CVE-2024-6813

CVE-2024-6813 affects NETGEAR ProSAFE Network Management System. The vulnerability is in the getSortString method, where insufficient validation of a user-supplied string used to build SQL queries permits SQL Injection that can lead to remote code execution in the context of SYSTEM. Exploitation ...

EUVD-2024-47837

NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this...

CVE-2024-6813 NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability

NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this...

NETGEAR ProSAFE Elevation of Privilege Vulnerability

NETGEAR ProSAFE is a network management system from NETGEAR. An elevation of privilege vulnerability exists in NETGEAR ProSAFE, which can be exploited by an attacker to elevate privileges...

The vulnerability of NETGEAR R7000 Wi-Fi routers’ microprogramming software, related to buffer overflow in the stack, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of NETGEAR R7000 Wi-Fi routers’ microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software, related to deficiencies in authentication procedures, allows attackers to circumvent existing security restrictions.

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions...

NETGEAR WN604 Information Disclosure Vulnerability

The NETGEAR WN604 is a small wireless router from NETGEAR. An information disclosure vulnerability exists in the NETGEAR WN604. An attacker can use this vulnerability to access the siteSurvey.php page to obtain sensitive information such as the SSID, security type, encryption method, and channel ...

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software, related to access control deficiencies, allows intruders to compromise the confidentiality and integrity of protected information.

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to compromise the confidentiality and integrity of the protected information...

NETGEAR ProSAFE Network Management System SQL Injection Vulnerability (CNVD-2025-11171)

NETGEAR ProSAFE Network Management System is a network management system. The NETGEAR ProSAFE Network Management System suffers from a SQL injection vulnerability that can be exploited by an attacker to submit a specially crafted SQL request to manipulate a database, obtain sensitive information,...

NETGEAR ProSAFE Network Management System SQL Injection Vulnerability

NETGEAR ProSAFE Network Management System is a network management system. The NETGEAR ProSAFE Network Management System suffers from a SQL injection vulnerability that can be exploited by an attacker to submit a specially crafted SQL request to manipulate a database, obtain sensitive information,...

CVE-2024-7153

A vulnerability classified as problematic has been found in Netgear WN604 up to 20240719. Affected is an unknown function of the file siteSurvey.php. The manipulation leads to direct request. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use...

CVE-2024-7153 Netgear WN604 siteSurvey.php direct request

A vulnerability classified as problematic has been found in Netgear WN604 up to 20240719. Affected is an unknown function of the file siteSurvey.php. The manipulation leads to direct request. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use...

CVE-2024-7153 Netgear WN604 siteSurvey.php direct request

A vulnerability classified as problematic has been found in Netgear WN604 up to 20240719. Affected is an unknown function of the file siteSurvey.php. The manipulation leads to direct request. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use...

CVE-2024-7153

The provided connected documents confirm CVE-2024-7153 affects NETGEAR WN604 (up to 20240719), specifically the siteSurvey.php function. The vulnerability is described as an unknown function manipulation that can be triggered remotely via a direct request, with exploitation disclosed publicly. So...

PT-2024-38115 · NetGear · Netgear Wn604

Name of the Vulnerable Software and Affected Versions: Netgear WN604 up to 20240719 Description: A problematic vulnerability has been found, affecting an unknown function of the file siteSurvey.php. The manipulation leads to direct request and can be launched remotely. The exploit has been...

The vulnerability of the /downloadFile.php web interface of Netgear WN604 software, which allows a hacker to disclose protected information

The vulnerability of the /downloadFile.php web interface of Netgear WN604 router software lies in the insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

NETGEAR RAX30 Stack Buffer Overflow Vulnerability (CNVD-2024-33904)

The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. The NETGEAR RAX30 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

NETGEAR WN604 Information Disclosure Vulnerability

The NETGEAR WN604 is a small wireless router from NETGEAR. The NETGEAR WN604 suffers from an information disclosure vulnerability that originates in the parameter file of file/downloadFile.php, which is not sufficiently protected for sensitive information and can be exploited by an attacker to...

NETGEAR RAX30 Command Injection Vulnerability (CNVD-2024-33905)

The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. The NETGEAR RAX30 suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary code...

NETGEAR ProSAFE Arbitrary File Upload Vulnerability (CNVD-2024-33897)

NETGEAR ProSAFE is a network management system from NETGEAR. An arbitrary file upload vulnerability exists in NETGEAR ProSAFE, which can be exploited by an attacker to execute arbitrary code...