12226 matches found
NETGEAR R6850 安全漏洞
The NETGEAR R6850 is a wireless router from NETGEAR. The NETGEAR R6850 suffers from a command injection vulnerability that stems from the c4-IPAddr parameter failing to properly filter constructed command special characters, commands, and so on. An attacker can exploit this vulnerability to cause...
CVE-2024-30568
Netgear R6850 router, firmware v1.1.0.88, is affected by a command injection vulnerability in the ping_test function triggered via the c4_IPAddr parameter. The issue arises because input is not properly validated/filtered, allowing an unauthenticated attacker to inject arbitrary system commands, ...
CVE-2024-30571
An information leak in the BRStop.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...
CVE-2024-30569
Affected product: Netgear R6850 router, version 1.1.0.88. Vulnerability: Information disclosure in the currentsetting.htm page, exposing sensitive system information without authentication. Root cause (per sources): Hidden interface in currentsetting.htm that is not protected by authentication; u...
Netgear wireless router open to code execution after buffer overflow vulnerability
Cisco Talos Vulnerability Research team recently disclosed three vulnerabilities across a range of products, including one that could lead to remote code execution in a popular Netgear wireless router designed for home networks. There is also a newly disclosed vulnerability in a graphics driver f...
NETGEAR DGND4000 Elevation of Privilege Vulnerability
The NETGEAR DGND4000 is a wireless router , with modem capabilities. An elevation of privilege vulnerability exists in the ETGEAR DGND4000 that originates from elevating privileges to the /setup.cgi component via the nextfile parameter. No details of the vulnerability are provided at this time...
CVE-2023-50677
An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...
CVE-2023-50677
An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...
CVE-2023-50677
An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...
PT-2024-2649 · NetGear · Netgear Dgnd4000
Name of the Vulnerable Software and Affected Versions: NETGEAR-DGND4000 version 1.1.00.15 1.00.15 Description: The issue allows a remote attacker to escalate privileges via the next file parameter to the "/setup.cgi" component. This is related to inadequate access control in the NETGEAR DGND4000...
CVE-2023-50677
NETGEAR DGND4000 router (firmware v1.1.00.15_1.00.15) is affected by CVE-2023-50677. The issue allows a remote attacker to escalate privileges via the next_file parameter to the /setup.cgi component, reported due to inadequate access control. Exploitation details, impact scope, and patch informat...
NETGEAR CBR40/CBK40/CBM43 currentsetting.htm component information disclosure vulnerability
The NETGEAR CBR40/CBK40/CBM43 are all routers from NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. An information disclosure vulnerability exists in the NETGEAR CBR40/CBK40/CBM43, which stems from insufficient protection of sensitive informati...
NETGEAR CBR40/CBK40/CBM43 debuginfo.htm component information disclosure vulnerability
The NETGEAR CBR40/CBK40/CBM43 are all routers from NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. An information disclosure vulnerability exists in the NETGEAR CBR40/CBK40/CBM43, which stems from insufficient protection of sensitive informati...
CVE-2023-50677
An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...
NETGEAR DGND4000 安全漏洞
The NETGEAR DGND4000 is a wireless router , with modem capabilities. An elevation of privilege vulnerability exists in the ETGEAR DGND4000 that originates from elevating privileges to the /setup.cgi component via the nextfile parameter. No details of the vulnerability are provided at this time...
CVE-2023-50677
An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...
CVE-2024-28340
An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required...
CVE-2024-28339
An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required...
CVE-2024-28340
An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required...
CVE-2024-28339
An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required...