Lucene search
K

38 matches found

BDU FSTEC
BDU FSTEC
added 2025/06/18 12:0 a.m.6 views

The vulnerability of the bs_SetDNSInfo() function in the libshare-0.0.26.so library of the LB-LINK router software allows a attacker to execute arbitrary commands.

The vulnerability of the bsSetDNSInfo function in the libshare-0.0.26.so library of the LB-LINK router software is related to the lack of data cleaning measures at the management level when processing the parameters dns1 and dns2. Exploiting this vulnerability allows a remote attacker to execute...

10CVSS5.9AI score0.02265EPSS
Exploits1References2Affected Software7
RedhatCVE
RedhatCVE
added 2025/05/22 11:18 p.m.2 views

CVE-2022-44186

Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wandns1pri...

9.8CVSS7AI score0.01091EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/05/13 12:0 a.m.2 views

PT-2025-20916 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404 Description: A buffer overflow issue was discovered via the static dns1 parameter in the "formIpv6Setup" interface. Recommendations: For TOTOLINK A3002R version 4.0.0-B20230531.1404, avoid using th...

5.4CVSS6.5AI score0.03402EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/02/28 12:0 a.m.5 views

PT-2025-9131

Name of the Vulnerable Software and Affected Versions: TOTOlink A3002R version V1.1.1-B20200824.0128 Description: The issue arises from a buffer overflow due to improper input validation of the pppoe dns1 parameter in the formIpv6Setup interface of the /bin/boa endpoint. Recommendations: For...

8CVSS6.6AI score0.00439EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2025/02/06 4:6 a.m.8 views

CVE-2021-40410

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13620121102. At 4 the dnsdata-dns1 variable, that has the value of the dns1 parameter provided through the SetLocal API, is not validated properly. This would lead to an OS command...

9.1CVSS7.2AI score0.27876EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/11/05 12:0 a.m.2 views

PT-2024-8270 · NetGear · Netgear R6400 +3

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Netgear XR300 version 1.0.3.78 Netgear R7000P version 1.3.3.154 Netgear R6400 v2 version 1.0.4.128 Description: The issue is related to multiple stack overflow vulnerabilities in the wlg adv.cgi component of...

5.7CVSS7.8AI score0.0039EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/11/05 12:0 a.m.4 views

NETGEAR R8500 安全漏洞

The NETGEAR R8500 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 versions, which stems from a vulnerability in the apmode.cgi component where the apmodedns1pri and apmode dns1sec...

5.7CVSS7.4AI score0.00292EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/10/28 12:0 a.m.4 views

PT-2024-8322 · NetGear · Netgear Xr300 +3

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Netgear XR300 version 1.0.3.78 Netgear R7000P version 1.3.3.154 Netgear R6400 v2 version 1.0.4.128 Description: The issue is related to multiple stack overflow vulnerabilities in the ap mode.cgi component. Thes...

5.7CVSS7.7AI score0.00292EPSS
Exploits0References7
NVD
NVD
added 2024/06/03 2:15 p.m.32 views

CVE-2024-36728

TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action vlansetting with a sufficiently long dns1 or dns 2 key...

8.1CVSS7.8AI score0.05155EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2022/12/02 12:0 a.m.5 views

The vulnerability of the httpd daemon in the embedded software of the NETGEAR R7000P router allows a hacker to execute arbitrary code.

The vulnerability of the httpd daemon in the NETGEAR R7000P router’s embedded software is related to a buffer overflow error through the wandns1pri parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.4AI score0.01091EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/11/22 3:15 p.m.2 views

CVE-2022-44184

Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wandns1sec...

9.8CVSS5.8AI score0.00967EPSS
Exploits1References2
OSV
OSV
added 2022/11/22 2:15 p.m.2 views

CVE-2022-44200

Netgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters: stamodedns1pri and stamodedns1sec...

9.8CVSS5.8AI score0.00967EPSS
Exploits1References2
OSV
OSV
added 2022/11/22 2:15 p.m.3 views

CVE-2022-44187

Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via wandns1pri...

9.8CVSS5.8AI score0.01091EPSS
Exploits1References2
OSV
OSV
added 2022/11/22 2:15 p.m.2 views

CVE-2022-44186

Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wandns1pri...

9.8CVSS5.8AI score0.01091EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/11/22 12:0 a.m.2 views

NETGEAR R7000P 缓冲区错误漏洞

NETGEAR R7000P is a wireless router from NETGEAR, Inc. A buffer overflow vulnerability exists in NETGEAR R7000P versions V1.3.0.8 and V1.3.1.64, which stems from a lack of length validation of data entered for the stamodedns1pri and stamodedns1sec parameters, which could be exploited by an attack...

9.8CVSS8.1AI score0.00967EPSS
Exploits1References3
Cvelist
Cvelist
added 2022/11/22 12:0 a.m.16 views

CVE-2022-44194

Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameters apmodedns1pri and apmodedns1sec...

9.7AI score0.01372EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/10/30 12:0 a.m.4 views

PT-2022-5711 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.0.8 Description: The issue is related to a buffer overflow error in the httpd daemon of the NETGEAR R7000P router's firmware. This can be exploited by a remote attacker to execute arbitrary code through the wan dns1...

10CVSS9.7AI score0.00967EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2022/10/30 12:0 a.m.1 views

PT-2022-5720 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.0.8 Description: The issue is related to buffer overflow errors in the NETGEAR R7000P router's software. Exploitation of this issue may allow a remote attacker to execute arbitrary code through the wan dns1 pri...

9.8CVSS8.4AI score0.01091EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2022/10/30 12:0 a.m.2 views

PT-2022-5718 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P versions V1.3.0.8 through V1.3.1.64 Description: The issue is related to a buffer overflow error via parameters stamode dns1 pri and stamode dns1 sec. This can allow a remote attacker to execute arbitrary code through these...

10CVSS9.8AI score0.00967EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2022/10/30 12:0 a.m.3 views

PT-2022-5714 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.0.8 Description: The issue is related to buffer overflow errors in the NETGEAR R7000P router's embedded software. Exploitation of this issue may allow a remote attacker to execute arbitrary code through the apmode...

10CVSS9.6AI score0.01372EPSS
Exploits1References8
Rows per page
Query Builder