Buffer overflow

Netgear DG834Gv5 1.6.01.34 was discovered to contain multiple buffer overflows via the wlassid and wlatempssid parameters at bswssid.cgi...

Buffer overflow

Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wlassid and wlgssid parameters at genieapwifichange.cgi...

Command injection

Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgradehandler function via the firmwareRestore and firmwareServerip parameters...

Buffer overflow

Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wlatempssid parameter at acosNvramConfigset...

Buffer overflow

Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the httppasswd parameter in password.cgi...

Buffer overflow

Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wlassid and wlgssid parameters at iaapsetting.cgi...

Buffer overflow

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the checkauth function...

Buffer overflow

Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the httppassword parameter at setup.cgi...

CVE-2023-38412

Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wlassid and wlgssid parameters at iaapsetting.cgi...

NETGEAR R7100LG 命令注入漏洞

The NETGEAR R7100LG is a router from the American company NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. The NETGEAR R7100LG version 1.0.0.78 suffers from a command injection vulnerability that stems from the password parameter in...

NETGEAR WG302 Command Injection Vulnerability

NETGEAR WG302 is a wireless access point from NETGEAR. A security vulnerability exists in the NETGEAR WG302v2 version v5.2.9, WAG302v2 version v5.1.19, which stems from the firmwareRestore and firmwareServerip parameters in the upgradehandler function containing multiple command injection...

CVE-2023-38926

Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wlatempssid parameter at acosNvramConfigset...

CVE-2023-38926

Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wlatempssid parameter at acosNvramConfigset...

CVE-2023-38924

Netgear DGN3500 (firmware 1.1.00.37) is affected by a buffer overflow in the setup.cgi http_password parameter. Multiple sources concur that improper validation of the input length can allow a remote attacker to leverage the overflow, potentially enabling arbitrary code execution or denial of ser...

NETGEAR XR300 安全漏洞

The NETGEAR XR300 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR XR300 v1.0.3.78, which originates from a failure to properly validate the length of the input data via the wlassid and wlgssid parameters of genieapwifichange.cgi, which can be exploited by a...

PT-2023-25594 · NetGear · Netgear Xr300

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue concerns multiple buffer overflows that can be triggered via the wla ssid and wlg ssid parameters at the "genie ap wifi change.cgi" endpoint. Recommendations: For Netgear XR300 version...

CVE-2023-38591

Netgear DG834Gv5 1.6.01.34 was discovered to contain multiple buffer overflows via the wlassid and wlatempssid parameters at bswssid.cgi...

NETGEAR DG834G 安全漏洞

The NETGEAR DG834Gv5 is a wireless ADSL firewall modem from NETGEAR. The NETGEAR DG834Gv5 version 1.6.01.34 suffers from a buffer overflow vulnerability that originates from a failure to properly validate the length of the input data in the wlassid and wlatempssid parameters via bswssid.cgi, whic...

CVE-2023-38922

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the updateauth function...

CVE-2023-38926

Netgear EX6200 v1.0.3.94 is affected by a buffer overflow in acosNvramConfig_set via the wla_temp_ssid parameter. The issue is documented across multiple sources (NVD, CNVD, Red Hat, CVE listing) with impact described as potential arbitrary code execution or denial of service. Affected component/...