CVE-2021-34236

Netgear R8000 router (firmware 1.0.4.56) is affected by CVE-2021-34236 due to a buffer overflow in the /bd_genie_create_account.cgi endpoint triggered by a sufficiently long register_country parameter. This can allow remote attackers to execute arbitrary code or cause a denial of service. Mitigat...

CVE-2022-30078

NETGEAR R6200V2 firmware versions through R6200v2-V1.0.3.1210.1.11 and R6300V2 firmware versions through R6300v2-V1.0.4.5210.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6fix.cgi ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, or...

CVE-2022-30078

NETGEAR R6200V2 firmware versions through R6200v2-V1.0.3.1210.1.11 and R6300V2 firmware versions through R6300v2-V1.0.4.5210.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6fix.cgi ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, or...

CVE-2022-30078

NETGEAR R6200V2 firmware versions through R6200v2-V1.0.3.1210.1.11 and R6300V2 firmware versions through R6300v2-V1.0.4.5210.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6fix.cgi ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, or...

Design/Logic Flaw

NETGEAR R6200V2 firmware versions through R6200v2-V1.0.3.1210.1.11 and R6300V2 firmware versions through R6300v2-V1.0.4.5210.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6fix.cgi ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, or...

CVE-2022-30078

MODE C: Affected NETGEAR R6200 V2 and R6300 V2 devices are exposed to a command-injection vulnerability in ipv6_fix.cgi where shell metacharacters in ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, or ipv6_lan_length enable remote authenticated execution of arbitrary commands. Affected firmwar...

CVE-2022-30078

NETGEAR R6200V2 firmware versions through R6200v2-V1.0.3.1210.1.11 and R6300V2 firmware versions through R6300v2-V1.0.4.5210.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6fix.cgi ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, or...

PT-2022-10328 · NetGear · Netgear R8000 Router

Name of the Vulnerable Software and Affected Versions: Netgear R8000 Router version 1.0.4.56 Description: A buffer overflow issue allows remote attackers to execute arbitrary code or cause a denial-of-service. This is achieved by sending a crafted POST to "/bd genie create account.cgi" with a...

PT-2022-20001 · NetGear · Netgear R6300V2 +1

Name of the Vulnerable Software and Affected Versions: NETGEAR R6200 V2 versions through R6200v2-V1.0.3.12 10.1.11 NETGEAR R6300 V2 versions through R6300v2-V1.0.4.52 10.0.93 Description: The issue allows remote authenticated attackers to execute arbitrary commands via shell metacharacters in the...

NETGEAR R6300v2和NETGEAR R6200v2 操作系统命令注入漏洞

The NETGEAR R6300v2 and NETGEAR R6200v2 are both wireless routers from NETGEAR. An operating system command injection vulnerability exists in the NETGEAR R6200v2 and R6300v2 routers, which can be exploited to execute arbitrary commands via shell metacharacters or the ipv6lanlength parameter in...

NETGEAR R8000 安全漏洞

NETGEAR R8000 is a wireless router from NETGEAR. A security vulnerability exists in NETGEAR R8000 v1.0.4.56, which is caused by a buffer overflow, and can be exploited by an attacker to execute arbitrary code or cause a denial of service by sending a crafted POST to bdgeniecreateaccount.cgi with ...

VulnCheck KEV: CVE-2021-20167

Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. The readycloud cgi application is vulnerable to command injection in the name parameter...

VulnCheck KEV: CVE-2021-20166

Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the applicaiton...

The Humble Hub

Over the weekend I organized some old computing equipment. I found this beauty in one of my boxes. It's a Netgear EN104TP hub. I've mentioned this device before, in this blog and my books. This sort of device was the last of the true hubs. In an age where cables seem reserved for data centers or...

PT-2022-4902 · NetGear · Netgear Nighthawk Ac1900 Smart Wifi Dual Band Gigabit Router

Name of the Vulnerable Software and Affected Versions: Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router version R7000-V1.0.11.134 10.2.119 Description: The issue is related to a buffer overflow vulnerability caused by the strncpy function in the wl binary of the firmware. This...

PT-2022-4913 · NetGear · Netgear Nighthawk Ac1900 Smart Wifi Dual Band Gigabit Router R7000

Name of the Vulnerable Software and Affected Versions: Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000 version 1.0.11.134 10.2.119 Description: The issue is related to a buffer overflow vulnerability caused by the strncat function in the firmware of the Netgear Nighthawk AC1900...

NETGEAR Wireless-N Router Web Detection

Binary data netgearwirelessnrouterwebdetect.nbin...

ZuoRAT Malware Is Targeting Routers

Wired is reporting on a new remote-access Trojan that is able to infect at least eighty different targets: So far, researchers from Lumen Technologies Black Lotus Labs say theyve identified at least 80 targets infected by the stealthy malware, including routers made by Cisco, Netgear, Asus, and...

NETGEAR WNAP320 Access Control Error Vulnerability

The NETGEAR WNAP320 is a wireless access point AP from NETGEAR. An access control error vulnerability exists in the NETGEAR WNAP320 version v2.0.3, which stems from incorrect access control in /recreate.php, which can be exploited by an attacker to obtain a user's cookie...

Netgear Routers Buffer Overflow (CVE-2017-6862)

A buffer overflow vulnerability exists in Netgear Routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...