CVE-2023-36499

Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wlassid and wlgssid parameters at genieapwifichange.cgi...

Buffer overflow

Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wlassid and wlgssid parameters at genieapwifichange.cgi...

CVE-2023-36499

Netgear XR300 v1.0.3.78 is affected by CVE-2023-36499 due to multiple buffer overflows in the genie_ap_wifi_change.cgi endpoint, triggered by parameters wla_ssid and wlg_ssid. Reported impact includes potential remote code execution or denial of service per CNVD/Red Hat entries, with CVSS v3.1 ba...