PT-2024-4161 · NetGear · Netgear Prosafe Network Management System

Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. The flaw exists within the product installer due to the use of default...

Netgear N300 wireless router software soapauth() Arbitrary Command Execution

The vulnerability of the soapauth function in Netgear N300 wireless router microprogramming software WNR2000v4 is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafte...

NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Minimal user interaction is required to exploit this vulnerability. The specific flaw exists within the saveNodeLabel method. The issue results from the lack o...

NETGEAR WNR2000 Command Execution Vulnerability

The NETGEAR WNR2000 is a wireless router from NETGEAR. A command execution vulnerability exists in NETGEAR WNR2000 v4 version 1.0.0.70, which stems from an application failing to properly filter constructed command special characters, commands, and more. An attacker could exploit this vulnerabili...

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

Command injection

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

NETGEAR WNR2000 security vulnerabilities

The NETGEAR WNR2000 is a wireless router from NETGEAR. A command execution vulnerability exists in NETGEAR WNR2000 v4 version 1.0.0.70, which stems from an application failing to properly filter constructed command special characters, commands, and more. An attacker could exploit this vulnerabili...

CVE-2023-50089

CVE-2023-50089 affects NETGEAR WNR2000v4, specifically version 1.0.0.70. The issue is a command injection that arises when using HTTP for SOAP authentication, allowing command execution after successful authentication. The CVSS vector in the record indicates a network -facing, high/critical impac...

CVE-2023-50089: Improper Neutralization of Special Elements used in a Command

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

NETGEAR RBR750 Buffer Overflow Vulnerability

The NETGEAR RBR750 is a home WiFi system from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR RBR750 prior to version V7.2.6.21, which originates from a boundary error in /usr/sbin/httpd when handling untrusted input. A remote attacker could exploit this vulnerability to execute...

Netgear Orbi RBR750 strlcpy Heap Buffer Overflow DoS

The vulnerability of the strlcpy function in Netgear Orbi RBR750 router software lies in the fact that the operation escapes the buffer boundaries when processing the lengths of the X-Forwarded-For and X-Forwarded-Proto headers. Exploiting this vulnerability allows a remote attacker to cause...

CVE-2023-49007

In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd...

CVE-2023-49007

In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd...

Stack overflow

In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd...

CVE-2023-49007

CVE-2023-49007 affects Netgear Orbi RBR750 prior to firmware 7.2.6.21. A stack-based buffer overflow in /usr/sbin/httpd is caused by boundary handling of inputs; an attacker could exploit this remotely (network vector) to cause crash or arbitrary code execution. Affected versions require upgradin...

NETGEAR RBR750 security vulnerabilities

The NETGEAR RBR750 is a home WiFi system from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR RBR750 prior to version V7.2.6.21, which originates from a boundary error in /usr/sbin/httpd when handling untrusted input. A remote attacker could exploit this vulnerability to execute...