CVE-2024-52029

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at geniepptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51012

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6pridns parameter at ipv6fix.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51012

CVE-2024-51012 affects Netgear R8500 v1.0.2.160. The vulnerability is a stack overflow in the ipv6_fix.cgi component triggered by the ipv6_pri_dns parameter, allowing an attacker to cause a Denial of Service via a crafted POST request. Public details consistently name the affected firmware/versio...

CVE-2024-52028

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at wizpptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51017

Netgear R7000P v1.3.3.154 contains a stack overflow in the l2tp.cgi component, triggered by the l2tp_user_netmask input. Multiple sources (NVD, Red Hat, CNVD, CNNVD) describe this as a vulnerability that can be exploited by sending crafted POST requests to cause Denial of Service; CNVD additional...

CVE-2024-51007

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at wireless.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51020

Netgear R7000P is affected by CVE-2024-51020 due to a stack overflow in the USB ISP web interface. The vulnerability stems from improper handling of the apn parameter in usbISP_detail_edit.cgi, allowing a crafted POST request to trigger a DoS. Affected device: Netgear R7000P (v1.3.3.154). Root ca...

CVE-2024-52024

The CVE-2024-52024 issue affects Netgear XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400 v2 (1.0.4.128). It is a stack overflow in the wizpppoe.cgi component triggered by the pppoe_localip parameter, allowing a crafted POST request to cause a Denial of Service. Publicly available details in con...

CVE-2024-51001

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the sysDNSHost parameter at ddns.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51013

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the RADIUSAddr%dwla parameter at wireless.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-52016

Netgear devices (R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, R6400 v2 1.0.4.128) are affected by multiple stack overflow vulnerabilities in the wlg_adv.cgi component. The root cause is improper handling of the apmode_dns1_pri and apmode_dns1_sec parameters, enabling a crafted POST reque...

CVE-2024-51001

Affected product: Netgear R8500 v1.0.2.160. Vulnerability: stack overflow in the ddns.cgi component via the sysDNSHost parameter. Impact: Denial of Service (DoS) via a crafted POST request. Root cause (as described): improper handling/validation of input length leading to a stack overflow. Exploi...

CVE-2024-51022

Netgear XR300, v1.0.3.78, contains a stack overflow in bridge_wireless_main.cgi when processing the ssid parameter, allowing a crafted POST to cause a Denial of Service. Public details across NVD/Red Hat/CVE records confirm the issue but do not provide an attacker’s exploit vector beyond the POST...

CVE-2024-51014

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssidan parameter in bridgewirelessmain.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51016

CVE-2024-51016 affects Netgear XR300 v1.0.3.78 and is caused by a stack overflow in the addName%d parameter of the usb_approve.cgi script, exploitable by a crafted POST request to induce a DoS. The available documents consistently describe a buffer/stack overflow in usb_approve.cgi without citing...

CVE-2024-50998

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component openvpn.cgi via the openvpnserviceport and openvpnserviceporttun parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-52025

The CVE-2024-52025 entry affects Netgear XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400v2 (v1.0.4.128). A stack overflow in the geniepppoe.cgi component is triggered by processing the pppoe_localip parameter, allowing remote attackers to cause a Denial of Service via a crafted POST request. Pu...

CVE-2024-51014

Netgear XR300 v1.0.3.78 is affected by a stack overflow in the bridge_wireless_main.cgi component, triggered by the ssid_an parameter. The vulnerability allows remote attackers to cause a Denial of Service by sending a crafted POST request to the bridge wireless main.cgi endpoint. The available s...

CVE-2024-51018

Netgear R7000P v1.3.3.154 contains a stack overflow in the pptp.cgi component, triggered by the pptp_user_netmask parameter, enabling a Denial of Service via a crafted POST request. Sources consistently identify the affected endpoint and vulnerability class, with no patch version provided in the ...

CVE-2024-52030

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at ruwanflow.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...