CVE-2024-51017

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the l2tpusernetmask parameter at l2tp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50993

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at adminaccount.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...

CVE-2024-51006

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6staticip parameter in the ipv6tunnel function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51014

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssidan parameter in bridgewirelessmain.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-52019

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wangateway parameter at geniefix2.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...

CVE-2024-51021

Netgear wireless routers, specifically the XR300 v1.0.3.78 , R7000P v1.3.3.154 , and R6400 v2 1.0.4.128 , are susceptible to a command injection vulnerability in the genie_fix2.cgi microprogramming software. The root cause is the improper neutralization of special elements used in operating syste...

CVE-2024-50996

Netgear routers, specifically models R8500 v1.0.2.160 , XR300 v1.0.3.78 , R7000P v1.3.3.154 , and R6400 v2 1.0.4.128 , are susceptible to a stack overflow vulnerability. The issue exists in the genie_bpa.cgi script when processing the bpa_server parameter due to a buffer copy without checking the...

CVE-2024-51011

Netgear wireless routers, specifically the XR300 (v1.0.3.78) , R7000P (v1.3.3.154) , and R6400 v2 (v1.0.4.128) , are susceptible to a stack overflow vulnerability. The flaw exists within the pppoe.cgi component during the processing of the pppoe_localip parameter. An attacker can exploit this by ...

CVE-2024-51014

The Netgear XR300 router, specifically version v1.0.3.78 , is susceptible to a stack overflow vulnerability within the bridge_wireless_main.cgi script. The root cause is the improper handling of the ssid_an parameter, which allows a remote attacker to trigger a Denial of Service (DoS) by sending ...

CVE-2024-52021

The Netgear R8500 router (version v1.0.2.160 ) is vulnerable to a command injection flaw in the bsw_fix.cgi component. The issue occurs because the wan_gateway parameter fails to properly filter or neutralize special characters used in operating system commands. A remote attacker can exploit this...

CVE-2024-52017

The Netgear XR300 wireless router (v1.0.3.78) contains a stack overflow vulnerability in the bridge_wireless_main.cgi component. The root cause is the copying of buffers without checking the size of the input data during the processing of the passphrase parameter. A remote attacker can exploit th...

CVE-2024-52013

Several Netgear router models, including R8500 v1.0.2.160 , XR300 v1.0.3.78 , R7000P v1.3.3.154 , and R6400 v2 1.0.4.128 , are vulnerable to a stack overflow in the wiz_pptp.cgi script. The root cause is the improper copying of buffers without verifying the size of the input data when processing ...

CVE-2024-51015

The Netgear R7000P wireless router (v1.3.3.154) is vulnerable to a command injection vulnerability via the device_name2 parameter in the operation_mode.cgi component. The root cause involves a failure to correctly filter command special characters and is also characterized as a stack-based buffer...

CVE-2024-51012

The Netgear R8500 router (version 1.0.2.160 ) is vulnerable to a stack overflow within the ipv6_fix.cgi script. The root cause is a failure to correctly validate the length of incoming data for the ipv6_pri_dns parameter. A remote attacker can exploit this by sending a specially crafted POST requ...

CVE-2024-51005

The Netgear R8500 router (firmware version v1.0.2.160 ) is susceptible to a command injection vulnerability within the usb_remote_smb_conf.cgi script. The root cause is the failure to properly neutralize special elements in the operating system's command when processing the share_name parameter. ...

CVE-2024-52029

The Netgear R7000P wireless router (version v1.3.3.154 ) is vulnerable to a stack overflow within the genie_pptp.cgi script. The flaw is triggered by the pptp_user_netmask parameter, which fails to properly validate the length of input data when copying it into a buffer. A remote attacker can exp...

CVE-2024-50999

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at password.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...

PT-2024-8245

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue is related to a buffer overflow in the bridge wireless main.cgi script of the Netgear XR300 router's firmware, specifically when handling the passphrase parameter. This can be exploited by...

CVE-2024-50999

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at password.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...

PT-2024-8320 · NetGear · Netgear R8500

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This allows a remote attacker to execute arbitrary commands by sending a specially...