CVE-2024-52029

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at geniepptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50994

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component ipv6fix.cgi via the ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, and ipv6lanlength parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST...

CVE-2024-51000

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component wireless.cgi via the opmode, opmodean, and opmodean2 parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51016

CVE-2024-51016 affects Netgear XR300 v1.0.3.78 and is caused by a stack overflow in the addName%d parameter of the usb_approve.cgi script, exploitable by a crafted POST request to induce a DoS. The available documents consistently describe a buffer/stack overflow in usb_approve.cgi without citing...

CVE-2024-52025

The CVE-2024-52025 entry affects Netgear XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400v2 (v1.0.4.128). A stack overflow in the geniepppoe.cgi component is triggered by processing the pppoe_localip parameter, allowing remote attackers to cause a Denial of Service via a crafted POST request. Pu...

CVE-2024-51003

Affected software and component: Netgear R8500 (v1.0.2.160), XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400 v2 (v1.0.4.128) with the vulnerable ap_mode.cgi component. Vulnerability details: Multiple stack overflow vulnerabilities in ap_mode.cgi can be triggered via the parameters apmode_dns1_p...

CVE-2024-51014

Netgear XR300 v1.0.3.78 is affected by a stack overflow in the bridge_wireless_main.cgi component, triggered by the ssid_an parameter. The vulnerability allows remote attackers to cause a Denial of Service by sending a crafted POST request to the bridge wireless main.cgi endpoint. The available s...

CVE-2024-51019

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pppoelocalnetmask parameter at pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51022

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid parameter in bridgewirelessmain.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-52015

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptpuserip parameter at bswpptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51007

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at wireless.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50996

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpaserver parameter at geniebpa.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50997

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptpuserip parameter at pptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-52029

Netgear R7000P v1.3.3.154 is affected by a stack overflow in the genie_pptp.cgi component due to the pptp_user_netmask parameter. This can be triggered by a crafted POST request and results in a Denial of Service. The available connected documents do not provide a patched version or formal remedi...

CVE-2024-51014

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssidan parameter in bridgewirelessmain.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-52017

CVE-2024-52017 affects Netgear XR300 (v1.0.3.78). The issue arises from a stack overflow in the passphrase parameter of bridge_wireless_main.cgi, exploitable via a crafted POST request to trigger a Denial of Service. The Red Hat, CNVD, CNNVD, NVD, CVE list entries align on this description. The a...

CVE-2024-52014

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptpuserip parameter at geniepptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51004

Netgear R8500 (v1.0.2.160) and R7000P (v1.3.3.154) expose multiple stack overflow vulnerabilities in the usb_device.cgi component, exploitable via cifs_user, read_access, and write_access parameters. A crafted POST to the /usb_device.cgi endpoint can cause a Denial of Service. Connected sources c...

CVE-2024-50997

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptpuserip parameter at pptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50997

Netgear R8500 (v1.0.2.160), XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400 v2 (v1.0.4.128) are affected by a stack overflow in the pptp.cgi component triggered by the pptp_user_ip parameter, enabling Denial of Service via a crafted POST to /pptp.cgi. Technical details are consistent across mul...