Lucene search
+L

14703 matches found

Vulnrichment
Vulnrichment
•added 2024/04/26 5:31 p.m.•18 views

CVE-2024-4235 Netgear DG834Gv5 Web Management Interface cleartext storage

A vulnerability classified as problematic was found in Netgear DG834Gv5 1.6.01.34. This vulnerability affects unknown code of the component Web Management Interface. The manipulation leads to cleartext storage of sensitive information. The attack can be initiated remotely. The exploit has been...

3.3CVSS6.8AI score0.00557EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/04/26 5:31 p.m.•48 views

CVE-2024-4235 Netgear DG834Gv5 Web Management Interface cleartext storage

A vulnerability classified as problematic was found in Netgear DG834Gv5 1.6.01.34. This vulnerability affects unknown code of the component Web Management Interface. The manipulation leads to cleartext storage of sensitive information. The attack can be initiated remotely. The exploit has been...

3.3CVSS4.2AI score0.00557EPSS
SaveExploits1References4
CVE
CVE
•added 2024/04/26 5:31 p.m.•87 views

CVE-2024-4235

The CVE-2024-4235 entry concerns Netgear DG834Gv5 (Web Management Interface) with a vulnerability that allows cleartext storage of sensitive information. Affects version 1.6.01.34, enabling remote exploitation and reportedly with a publicly disclosed exploit. Multiple sources confirm an informati...

4.9CVSS6.7AI score0.00557EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2024/04/26 12:00 a.m.•18 views

NETGEAR DG834G security vulnerabilities

The NETGEAR DG834G is a wireless ADSL firewall modem from NETGEAR. An information disclosure vulnerability exists in the NETGEAR DG834G v5 version 1.6.01.34, which originates from the plaintext storage of sensitive information and can be exploited by an attacker to gain administrative access to t...

4.9CVSS6.3AI score0.00557EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/26 12:00 a.m.•6 views

CVE-2024-4235: Cleartext Storage of Sensitive Information

A vulnerability classified as problematic was found in Netgear DG834Gv5 1.6.01.34. This vulnerability affects unknown code of the component Web Management Interface. The manipulation leads to cleartext storage of sensitive information. The attack can be initiated remotely. The exploit has been...

4.9CVSS5.3AI score0.00557EPSS
SaveExploits1References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/04/25 2:21 a.m.•17 views

NETGEAR routers vulnerable to buffer overflow

Overview Multiple routers provided by NETGEAR Inc. contain a buffer overflow vulnerability CWE-121, CVE-2023-27368. Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact An unauthenticated attacker may bypass authentication for th...

8.8CVSS7.4AI score0.00782EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/04/24 12:00 a.m.•27 views

NETGEAR RAX35 security vulnerabilities

The NETGEAR Rax35 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR RAX35. The vulnerability stems from an application boundary error when handling untrusted input. An attacker could exploit the vulnerability to bypass the product's authentication...

8.8CVSS7.2AI score0.00782EPSS
SaveExploits0References4
CNVD
CNVD
•added 2024/04/10 12:00 a.m.•19 views

Netgear R6850 currentsetting.htm file information disclosure vulnerability

The Netgear R6850 is a wireless router from NETGEAR. The Netgear R6850 suffers from an information disclosure vulnerability that originates from insufficient protection of sensitive information in currentsetting.htm, which can be exploited by an attacker to obtain sensitive information...

7.5CVSS6.4AI score0.01907EPSS
SaveExploits2References1
CNVD
CNVD
•added 2024/04/10 12:00 a.m.•19 views

NETGEAR R6850 ntp_server Parameter Command Injection Vulnerability

The NETGEAR R6850 is a wireless router from NETGEAR. The NETGEAR R6850 suffers from a command injection vulnerability that stems from the ntpserver parameter failing to properly filter constructed command special characters, commands, and so on. An attacker can exploit this vulnerability to cause...

8CVSS7.1AI score0.01484EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/04/10 12:00 a.m.•27 views

NETGEAR R6850 c4-IPAddr Parameter Command Injection Vulnerability

The NETGEAR R6850 is a wireless router from NETGEAR. The NETGEAR R6850 suffers from a command injection vulnerability that stems from the c4-IPAddr parameter failing to properly filter constructed command special characters, commands, and so on. An attacker can exploit this vulnerability to cause...

9.8CVSS6.9AI score0.46918EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/04/10 12:00 a.m.•16 views

Netgear R6850 BRS_top.html File Information Disclosure Vulnerability

The Netgear R6850 is a wireless router from NETGEAR. The Netgear R6850 suffers from an information disclosure vulnerability that originates from insufficient protection of sensitive information in the BRStop.html component, which can be exploited by an attacker to obtain sensitive information...

7.5CVSS6.4AI score0.13848EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/04/08 12:00 a.m.•24 views

NETGEAR DGND4000 Privilege Escalation

The vulnerability of NETGEAR DGND4000 router’s built-in software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by using the nextfile parameter...

8.1CVSS5.4AI score0.0032EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2024/04/08 12:00 a.m.•6 views

PT-2024-4574

Name of the Vulnerable Software and Affected Versions: Netgear DG834Gv5 version 1.6.01.34 Description: A vulnerability was found in the Web Management Interface of the Netgear DG834Gv5, which leads to cleartext storage of sensitive information. The attack can be initiated remotely. The exploit ha...

4.9CVSS5.6AI score0.00557EPSS
SaveExploits1References13
BDU FSTEC
BDU FSTEC
•added 2024/04/06 12:00 a.m.•58 views

Netgear debuginfo.htm Disclosure

The vulnerability of the debuginfo.htm component in Netgear’s integrated router software, such as Netgear CBR40, Netgear CBK40, and Netgear CBK43, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected ...

3.1CVSS5.4AI score0.00428EPSS
SaveExploits1References4Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/04/06 12:00 a.m.•21 views

Netgear Router Web Interface Disclosure DoS

The vulnerability of the web interface of Netgear CBR40, Netgear CBK40, and Netgear CBK43 microprogrammed software routers is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to disclose protected information or cause service failures...

4.2CVSS5.5AI score0.00635EPSS
SaveExploits1References3Affected Software3
osv_cve
osv_cve
•added 2024/04/03 1:16 p.m.•20 views

CVE-2024-30570

An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

5.3CVSS5.8AI score0.01221EPSS
SaveExploits2References2
osv_cve
osv_cve
•added 2024/04/03 1:16 p.m.•18 views

CVE-2024-30568

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter...

9.8CVSS5.8AI score0.46918EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2024/04/03 1:16 p.m.•21 views

CVE-2024-30569

An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

7.5CVSS5.8AI score0.01907EPSS
SaveExploits2References2
NVD
NVD
•added 2024/04/03 1:16 p.m.•42 views

CVE-2024-30569

An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

7.5CVSS6.2AI score0.01907EPSS
SaveExploits2References2
NVD
NVD
•added 2024/04/03 1:16 p.m.•24 views

CVE-2024-30572

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntpserver parameter...

8CVSS7.6AI score0.01484EPSS
SaveExploits1References2
Rows per page
Query Builder