CVE-2024-51001

Affected product: Netgear R8500 v1.0.2.160. Vulnerability: stack overflow in the ddns.cgi component via the sysDNSHost parameter. Impact: Denial of Service (DoS) via a crafted POST request. Root cause (as described): improper handling/validation of input length leading to a stack overflow. Exploi...

CVE-2024-52016

Netgear devices (R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, R6400 v2 1.0.4.128) are affected by multiple stack overflow vulnerabilities in the wlg_adv.cgi component. The root cause is improper handling of the apmode_dns1_pri and apmode_dns1_sec parameters, enabling a crafted POST reque...

CVE-2024-51017

Netgear R7000P v1.3.3.154 contains a stack overflow in the l2tp.cgi component, triggered by the l2tp_user_netmask input. Multiple sources (NVD, Red Hat, CNVD, CNNVD) describe this as a vulnerability that can be exploited by sending crafted POST requests to cause Denial of Service; CNVD additional...

CVE-2024-51012

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6pridns parameter at ipv6fix.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51013

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the RADIUSAddr%dwla parameter at wireless.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51006

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6staticip parameter in the ipv6tunnel function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-52030

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at ruwanflow.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51022

Netgear XR300, v1.0.3.78, contains a stack overflow in bridge_wireless_main.cgi when processing the ssid parameter, allowing a crafted POST to cause a Denial of Service. Public details across NVD/Red Hat/CVE records confirm the issue but do not provide an attacker’s exploit vector beyond the POST...

CVE-2024-51014

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssidan parameter in bridgewirelessmain.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51016

CVE-2024-51016 affects Netgear XR300 v1.0.3.78 and is caused by a stack overflow in the addName%d parameter of the usb_approve.cgi script, exploitable by a crafted POST request to induce a DoS. The available documents consistently describe a buffer/stack overflow in usb_approve.cgi without citing...

CVE-2024-50998

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component openvpn.cgi via the openvpnserviceport and openvpnserviceporttun parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50998

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component openvpn.cgi via the openvpnserviceport and openvpnserviceporttun parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-52025

The CVE-2024-52025 entry affects Netgear XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400v2 (v1.0.4.128). A stack overflow in the geniepppoe.cgi component is triggered by processing the pppoe_localip parameter, allowing remote attackers to cause a Denial of Service via a crafted POST request. Pu...

CVE-2024-50994

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component ipv6fix.cgi via the ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, and ipv6lanlength parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST...

CVE-2024-52028

CVE-2024-52028 affects NETGEAR R7000P (firmware v1.3.3.154). The vulnerability is a stack/buffer overflow in the wiz_pptp.cgi component, caused by improper handling of the pptp_user_netmask parameter, which can be triggered by a crafted POST request to trigger a Denial of Service. Multiple connec...

CVE-2024-51014

Netgear XR300 v1.0.3.78 is affected by a stack overflow in the bridge_wireless_main.cgi component, triggered by the ssid_an parameter. The vulnerability allows remote attackers to cause a Denial of Service by sending a crafted POST request to the bridge wireless main.cgi endpoint. The available s...

CVE-2024-51004

Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usbdevice.cgi via the cifsuser, readaccess, and writeaccess parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51003

Affected software and component: Netgear R8500 (v1.0.2.160), XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400 v2 (v1.0.4.128) with the vulnerable ap_mode.cgi component. Vulnerability details: Multiple stack overflow vulnerabilities in ap_mode.cgi can be triggered via the parameters apmode_dns1_p...

CVE-2024-51000

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component wireless.cgi via the opmode, opmodean, and opmodean2 parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51018

Netgear R7000P v1.3.3.154 contains a stack overflow in the pptp.cgi component, triggered by the pptp_user_netmask parameter, enabling a Denial of Service via a crafted POST request. Sources consistently identify the affected endpoint and vulnerability class, with no patch version provided in the ...