102 matches found
CVE-2017-18758
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42...
CVE-2020-14440
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before...
CVE-2024-23690
The end-of-life Netgear FVS336Gv2 and FVS336Gv3 are affected by a command injection vulnerability in the Telnet interface. An authenticated and remote attacker can execute arbitrary OS commands as root over Telnet by sending crafted "util backupconfiguration" commands...
CVE-2024-12988
A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub16C4C of the component HTTP Header Handler. The manipulation of the argument Host leads to buffer overflow. The attack can be launched remotely. The...
NETGEAR R8500、XR300、R7000P和R6400v2 安全漏洞
NETGEAR R6400v2 and others are products of NETGEAR USA.NETGEAR R6400v2 is a router.NETGEAR R7000P is a wireless router.NETGEAR XR300 is a wireless router. A security vulnerability exists in the NETGEAR R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128, which originates...
The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software, related to weak password requirements, allows attackers to create arbitrary passwords.
The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software is related to weak password requirements. Exploiting this vulnerability allows a remote attacker to create arbitrary passwords...
CVE-2024-36787
An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.541.0.1 allows attackers to bypass authentication and access the administrative interface via unspecified vectors...
CVE-2024-36792
An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.541.0.1 allows attackers to gain access to the router's pin...
CVE-2022-48196
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX40 before 1.0.2.60, RAX35 before 1.0.2.60, R6400v2 before 1.0.4.122, R6700v3 before 1.0.4.122, R6900P before 1.3.3.152, R7000P before 1.3.3.152, R7000 before 1.0.11.136, R7960P before 1.4.4.9...
Netgear NETGEAR 命令注入漏洞
Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in certain NETGEAR devices that stems from the fact that some NETGEAR devices are subject to command back...
A week in security (Nov 15 – Nov 21)
Last week on Malwarebytes Labs Instagram’s memorialize feature abused to memorialize…Instagram’s boss Evasive manoeuvres: HTML smuggling explained FBI server hijacked to send up to 100,000 bogus attack mails New Mac malware raises more questions about Apple’s security patching SharkBot Android...
CVE-2021-29079
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12...
The vulnerability of NETGEAR’s embedded software exists due to the lack of measures taken to neutralize special elements used in the operating system commands. This allows a hacker to execute arbitrary commands.
The vulnerability in NETGEAR’s embedded software exists because measures are not taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Vulnerability in Trust Management Issues in Multiple NETGEAR Products (CNVD-2020-33660)
NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 and others are a wireless WiFi device from NETGEAR. NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 version 2.5.1.106, Outdoor Satellite RBS50Y version 2.5.1.106 and Pro Tri-Band Business WiFi A trust management...
Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-46568)
NETGEAR D3600 and others are products of NETGEAR, Inc.NETGEAR D3600 is a wireless modem.NETGEAR D6100 is a wireless modem.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless...
Unspecified Vulnerability in Multiple NETGEAR Products (CNVD-2021-52943)
NETGEAR R6400 and others are products of NETGEAR, Inc.NETGEAR R6400 is a wireless router.NETGEAR R6700 is a wireless router.NETGEAR D7800 is a wireless modem.NETGEAR D7800 is a wireless modem.NETGEAR D7800 is a wireless modem.NETGEAR D7800 is a wireless modem.NETGEAR D7800 is a wireless...
NETGEAR has an unspecified vulnerability
The NETGEAR D3600 and NETGEAR D6000 are both a wireless modem from NETGEAR. A security vulnerability exists in the NETGEAR D3600 prior to version 1.0.0.76 and the D6000 prior to version 1.0.0.76, which stems from a misconfiguration of security settings. No details of the vulnerability are availab...
NETGEAR Information Disclosure Vulnerability
The NETGEAR R6700v2 and NETGEAR R6800 are both a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR R6700v2 prior to version 1.1.0.38 and the R6800 prior to version 1.1.0.38. An attacker could exploit the vulnerability to obtain administrative credentials...
CVE-2017-18822
CVE-2017-18822 affects NETGEAR managed switches (M4300-28G/52G, M4300-28G-POE+, M4300-52G-POE+, M4300-8X8F, M4300-12X12F, M4300-24X24F, M4300-24X, M4300-48X, and M4200) before firmware version 12.0.2.15. The issue is a vertical privilege escalation in the device’s firmware; details about the root...