CVE-2023-39550

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the checkauth function...

Buffer overflow

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the updateauth function...

Buffer overflow

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the checkauth function...

CVE-2023-38922

Affected Netgear devices: JWNR2000v2 (v1.0.0.11), XWN5001 (v0.4.1.1), and XAVN2001v2 (v0.4.0.7). The issue is described as multiple buffer overflows in the update_auth function, exploitable via the http_passwd and http_username parameters. This can lead to arbitrary code execution in the worst ca...