CVE-2021-41314

Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several faulty aspects of the authentication scheme - allows the attacker to create or overwrite a file with specific content e.g., the "2" string. This leads to admin session crafting and...

PT-2021-23269

Name of the Vulnerable Software and Affected Versions GC108P versions prior to 1.0.8.2 GC108PP versions prior to 1.0.8.2 GS108Tv3 versions prior to 7.0.7.2 GS110TPP versions prior to 7.0.7.2 GS110TPv3 versions prior to 7.0.7.2 GS110TUP versions prior to 1.0.5.3 GS308T versions prior to 1.0.3.2...

CVE-2021-41314: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several faulty aspects of the authentication scheme - allows the attacker to create or overwrite a file with specific content e.g., the "2" string. This leads to admin session crafting and...