The vulnerability of NETGEAR XR450 and XR500 Wi-Fi routers’ built-in software lies in the lack of measures taken to clean data at the management level, allowing attackers to execute arbitrary commands.

The vulnerability of NETGEAR XR450 and XR500 Wi-Fi routers’ built-in software relates to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted data remotely...

PT-2022-37675

Уязвимость встроенного программного обеспечения Wi-Fi роутеров NETGEAR XR450 и XR500 связана с непринятием мер по чистке данных на управляющем уровне. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнять произвольные команды путем передачи специально созданных данн...

CVE-2021-29069

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects XR450 before 2.3.2.114, XR500 before 2.3.2.114, and WNR2000v5 before 1.0.0.76...

PT-2021-18058

Name of the Vulnerable Software and Affected Versions: NETGEAR XR450 versions prior to 2.3.2.114 NETGEAR XR500 versions prior to 2.3.2.114 NETGEAR WNR2000v5 versions prior to 1.0.0.76 Description: The issue is related to command injection by an authenticated user. Recommendations: For NETGEAR XR4...

多款Netgear产品命令注入漏洞

Netgear NETGEAR XR500 and others are products of Netgear, Inc.NETGEAR XR500 is a wireless router.NETGEAR WNR2000v5 is a router.NETGEAR XR450 is a router. A command injection vulnerability exists in multiple NETGEAR models that allows command injection by an authenticated user. The following...