NETGEAR R7100LG has a command injection vulnerability

The NETGEAR R7100LG is a router from the American company NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. The NETGEAR R7100LG version 1.0.0.78 suffers from a command injection vulnerability that stems from the password parameter in...

CVE-2023-38412

CVE-2023-38412 concerns a buffer overflow in NETGEAR R6900P v1.3.3.154, triggered by malformed input to ia_ap_setting.cgi through the wla_ssid and wlg_ssid parameters. The available connected sources describe multiple buffer overflows and state that exploitation could allow remote code execution ...

CVE-2023-38921

Netgear WG302v2 (v5.2.9) and WAG302v2 (v5.1.19) are affected by command injection vulnerabilities in the upgrade_handler function, exploitable via the firmwareRestore and firmwareServerip parameters. Root cause is improper handling of those inputs leading to potential arbitrary command execution....

CVE-2023-38925

CVE-2023-38925 affects Netgear devices: DC112A (v1.0.0.64), EX6200 (v1.0.3.94), and R6300v2 (v1.0.4.8) due to a buffer overflow in the http_passwd parameter of password.cgi. The root cause is a buffer overflow vulnerability in the affected CGI endpoint. The connected sources provide no exploit de...

CVE-2023-36499

Netgear XR300 v1.0.3.78 is affected by CVE-2023-36499 due to multiple buffer overflows in the genie_ap_wifi_change.cgi endpoint, triggered by parameters wla_ssid and wlg_ssid. Reported impact includes potential remote code execution or denial of service per CNVD/Red Hat entries, with CVSS v3.1 ba...

NETGEAR XR300 security vulnerabilities

The NETGEAR XR300 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR XR300 v1.0.3.78, which originates from a failure to properly validate the length of the input data via the wlassid and wlgssid parameters of genieapwifichange.cgi, which can be exploited by a...

PT-2023-26524 · NetGear · Netgear Dg834Gv5

Name of the Vulnerable Software and Affected Versions: Netgear DG834Gv5 version 1.6.01.34 Description: The issue concerns multiple buffer overflows that can be triggered via the wla ssid and wla temp ssid parameters at the "bsw ssid.cgi" endpoint. Recommendations: For Netgear DG834Gv5 version...

NETGEAR JWNR2000 and XWN5001 and XAVN2001 Security Vulnerabilities

NETGEAR XWN5001 and NETGEAR JWNR2000 are both products of NETGEAR Corporation.NETGEAR XWN5001 is a wireless access point.NETGEAR JWNR2000 is a wireless router. A security vulnerability exists in NETGEAR JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7, which stems from a multiple...

CVE-2023-38591

Netgear DG834Gv5 1.6.01.34 was discovered to contain multiple buffer overflows via the wlassid and wlatempssid parameters at bswssid.cgi...

NETGEAR DGN3500 security vulnerabilities

The NETGEAR DGN3500 is a wireless router from NETGEAR. The NETGEAR DGN3500 version 1.1.00.37 suffers from a buffer overflow vulnerability, which originates from the httppassword parameter in setup.cgi failing to properly validate the length of the input data, which can be exploited by a remote...

CVE-2023-38928

The CVE concerns Netgear R7100LG firmware 1.0.0.78 with a command injection in usb_remote_invite.cgi through the password parameter, enabling arbitrary command execution. Affected component is the router’s web/CGI endpoint; root cause is improper filtering of constructed command characters in the...

CVE-2023-38924

Netgear DGN3500 (firmware 1.1.00.37) is affected by a buffer overflow in the setup.cgi http_password parameter. Multiple sources concur that improper validation of the input length can allow a remote attacker to leverage the overflow, potentially enabling arbitrary code execution or denial of ser...

PT-2023-26689 · NetGear · Netgear R6300V2 +2

Name of the Vulnerable Software and Affected Versions: Netgear DC112A version 1.0.0.64 Netgear EX6200 version 1.0.3.94 Netgear R6300v2 version 1.0.4.8 Description: A buffer overflow issue was discovered via the http passwd parameter in password.cgi. This issue affects Netgear devices...

CVE-2023-38924

Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the httppassword parameter at setup.cgi...

PT-2023-26690

Name of the Vulnerable Software and Affected Versions Netgear EX6200 version 1.0.3.94 Description A buffer overflow issue was discovered via the wla temp ssid parameter at acosNvramConfig set. Recommendations For Netgear EX6200 version 1.0.3.94, as a temporary workaround, consider restricting...

NETGEAR EX6200 security vulnerabilities

NETGEAR EX6200 is a wireless network signal extender from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR EX6200 v1.0.3.94, which originates from the wlatempssid parameter in acosNvramConfigset that fails to correctly validate the length and size of the input data, and can be...

NETGEAR DC112A and EX6200 and R6300v2 Security Vulnerabilities

NETGEAR DC112A and others are products of NETGEAR Corporation.NETGEAR DC112A is a wireless router.NETGEAR EX6200 is a wireless network signal extender.NETGEAR R6300v2 is a wireless router. A security vulnerability exists in the NETGEAR DC112A version 1.0.0.64, EX6200 version 1.0.3.94, and R6300v2...

CVE-2023-38928: Improper Neutralization of Special Elements used in a Command

Netgear R7100LG 1.0.0.78 was discovered to contain a command injection vulnerability via the password parameter at usbremoteinvite.cgi...

PT-2023-26688

Name of the Vulnerable Software and Affected Versions Netgear DGN3500 version 1.1.00.37 Description A buffer overflow issue was discovered via the http password parameter at the "setup.cgi" endpoint. Recommendations For Netgear DGN3500 version 1.1.00.37, avoid using the http password parameter in...

PT-2023-27016 · NetGear · Netgear Wnr2000V2

Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 XWN5001 version 0.4.1.1 XAVN2001v2 version 0.4.0.7 Description: The issue is related to multiple buffer overflows that can occur via the http passwd and http username parameters in the check auth function...