Lucene search
K

21 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:38 p.m.1 views

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

9.8CVSS7.5AI score0.04007EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2023/12/21 12:0 a.m.3 views

The vulnerability of the soapauth() function in Netgear N300 wireless router software (WNR2000v4) allows a hacker to execute arbitrary commands.

The vulnerability of the soapauth function in Netgear N300 wireless router microprogramming software WNR2000v4 is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafte...

9CVSS8.2AI score0.04007EPSS
Exploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/12/15 5:15 p.m.1 views

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

9.8CVSS7.5AI score0.04007EPSS
Exploits1References3
OSV
OSV
added 2023/12/15 5:15 p.m.1 views

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

9.8CVSS5.9AI score
Exploits0References2
NVD
NVD
added 2023/12/15 5:15 p.m.12 views

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

9.8CVSS0.04007EPSS
Exploits1References2
Prion
Prion
added 2023/12/15 5:15 p.m.16 views

Command injection

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

7.5CVSS7.8AI score0.04007EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/15 12:0 a.m.7 views

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

7.6AI score0.04007EPSS
Exploits1References2
CVE
CVE
added 2023/12/15 12:0 a.m.49 views

CVE-2023-50089

CVE-2023-50089 affects NETGEAR WNR2000v4, specifically version 1.0.0.70. The issue is a command injection that arises when using HTTP for SOAP authentication, allowing command execution after successful authentication. The CVSS vector in the record indicates a network -facing, high/critical impac...

9.8CVSS9.8AI score0.04007EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2023/12/15 12:0 a.m.15 views

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

10AI score0.04007EPSS
Exploits1References2
OSV
OSV
added 2022/09/23 1:15 a.m.1 views

CVE-2022-37232

Netgear N300 wireless router wnr2000v4-V1.0.0.70 is vulnerable to Buffer Overflow via uhttpd. There is a stack overflow vulnerability caused by strcpy...

9.8CVSS5.8AI score0.00955EPSS
Exploits0References3
CVE
CVE
added 2022/09/23 12:10 a.m.47 views

CVE-2022-37232

CVE-2022-37232 affects Netgear N300 wireless router WNR2000v4 with firmware version V1.0.0.70. The vulnerability is a buffer overflow in the uhttpd web server caused by strcpy, leading to a stack overflow. CVSS v3.1 base score is 9.8 (Network attack, high impact on confidentiality, integrity, and...

9.8CVSS9.5AI score0.00955EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2022/09/23 12:0 a.m.2 views

NETGEAR N300 缓冲区错误漏洞

NETGEAR N300 is a wireless router from NETGEAR. A buffer error vulnerability exists in the NETGEAR N300 wireless router wnr2000v4-V1.0.0.70 version, which stems from susceptibility to uhttpd buffer overflow and a stack overflow vulnerability in strcpy...

9.8CVSS8.6AI score0.00955EPSS
Exploits0References4
OSV
OSV
added 2022/09/22 10:15 p.m.2 views

CVE-2022-31937

Netgear N300 wireless router wnr2000v4-V1.0.0.70 was discovered to contain a stack overflow via strcpy in uhttpd...

9.8CVSS5.8AI score0.00955EPSS
Exploits0References3
Cvelist
Cvelist
added 2022/09/22 9:17 p.m.14 views

CVE-2022-31937

Netgear N300 wireless router wnr2000v4-V1.0.0.70 was discovered to contain a stack overflow via strcpy in uhttpd...

9.9AI score0.00955EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/09/22 12:0 a.m.3 views

NETGEAR N300 缓冲区错误漏洞

NETGEAR N300 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR N300 wireless router firmware version wnr2000v4-V1.0.0.70, which originates from a stack overflow in strcpy in its uhttpd component...

9.8CVSS8.4AI score0.00955EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/01/08 12:0 a.m.2 views

PT-2022-4911 · NetGear · Netgear N300 Wireless Router

Name of the Vulnerable Software and Affected Versions: Netgear N300 wireless router wnr2000v4 version V1.0.0.70 Description: The issue is related to a buffer overflow vulnerability caused by the strcpy function in the uhttpd web server, which can lead to a stack overflow. This vulnerability can b...

9.8CVSS9.4AI score0.00955EPSS
Exploits0References9
CNVD
CNVD
added 2021/05/10 12:0 a.m.6 views

Weak Password Vulnerability in NETGEAR WNR2000v4 Routers

The NETGEAR WNR2000v4 router is a wireless router device. A weak password vulnerability exists in the NETGEAR WNR2000v4 router, which can be exploited by an attacker to compromise the device, obtain sensitive information, and perform unauthorized operations...

7AI score
Exploits0
Cvelist
Cvelist
added 2017/05/26 8:0 p.m.22 views

CVE-2017-6862

NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID is PSV-2016-0261...

10AI score0.42696EPSS
Exploits0References3
CVE
CVE
added 2017/05/26 8:0 p.m.982 views

CVE-2017-6862

Netgear WNR2000 series (WNR2000v3 prior to 1.1.2.14, WNR2000v4 prior to 1.0.0.66, WNR2000v5 prior to 1.0.0.42) are affected by a buffer-overflow vulnerability in the administration web interface that allows authentication bypass and remote code execution. The root cause is a buffer overflow trigg...

9.8CVSS10AI score0.42696EPSS
In wildExploits0References4Affected Software1
0day.today
0day.today
added 2015/04/23 12:0 a.m.32 views

Netgear WNR2000v4 Abuse / XSS / Command Injection Vulnerabilities

Netgear WNR2000v4 suffers from code execution, missing abuse control, and cross site scripting vulnerabilities. I'm releasing a few vulnerabilities for the WNR2000v4 Netgear router. Netgear is currently working these issues. Quick Fix --------- If you own a WNR2000v4, set a strong password and se...

6.9AI score
Exploits0
Rows per page
Query Builder