CVE-2024-39762

Multiple OS command injection vulnerabilities exist in the internet.cgi setaddrouting functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A...

WAVLINK AC3000 命令注入漏洞

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. A command injection vulnerability exists in the WAVLINK AC3000 M33A8.V5030.210505 version, which stems from the netmask parameter of the internet.cgi setaddrouting function failing to correctly filter constructed command special...

The vulnerability in the l2tp.cgi script of NETGEAR R7000P router software allows a hacker to induce a service failure.

The vulnerability of the l2tp.cgi script in the NETGEAR R7000P router’s microprogramming system is related to buffer overflows in the stack when processing the l2tpusernetmask parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted...

The vulnerability in the pppoe.cgi script of NETGEAR R7000P router software allows a hacker to induce a service failure.

The vulnerability in the pppoe.cgi script of NETGEAR R7000P router software is related to buffer overflows in the stack when processing the pppoelocalnetmask parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted POST request...

The vulnerability in the genie_pptp.cgi script of the Netgear R7000P router’s software allows a hacker to induce a service failure.

The vulnerability in the geniepptp.cgi script of the Netgear R7000P router operating system is related to the copying of buffers without checking the size of the input data during the processing of the pptpusernetmask parameter. Exploiting this vulnerability allows an attacker to cause a service...

CVE-2024-52030

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at ruwanflow.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-52028

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at wizpptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51018

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at pptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51017

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the l2tpusernetmask parameter at l2tp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2024-8263 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.3.154 Description: The issue is related to a stack overflow in the genie pptp.cgi script, specifically via the pptp user netmask parameter. This allows attackers to cause a Denial of Service DoS by sending a crafted...

NETGEAR R7000P 安全漏洞

The NETGEAR R7000P is a wireless router from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR R7000P v1.3.3.154, which originates from the pptpusernetmask parameter in the geniepptp.cgi component that fails to correctly validate the length of the input data, and can be exploited by ...

PT-2024-8265 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.3.154 Description: The issue is related to a stack overflow in the ru wan flow.cgi script, specifically via the pptp user netmask parameter. This allows attackers to cause a Denial of Service DoS by sending a crafte...

NETGEAR R7000P 安全漏洞

The NETGEAR R7000P is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR R7000P v1.3.3.154, which originates from the pptpusernetmask parameter in the wizpptp.cgi component that fails to correctly validate the length of the input data, and can be exploited by a remo...

NETGEAR R7000P 安全漏洞

The NETGEAR R7000P is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR R7000P v1.3.3.154, which originates from the pptpusernetmask parameter in the ruwanflow.cgi component that fails to correctly validate the length of the input data, and can be exploited by a...

PT-2024-10142 · Wavlink · Wavlink Ac3000

Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 M33A8.V5030.210505 Description: Multiple OS command injection vulnerabilities exist in the set add routing functionality of the internet.cgi script. A specially crafted HTTP request can lead to arbitrary command execution. An...

CVE-2024-28446

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lannetmask parameter at /apply.cgi...

CVE-2024-28446

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lannetmask parameter at /apply.cgi...

Shenzhen Libituo Technology LBT-T300-mini1 Security Breach

Shenzhen Libituo Technology LBT-T300-mini1 is a 5G industrial router from Shenzhen Libituo Technology China. A security vulnerability exists in the Shenzhen Libituo Technology LBT-T300-mini1 v1.2.9, which is caused by a buffer overflow in the lannetmask parameter via /apply.cgi...

CVE-2024-28446

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lannetmask parameter at /apply.cgi...

PT-2024-22439 · Shenzhen Libituo Technology Co. · Lbt-T300-Mini1

Name of the Vulnerable Software and Affected Versions: Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 version 1.2.9 Description: A buffer overflow issue was discovered via the lan netmask parameter at the "/apply.cgi" API endpoint. Recommendations: For version 1.2.9, as a temporary workaroun...