CVE-2023-38921

Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgradehandler function via the firmwareRestore and firmwareServerip parameters...

CVE-2023-38591

Netgear DG834Gv5 1.6.01.34 was discovered to contain multiple buffer overflows via the wlassid and wlatempssid parameters at bswssid.cgi...

PT-2023-26689 · NetGear · Netgear R6300V2 +2

Name of the Vulnerable Software and Affected Versions: Netgear DC112A version 1.0.0.64 Netgear EX6200 version 1.0.3.94 Netgear R6300v2 version 1.0.4.8 Description: A buffer overflow issue was discovered via the http passwd parameter in password.cgi. This issue affects Netgear devices...

CVE-2023-39550

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the checkauth function...

CVE-2023-38924

Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the httppassword parameter at setup.cgi...

CVE-2023-38922

Affected Netgear devices: JWNR2000v2 (v1.0.0.11), XWN5001 (v0.4.1.1), and XAVN2001v2 (v0.4.0.7). The issue is described as multiple buffer overflows in the update_auth function, exploitable via the http_passwd and http_username parameters. This can lead to arbitrary code execution in the worst ca...

CVE-2023-36499

Netgear XR300 v1.0.3.78 is affected by CVE-2023-36499 due to multiple buffer overflows in the genie_ap_wifi_change.cgi endpoint, triggered by parameters wla_ssid and wlg_ssid. Reported impact includes potential remote code execution or denial of service per CNVD/Red Hat entries, with CVSS v3.1 ba...

CVE-2023-38921

Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgradehandler function via the firmwareRestore and firmwareServerip parameters...

CVE-2023-38928

Netgear R7100LG 1.0.0.78 was discovered to contain a command injection vulnerability via the password parameter at usbremoteinvite.cgi...

CVE-2023-38925

CVE-2023-38925 affects Netgear devices: DC112A (v1.0.0.64), EX6200 (v1.0.3.94), and R6300v2 (v1.0.4.8) due to a buffer overflow in the http_passwd parameter of password.cgi. The root cause is a buffer overflow vulnerability in the affected CGI endpoint. The connected sources provide no exploit de...

NETGEAR JWNR2000 Security Vulnerabilities

The NETGEAR JWNR2000 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR JWNR2000 that stems from a buffer overflow vulnerability in the parameters httppasswd and httpusername. Affected products and versions: Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, XAVN2001v2...

NETGEAR EX6200 安全漏洞

NETGEAR EX6200 is a wireless network signal extender from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR EX6200 v1.0.3.94, which originates from the wlatempssid parameter in acosNvramConfigset that fails to correctly validate the length and size of the input data, and can be...

PT-2023-27016 · NetGear · Netgear Wnr2000V2

Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 XWN5001 version 0.4.1.1 XAVN2001v2 version 0.4.0.7 Description: The issue is related to multiple buffer overflows that can occur via the http passwd and http username parameters in the check auth function...

NETGEAR DGN3500 安全漏洞

The NETGEAR DGN3500 is a wireless router from NETGEAR. The NETGEAR DGN3500 version 1.1.00.37 suffers from a buffer overflow vulnerability, which originates from the httppassword parameter in setup.cgi failing to properly validate the length of the input data, which can be exploited by a remote...

CVE-2023-38925

Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the httppasswd parameter in password.cgi...

CVE-2023-39550

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the checkauth function...

CVE-2023-38922

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the updateauth function...

CVE-2023-36499

Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wlassid and wlgssid parameters at genieapwifichange.cgi...

CVE-2023-38924

Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the httppassword parameter at setup.cgi...

CVE-2023-38925

Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the httppasswd parameter in password.cgi...