CVE-2021-34979

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SOAP requests. When parsing the SOAPAction...

CVE-2021-34977

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.11610.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results fro...

CVE-2021-34979

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SOAP requests. When parsing the SOAPAction...

CVE-2021-34980

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. When parsing the SOAPLOGINTOKEN...

CVE-2021-34977

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.11610.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results fro...

CVE-2021-34979

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SOAP requests. When parsing the SOAPAction...

CVE-2021-34978

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. A crafted SOAP request can trigg...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SOAP requests. When parsing the SOAPAction...

CVE-2021-34980

The CVE-2021-34980 entry concerns NETGEAR R6260 routers (1.1.0.78_1.0.1). The vulnerability is a stack-based buffer overflow in setupwizard.cgi triggered by parsing the SOAP_LOGIN_TOKEN environment variable, where input length is not validated before copying into a fixed-size stack buffer. This a...

CVE-2021-34980

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. When parsing the SOAPLOGINTOKEN...

CVE-2021-34979

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SOAP requests. When parsing the SOAPAction...

CVE-2021-34979

CVE-2021-34979 affects NETGEAR R6260 routers (firmware around 1.1.0.78_1.0.1 as cited). The root cause is improper validation of the length of user-supplied data in the handling of SOAP requests, specifically when parsing the SOAPAction header, leading to a fixed-buffer overflow in mini_httpd. Th...

CVE-2021-34978

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. A crafted SOAP request can trigg...

CVE-2021-34978

CVE-2021-34978 affects NETGEAR R6260 routers with firmware 1.1.0.78_1.0.1. The flaw resides in setupwizard.cgi and allows a crafted SOAP request to overflow a fixed-length stack-based buffer, enabling remote code execution with root privileges. The attack is network-adjacent, requires no authenti...

CVE-2021-34977

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.11610.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results fro...

CVE-2021-34977

The CVE-2021-34977 entry corresponds to an authentication-bypass vulnerability in NETGEAR R7000 routers (firmware around 1.0.11.116_10.2.100) where SOAP request processing fails to verify authentication before performing a password reset. This network-adjacent flaw enables an attacker to reset th...

NETGEAR R8000 Buffer Overflow Vulnerability (CNVD-2022-06691)

NETGEAR R8000 is a wireless router from Netgear, Inc. The NETGEAR R8000 device is vulnerable to a buffer overflow vulnerability, which originates in NETGEAR R8000 devices prior to 1.0.4.62 and allows authenticated users to perform buffer overflows. An attacker could conduct a buffer overflow atta...

NETGEAR R7000 Buffer Overflow Vulnerability (CNVD-2022-06690)

Netgear NETGEAR R7000 is a wireless router from Netgear, Inc. NETGEAR R7000 devices are vulnerable to a buffer overflow vulnerability that originates in NETGEAR R7000 devices prior to 1.0.9.42 that allows authenticated users to cause a buffer overflow. An attacker could exploit this vulnerability...

NETGEAR R6700v2 Privilege Permission and Access Control Issue Vulnerability

NETGEAR R6700v2 is a wireless router from Netgear, Inc. NETGEAR R6700v2 is vulnerable to a permission and access control issue, which stems from the fact that NETGEAR R6700v2 devices prior to version 1.2.0.88 are affected by an authentication bypass. An attacker could exploit this vulnerability t...

The vulnerability of NETGEAR R6700v2 Wi-Fi routers’ microprogramming software, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of NETGEAR R6700v2 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...