Lucene search
+L

7 matches found

OSV
OSV
•added 2021/03/05 8:15 p.m.•14 views

CVE-2021-27256

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

8.8CVSS7.6AI score0.00963EPSS
SaveExploits0References2
OSV
OSV
•added 2021/03/05 8:15 p.m.•12 views

CVE-2021-27254

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the applysave.cgi endpoint. This issue results from the use of hard-coded...

8.8CVSS7AI score0.00516EPSS
SaveExploits0References2
NVD
NVD
•added 2021/03/05 8:15 p.m.•40 views

CVE-2021-27254

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the applysave.cgi endpoint. This issue results from the use of hard-coded...

8.8CVSS0.00516EPSS
SaveExploits0References2
Prion
Prion
•added 2021/03/05 8:15 p.m.•38 views

Authentication flaw

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the applysave.cgi endpoint. This issue results from the use of hard-coded...

8.3CVSS9AI score0.00516EPSS
SaveExploits0References2Affected Software43
Cvelist
Cvelist
•added 2021/03/05 8:00 p.m.•40 views

CVE-2021-27254

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the applysave.cgi endpoint. This issue results from the use of hard-coded...

6.3CVSS9.2AI score0.00516EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/05 12:00 a.m.•4 views

CVE-2021-27254: Use of Hard-coded Password

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the applysave.cgi endpoint. This issue results from the use of hard-coded...

8.8CVSS6.5AI score0.00516EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/05 12:00 a.m.•8 views

CVE-2021-27256: Improper Neutralization of Special Elements used in an OS Command

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

8.8CVSS6.6AI score0.00963EPSS
SaveExploits0References2
Rows per page
Query Builder