77 matches found
NETGEAR R6850 c4-IPAddr Parameter Command Injection Vulnerability
The NETGEAR R6850 is a wireless router from NETGEAR. The NETGEAR R6850 suffers from a command injection vulnerability that stems from the c4-IPAddr parameter failing to properly filter constructed command special characters, commands, and so on. An attacker can exploit this vulnerability to cause...
Netgear R6850 BRS_top.html File Information Disclosure Vulnerability
The Netgear R6850 is a wireless router from NETGEAR. The Netgear R6850 suffers from an information disclosure vulnerability that originates from insufficient protection of sensitive information in the BRStop.html component, which can be exploited by an attacker to obtain sensitive information...
NETGEAR R6850 ntp_server Parameter Command Injection Vulnerability
The NETGEAR R6850 is a wireless router from NETGEAR. The NETGEAR R6850 suffers from a command injection vulnerability that stems from the ntpserver parameter failing to properly filter constructed command special characters, commands, and so on. An attacker can exploit this vulnerability to cause...
CVE-2024-30571
An information leak in the BRStop.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...
CVE-2024-30572
Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntpserver parameter...
CVE-2024-30572
Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntpserver parameter...
CVE-2024-30569
An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...
CVE-2024-30570
An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...
CVE-2024-30571
An information leak in the BRStop.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...
CVE-2024-30570
An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...
CVE-2024-30568
Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter...
CVE-2024-30568
Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter...
Netgear R6850 安全漏洞
The NETGEAR R6850 is a wireless router from NETGEAR. The NETGEAR R6850 suffers from a command injection vulnerability that stems from the ntpserver parameter failing to properly filter constructed command special characters, commands, and so on. An attacker can exploit this vulnerability to cause...
CVE-2024-30571
CVE-2024-30571 describes an information disclosure in the Netgear R6850 router (v1.1.0.88) where the BRS_top.html component exposes sensitive information without authentication. The available connected records consistently identify this as an information-leak issue tied to that HTML component, wi...
CVE-2024-30568
Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter...
CVE-2024-30569
An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...
CVE-2024-30570
Netgear R6850 (firmware v1.1.0.88) is affected by CVE-2024-30570, an information leakage vulnerability in the debuginfo.htm page that allows unauthenticated attackers to access sensitive details (e.g., product model name, WAN connection type, and other system information). The issue is triggered ...
CVE-2024-30572
Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntpserver parameter...
Netgear R6850 安全漏洞
The Netgear R6850 is a wireless router from NETGEAR. The Netgear R6850 suffers from an information disclosure vulnerability that originates from insufficient protection of sensitive information in the BRStop.html component, which can be exploited by an attacker to obtain sensitive information...
CVE-2024-30572
CVE-2024-30572 affects Netgear R6850 firmware 1.1.0.88, where the ntp_server parameter is vulnerable to command injection, enabling arbitrary command execution. Root cause: inadequate validation/filtering of input fed to ntp_server. Impact per the CVSSv3.1 vector (AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/...