14703 matches found
PT-2024-23500
Name of the Vulnerable Software and Affected Versions Netgear R6850 version 1.1.0.88 Description A command injection issue was discovered, which can be exploited via the ntp server parameter. Recommendations For Netgear R6850 version 1.1.0.88, avoid using the ntp server parameter until a fix is...
CVE-2024-30571
The Netgear R6850 wireless router, specifically version v1.1.0.88 , contains an information disclosure vulnerability. The root cause is the insufficient protection of sensitive information within the BRS_top.html component. This flaw allows an unauthenticated attacker to obtain sensitive informat...
CVE-2024-30568
The Netgear R6850 wireless router, specifically firmware version 1.1.0.88 , is vulnerable to a command injection vulnerability in the ping_test functionality. The root cause is the c4-IPAddr parameter failing to properly filter special characters and commands. An unauthenticated attacker can expl...
CVE-2024-30570
The Netgear R6850 wireless router, specifically running firmware version v1.1.0.88 , contains an information disclosure vulnerability within the debuginfo.htm page. This hidden interface lacks authentication, allowing unauthenticated attackers to access sensitive system details, including the pro...
CVE-2024-30569
The Netgear R6850 wireless router (firmware version v1.1.0.88 ) contains an information disclosure vulnerability. The root cause is an unprotected hidden interface at the currentsetting.htm page, which lacks authentication. This allows unauthenticated attackers to obtain sensitive system informat...
CVE-2024-30572
The Netgear R6850 wireless router, specifically version 1.1.0.88 , contains a command injection vulnerability (CWE-77) rooted in the ntp_server parameter. The flaw occurs because the parameter fails to properly filter constructed command special characters, allowing an attacker to execute arbitra...
Netgear R6850 security vulnerabilities
The Netgear R6850 is a wireless router from NETGEAR. The Netgear R6850 suffers from an information disclosure vulnerability that originates from insufficient protection of sensitive information in the BRStop.html component, which can be exploited by an attacker to obtain sensitive information...
CVE-2024-30568: Improper Control of Generation of Code
Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter...
PT-2024-23495
Name of the Vulnerable Software and Affected Versions Netgear R6850 version 1.1.0.88 Description A command injection issue was discovered, which can be exploited via the c4-IPAddr parameter. Recommendations For Netgear R6850 version 1.1.0.88, avoid using the c4-IPAddr parameter in the affected AP...
CVE-2024-30572
Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntpserver parameter...
Netgear R6850 security vulnerabilities
The Netgear R6850 is a wireless router from NETGEAR. The Netgear R6850 suffers from an information disclosure vulnerability that originates from insufficient protection of sensitive information in currentsetting.htm, which can be exploited by an attacker to obtain sensitive information...
PT-2024-23496 · NetGear · Netgear R6850
Name of the Vulnerable Software and Affected Versions: Netgear R6850 version 1.1.0.88 Description: The issue is an information leak in the currentsetting.htm file, allowing attackers to obtain sensitive information without requiring any authentication. Recommendations: For Netgear R6850 version...
CVE-2024-30570
An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...
CVE-2024-30569
An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...
CVE-2024-30570
An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...
Netgear wireless router open to code execution after buffer overflow vulnerability
Cisco Talos Vulnerability Research team recently disclosed three vulnerabilities across a range of products, including one that could lead to remote code execution in a popular Netgear wireless router designed for home networks. There is also a newly disclosed vulnerability in a graphics driver f...
NETGEAR DGND4000 Elevation of Privilege Vulnerability
The NETGEAR DGND4000 is a wireless router , with modem capabilities. An elevation of privilege vulnerability exists in the ETGEAR DGND4000 that originates from elevating privileges to the /setup.cgi component via the nextfile parameter. No details of the vulnerability are provided at this time...
CVE-2023-50677
An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...
