added 2024/02/07 6:29 a.m.124 views

Chinese Hackers Exploited FortiGate Flaw to Breach Dutch Military Network

Chinese state-backed hackers broke into a computer network that's used by the Dutch armed forces by targeting Fortinet FortiGate devices. "This computer network was used for unclassified research and development R&D," the Dutch Military Intelligence and Security Service MIVD said in a statement...

9.8CVSS9.9AI score0.99474EPSS
SaveExploits12
Malwarebytes
Malwarebytes
added 2024/02/02 12:14 p.m.28 views

FBI removes malware from hundreds of routers across the US

The FBI has used a court order to remove malware from hundreds of routers across the US, and alter the routers’ settings to prevent reinfection. The routers are malware-infected NetGear and Cisco small office/home office SOHO devices that no longer receive updates because they have reached their...

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/01/11 12:00 a.m.14 views

PT-2024-4189 · NetGear +1 · Netgear Prosafe Network Management System +1

Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: The vulnerability is related to insufficient input validation in the Tomcat component of the NETGEAR ProSAFE Network Management System. This allows a remot...

9CVSS8.8AI score0.31305EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/01/11 12:00 a.m.14 views

PT-2024-4161 · NetGear · Netgear Prosafe Network Management System

Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. The flaw exists within the product installer due to the use of default...

7.8CVSS7.5AI score0.00568EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/12/21 12:00 a.m.9 views

The vulnerability of the soapauth() function in Netgear N300 wireless router software (WNR2000v4) allows a hacker to execute arbitrary commands.

The vulnerability of the soapauth function in Netgear N300 wireless router microprogramming software WNR2000v4 is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafte...

9CVSS8.2AI score0.04007EPSS
SaveExploits1References4Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.27 views

NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Minimal user interaction is required to exploit this vulnerability. The specific flaw exists within the saveNodeLabel method. The issue results from the lack o...

8CVSS7.4AI score0.53303EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/12/19 12:00 a.m.31 views

NETGEAR WNR2000 Command Execution Vulnerability

The NETGEAR WNR2000 is a wireless router from NETGEAR. A command execution vulnerability exists in NETGEAR WNR2000 v4 version 1.0.0.70, which stems from an application failing to properly filter constructed command special characters, commands, and more. An attacker could exploit this vulnerabili...

9.8CVSS7.4AI score0.04007EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/12/15 5:15 p.m.2 views

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

9.8CVSS7.5AI score0.04007EPSS
SaveExploits1References3
OSV
OSV
added 2023/12/15 5:15 p.m.9 views

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

9.8CVSS5.9AI score0.04007EPSS
SaveExploits1References2
NVD
NVD
added 2023/12/15 5:15 p.m.19 views

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

9.8CVSS0.04007EPSS
SaveExploits1References2
Prion
Prion
added 2023/12/15 5:15 p.m.25 views

Command injection

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

7.5CVSS7.8AI score0.04007EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2023/12/15 12:00 a.m.60 views

CVE-2023-50089

CVE-2023-50089 affects NETGEAR WNR2000v4, specifically version 1.0.0.70. The issue is a command injection that arises when using HTTP for SOAP authentication, allowing command execution after successful authentication. The CVSS vector in the record indicates a network -facing, high/critical impac...

9.8CVSS9.8AI score0.04007EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/12/15 12:00 a.m.10 views

NETGEAR WNR2000 安全漏洞

The NETGEAR WNR2000 is a wireless router from NETGEAR. A command execution vulnerability exists in NETGEAR WNR2000 v4 version 1.0.0.70, which stems from an application failing to properly filter constructed command special characters, commands, and more. An attacker could exploit this vulnerabili...

9.8CVSS7.3AI score0.04007EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/12/15 12:00 a.m.26 views

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

10AI score0.04007EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/12/15 12:00 a.m.10 views

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

7.6AI score0.04007EPSS
SaveExploits1References2
Rows per page
Query Builder