CVE-2023-27851

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users with upload permissions to execute arbitrary code on the device...

CVE-2023-1205

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF protections...

CVE-2023-27852

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms that could allow an attacker to execute arbitrary code on the device...

CVE-2023-27850

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that allows users with access to this feature to access arbitrary files on the device...

NETGEAR Nighthawk 安全漏洞

The NETGEAR Nighthawk WiFi6 Router is a series of wireless routers from NETGEAR. The NETGEAR Nighthawk WiFi6 Router suffers from a buffer overflow vulnerability that stems from the presence of buffer overflows in the device's various CGI mechanisms, which can be exploited by an attacker to execut...

CVE-2023-27853

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 has a format string vulnerability in its SOAP service that could allow arbitrary code execution. Root cause: uncontrolled format strings in SOAP. Affected versions: before 1.0.10.94. Impact: remote code execution on the device. Remediation: updat...

CVE-2023-27852

CVE-2023-27852 affects NETGEAR Nighthawk WiFi6 Router versions prior to V1.0.10.94. The issue is a buffer overflow in various CGI mechanisms, enabling an attacker to execute arbitrary code on the device. Affected component: CGI handling in the router’s firmware. Root cause: insufficient input siz...

CVE-2023-27850

The CVE-2023-27850 issue affects NETGEAR Nighthawk WiFi6 Router versions prior to V1.0.10.94. Root cause: insufficient access control in the router’s file-sharing mechanism, enabling users with access to this feature to read arbitrary files on the device. Impact (as described): potential exposure...

CVE-2023-27851

The CVE-2023-27851 issue affects NETGEAR Nighthawk WiFi 6 Router firmware prior to v1.0.10.94, where a file sharing mechanism incorrectly handles permissions, enabling a user with upload rights to execute arbitrary code on the device. The vulnerability is described across multiple sources as a re...

CVE-2023-27853: Buffer Copy without Checking Size of Input

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary code on the device...

CVE-2023-27851: Undefined Security Weakness

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users with upload permissions to execute arbitrary code on the device...

CVE-2023-27852: Buffer Copy without Checking Size of Input

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms that could allow an attacker to execute arbitrary code on the device...

CVE-2023-1205: Cross-Site Request Forgery (CSRF)

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF protections...

CVE-2023-27851

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users with upload permissions to execute arbitrary code on the device...

CVE-2023-1205

NETGEAR Nighthawk WiFi 6 Router (prior to v1.0.10.94) is affected by a CSRF vulnerability caused by improperly implemented protections on all endpoints. This allows cross-site requests to be forged without user interaction. The issue is documented in CVE-2023-1205 and corroborated by multiple sou...

PT-2023-2030 · NetGear · Netgear Nighthawk Wifi6 Router

Name of the Vulnerable Software and Affected Versions: NETGEAR Nighthawk WiFi6 Router versions prior to V1.0.10.94 Description: The issue is related to a format string vulnerability in a SOAP service of the NETGEAR Nighthawk WiFi6 Router. This vulnerability could allow an attacker to execute...

PT-2023-1856 · NetGear · Netgear Nighthawk Wifi6 Router

Name of the Vulnerable Software and Affected Versions: NETGEAR Nighthawk WiFi 6 Router versions prior to V1.0.10.94 Description: The issue is related to the file sharing mechanism in the router's software, which incorrectly handles permissions. This can allow a remote attacker to execute arbitrar...

PT-2023-2117 · NetGear · Netgear Nighthawk Wifi6 Router

Name of the Vulnerable Software and Affected Versions: NETGEAR Nighthawk WiFi6 Router versions prior to V1.0.10.94 Description: The issue is related to the file sharing mechanism in the NETGEAR Nighthawk WiFi6 Router, which allows users with access to this feature to access arbitrary files on the...

PT-2023-2021 · NetGear · Netgear Nighthawk Wifi6 Router

Name of the Vulnerable Software and Affected Versions: NETGEAR Nighthawk WiFi 6 Router versions prior to V1.0.10.94 Description: The issue is related to a cross-site request forgery CSRF vulnerability due to improperly implemented CSRF protections on all endpoints. This could allow a remote...

CVE-2022-48322

NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability. This affects MR60 before 1.1.7.132, MS60 before 1.1.7.132, R6900P before 1.3.3.154, R7000P before 1.3.3.154, R7960P before 1.4.4.94, and R8000P before 1.4.4.94...