377 matches found
The vulnerability of the File Sharing component in the Nighthawk WiFi 6 Router (RAX30) microprogramming software allows a hacker to gain access to arbitrary files.
The vulnerability of the File Sharing component in the Nighthawk WiFi 6 Router RAX30 microprogramming software lies in insufficient access control. Exploiting this vulnerability can allow a remote attacker to gain access to arbitrary files...
The vulnerability of the SOAP service of the Nighthawk WiFi 6 Router (RAX30) software allows a hacker to execute arbitrary code.
The vulnerability of the SOAP service in the Nighthawk WiFi 6 Router RAX30 microprogramming system lies in the use of uncontrolled format strings. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of Nighthawk WiFi 6 Router’s microprogramming software, related to the manipulation of inter-site requests, allows a hacker to perform a CSRF attack.
The vulnerability of Nighthawk WiFi 6 Router RAX30’s microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...
The vulnerability of the file-sharing mechanism of Nighthawk WiFi 6 Router (RAX30) allows a hacker to execute arbitrary code.
The vulnerability of the file-sharing mechanism of Nighthawk WiFi 6 Router RAX30 is related to incorrect permission handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Input validation
When uploading a firmware image to a Netgear Nighthawk Wifi6 Router RAX30, a hidden “forceFWUpdate” parameter may be provided to force the upgrade to complete and bypass certain validation checks. End users can use this to upload modified, unofficial, and potentially malicious firmware to the...
CVE-2023-28338: Allocation of Resources Without Limits or Throttling
Any request send to a Netgear Nighthawk Wifi6 Router RAX30's web service containing a “Content-Type” of “multipartboundary=” will result in the request body being written to “/tmp/mulipartFile” on the device itself. A sufficiently large file will cause device resources to be exhausted, resulting ...
CVE-2023-28337
When uploading a firmware image to a Netgear Nighthawk Wifi6 Router RAX30, a hidden “forceFWUpdate” parameter may be provided to force the upgrade to complete and bypass certain validation checks. End users can use this to upload modified, unofficial, and potentially malicious firmware to the...
CVE-2023-28338
Any request send to a Netgear Nighthawk Wifi6 Router RAX30's web service containing a “Content-Type” of “multipartboundary=” will result in the request body being written to “/tmp/mulipartFile” on the device itself. A sufficiently large file will cause device resources to be exhausted, resulting ...
CVE-2023-28337
When uploading a firmware image to a Netgear Nighthawk Wifi6 Router RAX30, a hidden “forceFWUpdate” parameter may be provided to force the upgrade to complete and bypass certain validation checks. End users can use this to upload modified, unofficial, and potentially malicious firmware to the...
CVE-2023-28338
Any request send to a Netgear Nighthawk Wifi6 Router RAX30's web service containing a “Content-Type” of “multipartboundary=” will result in the request body being written to “/tmp/mulipartFile” on the device itself. A sufficiently large file will cause device resources to be exhausted, resulting ...
PT-2023-2335
Name of the Vulnerable Software and Affected Versions Netgear Nighthawk Wifi6 Router RAX30 affected versions not specified Description The issue is related to a lack of access control in the firmware image upload handler of the Netgear Nighthawk Wifi6 Router RAX30. A hidden forceFWUpdate paramete...
CVE-2023-28337
The CVE concerns Netgear Nighthawk Wifi6 Router (RAX30). A hidden parameter named forceFWUpdate can be supplied during firmware image upload to force the upgrade to complete and bypass certain validation checks, enabling end users to upload modified or potentially malicious firmware. Reported imp...
PT-2023-21660
Name of the Vulnerable Software and Affected Versions Netgear Nighthawk Wifi6 Router RAX30 affected versions not specified Description The issue arises when a request is sent to the router's web service with a Content-Type of multipartboundary=, causing the request body to be written to...
CVE-2023-28337: Unrestricted Upload of File with Dangerous Type
When uploading a firmware image to a Netgear Nighthawk Wifi6 Router RAX30, a hidden “forceFWUpdate” parameter may be provided to force the upgrade to complete and bypass certain validation checks. End users can use this to upload modified, unofficial, and potentially malicious firmware to the...
CVE-2023-28338
CVE-2023-28338 affects Netgear Nighthawk WiFi 6 Router (RAX30). A request with a Content-Type header containing multipartboundary= can cause the body to be written to /tmp/mulipartFile, leading to resource exhaustion and making the device unusable until reboot. Descriptions in multiple sources co...
NETGEAR Nighthawk WiFi6 Router Cross-Site Request Forgery Vulnerability
The NETGEAR Nighthawk WiFi6 Router is a series of routers from NETGEAR that support WiFi 6 technology and are aimed at users seeking a high-speed Internet experience. The NETGEAR Nighthawk WiFi6 Router suffers from a cross-site request forgery vulnerability that stems from the device not properly...
NETGEAR Nighthawk WiFi6 Router Buffer Overflow Vulnerability
The NETGEAR Nighthawk WiFi6 Router is a series of wireless routers from NETGEAR. The NETGEAR Nighthawk WiFi6 Router suffers from a buffer overflow vulnerability that stems from the presence of buffer overflows in the device's various CGI mechanisms, which can be exploited by an attacker to execut...
NETGEAR Nighthawk WiFi6 Router Code Execution Vulnerability
The NETGEAR Nighthawk WiFi6 Router is a series of wireless routers from NETGEAR. The NETGEAR Nighthawk WiFi6 Router suffers from a code execution vulnerability that stems from the device containing format strings in the SOAP service, which can be exploited by an attacker to execute arbitrary code...
