CVE-2024-52020

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wangateway parameter at wizfix2.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...

CVE-2024-50995

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the sharename parameter at usbremotesmbconf.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50994

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component ipv6fix.cgi via the ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, and ipv6lanlength parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST...

CVE-2024-50998

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component openvpn.cgi via the openvpnserviceport and openvpnserviceporttun parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51012

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6pridns parameter at ipv6fix.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51006

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6staticip parameter in the ipv6tunnel function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2022-27947

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands such as telnetd via shell metacharacters in the ipv6fix.cgi ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, or ipv6lanlength parameter...

CVE-2017-18710

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R8300 before 1.0.2.106 and R8500 before 1.0.2.106...

CVE-2017-18759

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104...

CVE-2017-18848

Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.0.36, AC1450 before 1.0.0.36, R7300 before 1.0.0.54, and R8500 before 1.0.2.94...

The vulnerability of the ipv6_tunnel function in NETGEAR R8500 Wi-Fi routers allows a hacker to cause a service failure.

The vulnerability of the ipv6tunnel function in NETGEAR R8500 Wi-Fi routers is related to buffer overflows in the stack when processing the ipv6staticipl parameter. Exploiting this vulnerability allows a remote attacker to trigger a Denial-of-Service attack DoS through a crafted POST request...

The vulnerability in the ether.cgi script of NETGEAR R8500 router software allows a hacker to execute arbitrary commands.

The vulnerability of the ether.cgi script in NETGEAR R8500 router microprogramming software relates to the failure to take measures to neutralize special elements used in the operating system’s processing of the wangateway parameter. Exploiting this vulnerability allows a remote attacker to execu...

The vulnerability in the admin_account.cgi script of Netgear R8500’s integrated routing software allows a hacker to execute arbitrary commands.

The vulnerability of the adminaccount.cgi microprogramming system in Netgear R8500 routers exists due to the failure to take measures to neutralize special elements used in the operating system’s command for processing the sysNewPasswd parameter. Exploiting this vulnerability allows a malicious...

The vulnerability in the openvpn.cgi script of Netgear R8500’s integrated routing software allows a hacker to induce a service failure.

The vulnerability in the openvpn.cgi microprogramming system of Netgear R8500 relates to the copying of buffers without checking the size of the input data during the processing of parameters openvpnserviceport and openvpnserviceporttun. Exploiting this vulnerability allows a malicious actor to...

The vulnerability in the usb_device.cgi script of NETGEAR’s router microprogramming software allows a hacker to induce a service failure.

The vulnerability in the usbdevice.cgi script of NETGEAR’s R8500 and R7000P router microprogramming systems lies in a buffer overflow that occurs during the processing of the cifsuser, readaccess, and writeaccess parameters. Exploiting this vulnerability allows an attacker to trigger a...

The vulnerability in the `usb_remote_smb_conf.cgi` script of Netgear R8500 router software allows a hacker to induce a service failure.

The vulnerability in the usbremotesmbconf.cgi script of Netgear R8500 router microprogramming software lies in the copying of buffers without checking the size of the input data during the processing of the sharename parameter. Exploiting this vulnerability allows a malicious actor to cause servi...

The vulnerability in the wireless.cgi script of Netgear R8500 router software allows a hacker to induce a service failure.

The vulnerability in the wireless.cgi script of Netgear R8500 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of parameters opmode, opmodean, and opmodean2. Exploiting this vulnerability allows a malicious actor to caus...

The vulnerability in the ddns.cgi microprogramming system of Netgear R8500’s routers allows a hacker to induce a service failure.

The vulnerability in the ddns.cgi microprogramming software of Netgear R8500 routers stems from the copying of buffers without checking the size of the input data during the processing of the sysDNSHos parameter. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of the wiz_fix2.cgi script of the Netgear R8500 router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the wizfix2.cgi microprogramming software for Netgear R8500 routers lies in the lack of measures to neutralize special elements used in the operating system’s commands when processing the wangateway parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability in the bsw_fix.cgi script of Netgear R8500 router software allows a hacker to execute arbitrary commands.

The vulnerability of the bswfix.cgi script of the Netgear R8500 router software relates to the failure to eliminate special elements used in the operating system’s commands when processing the wangateway parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary comman...