CVE-2020-10924

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

CVE-2020-10924

creationtimestamp| type| source ---|---|--- 2020-07-01 20:12:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/netgearr6700passreset.rb 2020-07-28 22:55:22+00:00| seen| https://t.me/cibsecurity/13713 2025-02-06 03:13:44+00:00| seen|...

Netgear R6700v3 Unauthenticated LAN Admin Password Reset

This module targets ZDI-20-704 aka CVE-2020-10924, a buffer overflow vulnerability in the UPNP daemon /usr/sbin/upnpd, on Netgear R6700v3 routers running firmware versions from V1.0.2.62 up to but not including V1.0.4.94, to reset the password for the 'admin' user back to its factory default of...