Lucene search
+L

12226 matches found

BDU FSTEC
BDU FSTEC
added 2023/07/06 12:00 a.m.12 views

The vulnerability in the embedded software of Netgear R6250 lies in the copying of buffers without checking the size of the input data. This allows an attacker to trigger buffer overflows.

The vulnerability in the embedded software of Netgear R6250 routers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to trigger buffer overflows remotely...

10CVSS7.9AI score0.13746EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/03 12:00 a.m.12 views

PT-2023-4222 · NetGear · Netgear Wnr2000V2 +2

Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 Netgear XWN5001 version 0.4.1.1 Netgear XAVN2001v2 version 0.4.0.7 Description: The issue is related to buffer overflows in the update auth function, which can be exploited via the http passwd and http...

9CVSS8.8AI score0.00759EPSS
SaveExploits0References6
CNVD
CNVD
added 2023/07/03 12:00 a.m.21 views

NETGEAR RAX30 UPnP Command Injection Vulnerability

The NETGEAR RAX30 is a wireless router from NETGEAR. The NETGEAR RAX30 suffers from a command injection vulnerability that stems from a command injection vulnerability when processing UPnP port mapping requests, which can be exploited by an attacker to execute arbitrary commands...

8.8CVSS9.1AI score0.01258EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/06/30 12:00 a.m.35 views

NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of UPnP port mapping requests. The issue results from the...

8.8CVSS7.3AI score0.01258EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/06/30 12:00 a.m.36 views

NETGEAR Multiple Routers curl_post Improper Certificate Validation Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the update functionality, which operates...

8.1CVSS6.9AI score0.00997EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/06/26 12:00 a.m.17 views

The vulnerability of NETGEAR RAX30 router microprogramming software, related to the use of strictly encrypted login credentials, allows a hacker to gain full access to the system.

The vulnerability of NETGEAR RAX30 router microprogramming software lies in the use of strictly encrypted login credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the system...

6.3CVSS6.5AI score0.00447EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/26 12:00 a.m.12 views

The vulnerability of the `cmsCli_authenticate` function in NETGEAR RAX30 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the cmsCliauthenticate function in NETGEAR RAX30 router microprogramming devices is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

8.8CVSS8.3AI score0.00897EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/26 12:00 a.m.13 views

The vulnerability of NETGEAR RAX30 router microprogramming software lies in the improper handling of symbolic links before accessing the file, allowing attackers to disclose confidential information.

The vulnerability of NETGEAR RAX30 router microprogramming software is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to disclose confidential information...

4.9CVSS5.4AI score0.00645EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
added 2023/06/25 12:00 a.m.18 views

NETGEAR R6250 Buffer Overflow Vulnerability

The NETGEAR R6250 is a wireless router from NETGEAR. The NETGEAR R6250 version 1.0.4.48 suffers from a buffer overflow vulnerability that originates from an application boundary error when handling untrusted input. A remote attacker could exploit the vulnerability to execute arbitrary code on the...

9.8CVSS8.2AI score0.13746EPSS
SaveExploits1References1
NVD
NVD
added 2023/06/20 9:15 p.m.23 views

CVE-2023-34563

netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication...

9.8CVSS9.5AI score0.13746EPSS
SaveExploits1References2
OSV
OSV
added 2023/06/20 9:15 p.m.8 views

CVE-2023-34563

netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication...

9.8CVSS5.8AI score0.13746EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/06/20 9:15 p.m.6 views

CVE-2023-34563

netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication...

9.8CVSS7.3AI score0.13746EPSS
SaveExploits1References3
Prion
Prion
added 2023/06/20 9:15 p.m.31 views

Buffer overflow

netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication...

7.5CVSS9.4AI score0.13746EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/06/20 12:00 a.m.29 views

CVE-2023-34563

netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication...

9.7AI score0.13746EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/06/20 12:00 a.m.9 views

NETGEAR R6250 安全漏洞

The NETGEAR R6250 is a wireless router from NETGEAR. The NETGEAR R6250 version 1.0.4.48 suffers from a buffer overflow vulnerability that originates from an application boundary error when handling untrusted input. A remote attacker could exploit the vulnerability to execute arbitrary code on the...

9.8CVSS8AI score0.13746EPSS
SaveExploits1References4
CVE
CVE
added 2023/06/20 12:00 a.m.58 views

CVE-2023-34563

CVE-2023-34563 affects Netgear R6250 router with firmware 1.0.4.48. Reports describe a buffer overflow originating from an application boundary error when handling untrusted input, exploitable after authentication. Red Hat/CNVD entries corroborate post-authentication access leading to arbitrary c...

9.8CVSS9.4AI score0.13746EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/20 12:00 a.m.11 views

CVE-2023-34563

netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication...

6.9AI score0.13746EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/06/20 12:00 a.m.11 views

PT-2023-3405 · NetGear · Netgear R6250

Name of the Vulnerable Software and Affected Versions: Netgear R6250 Firmware Version 1.0.4.48 Description: The issue is related to a buffer overflow vulnerability in the Netgear R6250 router's firmware. This vulnerability is associated with uncontrolled copying of user input, which can lead to a...

10CVSS7.6AI score0.13746EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
added 2023/06/16 12:00 a.m.14 views

The vulnerability of NETGEAR’s microprogrammed router products such as D6220, D8500, R6700, and R6900 lies in the lack of measures to sanitize input data. This allows attackers to exploit their privileges and execute arbitrary commands.

The vulnerability of NETGEAR’s microprogrammed router models D6220, D8500, R6700, and R6900 lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and execute arbitrary commands...

10CVSS7.9AI score0.03096EPSS
SaveExploits1References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/06/16 12:00 a.m.9 views

The vulnerability of NETGEAR R6250 Wi-Fi routers’ microprogramming software, related to the lack of measures for cleaning incoming data, allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of NETGEAR R6250 Wi-Fi routers’ microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and execute arbitrary commands...

10CVSS8.1AI score0.16171EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder