CVE-2023-51634: Improper Certificate Validation

NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this...

CVE-2023-51635: Stack-based Buffer Overflow

NETGEAR RAX30 fingdil Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw...

NETGEAR XR300 DoS

The vulnerability in the usbapprove.cgi script of NETGEAR XR300 router microprogramming software is related to buffer overflow when processing the addName%d parameter. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending a specially crafted POST request...

NETGEAR R8500 Ether.cgi Command Execution

The vulnerability of the ether.cgi script in NETGEAR R8500 router microprogramming software relates to the failure to take measures to neutralize special elements used in the operating system’s processing of the wangateway parameter. Exploiting this vulnerability allows a remote attacker to execu...

NETGEAR R7000P Router DoS

The vulnerability in the pppoe.cgi script of NETGEAR R7000P router software is related to buffer overflows in the stack when processing the pppoelocalnetmask parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted POST request...

NETGEAR XR300 wiz_dyn.cgi Command Execution

The vulnerability in the wizdyn.cgi script of NETGEAR XR300 router microprogramming software relates to the failure to take measures to neutralize special elements used in operating system commands when processing the parameter systemname. Exploiting this vulnerability allows a malicious actor to...

NETGEAR R7000P Router L2TP DoS

The vulnerability of the l2tp.cgi script in the NETGEAR R7000P router’s microprogramming system is related to buffer overflows in the stack when processing the l2tpusernetmask parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted...

NETGEAR R7000P Operation Mode Command Execution

The vulnerability in the operationmode.cgi script of NETGEAR R7000P router microprogramming software is related to buffer overflow during the processing of the devicename2 parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

NETGEAR R7000P Routing DoS

The vulnerability in the pptp.cgi script of NETGEAR R7000P router software is related to buffer overflows in the stack when processing the pptpusernetmask parameter. Exploiting this vulnerability allows an attacker to cause a service failure by sending a specially crafted POST request remotely...

pptp.cgi DoS

The vulnerability in the pptp.cgi subroutine of Netgear’s router software models R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the pptpuserip parameter. Exploiting this vulnerability allows a malicious actor ...

Netgear R8500 ddns.cgi DoS

The vulnerability in the ddns.cgi microprogramming software of Netgear R8500 routers stems from the copying of buffers without checking the size of the input data during the processing of the sysDNSHos parameter. Exploiting this vulnerability allows a malicious actor to cause service failures...

Netgear genie_bpa.cgi DoS

The vulnerability in the geniebpa.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the bpaserver parameter. Exploiting this vulnerability allows a...

Netgear R8500 Router DoS

The vulnerability in the l2tp.cgi script of Netgear routers such as R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffer data without checking the size of the input data during the processing of the l2tpuserip parameter. Exploiting this vulnerability allows a malicious actor to cause...

Netgear R8500 Router DoS

The vulnerability in the wireless.cgi script of Netgear R8500 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of parameters opmode, opmodean, and opmodean2. Exploiting this vulnerability allows a malicious actor to caus...

Netgear R8500 Router DoS

The vulnerability in the usbremotesmbconf.cgi script of Netgear R8500 router microprogramming software lies in the copying of buffers without checking the size of the input data during the processing of the sharename parameter. Exploiting this vulnerability allows a malicious actor to cause servi...

Netgear R8500 OpenVPN DoS

The vulnerability in the openvpn.cgi microprogramming system of Netgear R8500 relates to the copying of buffers without checking the size of the input data during the processing of parameters openvpnserviceport and openvpnserviceporttun. Exploiting this vulnerability allows a malicious actor to...

Netgear XR300 wireless.cgi DoS

The vulnerability in the wireless.cgi script of Netgear XR300 router software lies in the copying of buffers without checking the size of the input data during the processing of the passphrase parameter. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a...

NETGEAR usb_device.cgi DoS

The vulnerability in the usbdevice.cgi script of NETGEAR’s R8500 and R7000P router microprogramming systems lies in a buffer overflow that occurs during the processing of the cifsuser, readaccess, and writeaccess parameters. Exploiting this vulnerability allows an attacker to trigger a...

NETGEAR XR300 DoS

The vulnerability in the bridgewirelessmain.cgi script of NETGEAR XR300 router software is related to buffer overflows in the stack when processing the parameter ssidan. Exploiting this vulnerability allows a malicious actor to trigger a Denial-of-Service attack by sending a specially crafted POS...

NETGEAR R7000P wireless.cgi DoS

The vulnerability in the wireless.cg script of NETGEAR R7000P router software is related to buffer overflow when processing the RADIUSAddr%dwla parameter. Exploiting this vulnerability allows a malicious actor to trigger a Denial-of-Service attack by sending a specially crafted POST request...