Lucene search
+L

511 matches found

CVE
CVE
added 2022/11/22 12:00 a.m.99 views

CVE-2022-44194

Netgear R7000P firmware v1.3.0.8 is affected by a buffer overflow in the apmode_dns1_pri and apmode_dns1_sec parameters. The issue, described across multiple sources, arises from a bound check failure in embedded software and yields high-impact outcomes (C/H/I/A) per CVSS v3.1 (9.8, CRITICAL) wit...

9.8CVSS9.4AI score0.01342EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2022/11/22 12:00 a.m.73 views

CVE-2022-44200

Summary: CVE-2022-44200 affects Netgear R7000P routers (versions 1.3.0.8 and 1.3.1.64). A buffer overflow can occur via the parameters stamode_dns1_pri and stamode_dns1_sec , potentially enabling remote code execution or denial of service as described in connected sources. Other references corrob...

9.8CVSS9.4AI score0.00967EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/30 12:00 a.m.23 views

PT-2022-5705 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.1.64 Description: The issue is related to a buffer overflow error in the httpd daemon of the NETGEAR R7000P router's software. This error occurs via the wan dns1 pri parameter in the /usr/sbin/httpd endpoint...

10CVSS7.9AI score0.01091EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2022/10/30 12:00 a.m.6 views

PT-2022-5716 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.1.64 Description: The issue is related to buffer overflow errors in the NETGEAR R7000P router's software. Exploitation of this issue may allow a remote attacker to cause a denial of service via the openvpn push1...

9.8CVSS9.3AI score0.00967EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2022/10/30 12:00 a.m.6 views

PT-2022-5717 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.0.8 Description: The issue is related to a buffer overflow error in the Netgear R7000P router's software. This can be exploited by a remote attacker through the openvpn server ip parameter, potentially allowing the...

10CVSS9.6AI score0.01091EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2022/10/30 12:00 a.m.9 views

PT-2022-5719 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.0.8 Description: The issue is related to buffer overflow errors in the NETGEAR R7000P router's software. Exploitation of this issue may allow a remote attacker to execute arbitrary code via the openvpn push1...

9.8CVSS9.7AI score0.01091EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2022/10/30 12:00 a.m.7 views

PT-2022-5715 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.1.64 Description: The issue is related to buffer overflow errors in the NETGEAR R7000P router's embedded software. Exploitation of this issue may allow a remote attacker to execute arbitrary code through the openvpn...

10CVSS9.7AI score0.00967EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2022/10/30 12:00 a.m.8 views

PT-2022-5722 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.1.64 Description: The issue is related to buffer overflow errors in the httpd daemon of the NETGEAR R7000P router's embedded software. These errors occur through the starthour, startminute, endhour, and endminute...

9.8CVSS7.9AI score0.01091EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2022/10/30 12:00 a.m.28 views

PT-2022-5711 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.0.8 Description: The issue is related to a buffer overflow error in the httpd daemon of the NETGEAR R7000P router's firmware. This can be exploited by a remote attacker to execute arbitrary code through the wan dns1...

10CVSS9.7AI score0.00967EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2022/10/30 12:00 a.m.9 views

PT-2022-5714 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.0.8 Description: The issue is related to buffer overflow errors in the NETGEAR R7000P router's embedded software. Exploitation of this issue may allow a remote attacker to execute arbitrary code through the apmode...

10CVSS9.6AI score0.01342EPSS
SaveExploits1References8
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:00 a.m.13 views

The vulnerability of the built-in software of NETGEAR R7000, R6900P, and R7000P routers lies in the lack of measures to sanitize input data, allowing attackers to execute arbitrary commands.

The vulnerability of the embedded software of NETGEAR R7000, R6900P, and R7000P routers lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

9CVSS8AI score0.00972EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:00 a.m.19 views

The vulnerability of the built-in software of NETGEAR XR300, R7000P, and R6900P routers lies in the lack of measures to sanitize input data, allowing attackers to execute arbitrary commands.

The vulnerability of NETGEAR XR300, R7000P, and R6900P router’s built-in software lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9.6CVSS8.1AI score0.01667EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:00 a.m.11 views

The vulnerability of the embedded software of NETGEAR’s R7000, R7900, R8000, RAX200, R7000P, RAX80, R6900P, and RAX75 routers exists due to the lack of protective measures for the website structure. This vulnerability allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the embedded software of NETGEAR’s R7000, R7900, R8000, RAX200, R7000P, RAX80, R6900P, and RAX75 routers exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and...

5.4CVSS5.9AI score0.00479EPSS
SaveExploits0References3Affected Software8
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.15 views

The vulnerability of NETGEAR Wi-Fi router software models such as R6400, R7000, R6900P, R7000P, R8000, RBK852, RBR850, and RBS850 lies in improper resource release, which allows a hacker to trigger a service failure.

The vulnerability of NETGEAR Wi-Fi router software models such as R6400, R7000, R6900P, R7000P, R8000, RBK852, RBR850, and RBS850 lies in improper resource release. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

6.9CVSS5.5AI score0.00392EPSS
SaveExploits0References4Affected Software8
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.15 views

The vulnerability of NETGEAR EX6000, EX6120, EX6130, R6300v2, R6400, R7000, R7900, R8000, R7000P, R8000P, RAX80, R6900P, R7900P, RAX75 Wi-Fi router software lies in the copying of buffers without checking the size of the input data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of NETGEAR EX6000, EX6120, EX6130, R6300v2, R6400, R7000, R7900, R8000, R7000P, R8000P, RAX80, R6900P, R7900P, and RAX75 Wi-Fi routers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an intruder to gain...

7.3CVSS7.6AI score0.0045EPSS
SaveExploits0References3Affected Software14
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:00 a.m.11 views

The vulnerability of the microprogrammed Wi-Fi router software R7000P and R8000, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of the microprogrammed Wi-Fi router software R7000P and R8000 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

9.6CVSS7.6AI score0.00458EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2021/12/26 1:15 a.m.11 views

CVE-2021-45679

Certain NETGEAR devices are affected by privilege escalation. This affects R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140, and RS400 before 1.5.1.80...

7.2CVSS5.8AI score0.00959EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/26 1:15 a.m.6 views

CVE-2021-45673

Certain NETGEAR devices are affected by stored XSS. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before 1.0.4.62, RAX200 before 1.0.3.106, R7000P before 1.3.3.140, RAX80 before 1.0.3.106, R6900P before 1.3.3.140, and RAX75 before 1.0.3.106...

5.4CVSS6.1AI score0.00479EPSS
SaveExploits0References2
NVD
NVD
added 2021/12/26 1:15 a.m.22 views

CVE-2021-45673

Certain NETGEAR devices are affected by stored XSS. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before 1.0.4.62, RAX200 before 1.0.3.106, R7000P before 1.3.3.140, RAX80 before 1.0.3.106, R6900P before 1.3.3.140, and RAX75 before 1.0.3.106...

5.4CVSS0.00479EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/26 1:15 a.m.30 views

CVE-2021-45670

Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7000 before 1.0.11.116, R7900 before 1.0.4.38, R8000 before 1.0.4.68, RAX200 before...

6.5CVSS0.00418EPSS
SaveExploits0References1
Rows per page
Query Builder