CVE-2023-39550

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the checkauth function...

CVE-2023-36499

Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wlassid and wlgssid parameters at genieapwifichange.cgi...

CVE-2023-38922

Affected Netgear devices: JWNR2000v2 (v1.0.0.11), XWN5001 (v0.4.1.1), and XAVN2001v2 (v0.4.0.7). The issue is described as multiple buffer overflows in the update_auth function, exploitable via the http_passwd and http_username parameters. This can lead to arbitrary code execution in the worst ca...

NETGEAR WG302 Command Injection Vulnerability

NETGEAR WG302 is a wireless access point from NETGEAR. A security vulnerability exists in the NETGEAR WG302v2 version v5.2.9, WAG302v2 version v5.1.19, which stems from the firmwareRestore and firmwareServerip parameters in the upgradehandler function containing multiple command injection...

CVE-2023-36499

Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wlassid and wlgssid parameters at genieapwifichange.cgi...

PT-2023-27016 · NetGear · Netgear Wnr2000V2

Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 XWN5001 version 0.4.1.1 XAVN2001v2 version 0.4.0.7 Description: The issue is related to multiple buffer overflows that can occur via the http passwd and http username parameters in the check auth function...

NETGEAR JWNR2000 Security Vulnerabilities

The NETGEAR JWNR2000 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR JWNR2000 that stems from a buffer overflow vulnerability in the parameters httppasswd and httpusername. Affected products and versions: Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, XAVN2001v2...

PT-2023-26412

Name of the Vulnerable Software and Affected Versions Netgear R6900P version 1.3.3.154 Description The issue is related to multiple buffer overflows that can occur via the wla ssid and wlg ssid parameters at the "ia ap setting.cgi" endpoint. Recommendations For Netgear R6900P version 1.3.3.154, a...

CVE-2023-38926

Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wlatempssid parameter at acosNvramConfigset...

CVE-2023-38926

Netgear EX6200 v1.0.3.94 is affected by a buffer overflow in acosNvramConfig_set via the wla_temp_ssid parameter. The issue is documented across multiple sources (NVD, CNVD, Red Hat, CVE listing) with impact described as potential arbitrary code execution or denial of service. Affected component/...

CVE-2023-38412: Buffer Copy without Checking Size of Input

Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wlassid and wlgssid parameters at iaapsetting.cgi...

CVE-2023-38921: Improper Neutralization of Special Elements used in a Command

Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgradehandler function via the firmwareRestore and firmwareServerip parameters...

CVE-2023-38925: Buffer Copy without Checking Size of Input

Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the httppasswd parameter in password.cgi...

CVE-2023-38926: Buffer Copy without Checking Size of Input

Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wlatempssid parameter at acosNvramConfigset...

CVE-2023-38924: Buffer Copy without Checking Size of Input

Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the httppassword parameter at setup.cgi...

CVE-2023-39550: Buffer Copy without Checking Size of Input

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the checkauth function...

CVE-2023-36499: Buffer Copy without Checking Size of Input

Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wlassid and wlgssid parameters at genieapwifichange.cgi...

CVE-2023-38412

Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wlassid and wlgssid parameters at iaapsetting.cgi...

CVE-2023-39550

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the checkauth function...

CVE-2023-38921

Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgradehandler function via the firmwareRestore and firmwareServerip parameters...