CVE-2024-52028

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at wizpptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-52026

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoelocalip parameter at bswpppoe.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51013

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the RADIUSAddr%dwla parameter at wireless.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51012

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6pridns parameter at ipv6fix.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51001

Affected product: Netgear R8500 v1.0.2.160. Vulnerability: stack overflow in the ddns.cgi component via the sysDNSHost parameter. Impact: Denial of Service (DoS) via a crafted POST request. Root cause (as described): improper handling/validation of input length leading to a stack overflow. Exploi...

CVE-2024-52016

Netgear devices (R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, R6400 v2 1.0.4.128) are affected by multiple stack overflow vulnerabilities in the wlg_adv.cgi component. The root cause is improper handling of the apmode_dns1_pri and apmode_dns1_sec parameters, enabling a crafted POST reque...

CVE-2024-50998

Netgear R8500 v1.0.2.160 is affected by CVE-2024-50998 due to multiple stack overflow vulnerabilities in the openvpn.cgi component. The openvpn_service_port and openvpn_service_port_tun parameters can trigger a buffer/stack overflow, leading to a Denial of Service (DoS) and, in some sources, pote...

CVE-2024-51020

Netgear R7000P is affected by CVE-2024-51020 due to a stack overflow in the USB ISP web interface. The vulnerability stems from improper handling of the apn parameter in usbISP_detail_edit.cgi, allowing a crafted POST request to trigger a DoS. Affected device: Netgear R7000P (v1.3.3.154). Root ca...

CVE-2024-50996

The CVE-2024-50996 issue affects Netgear devices (R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, R6400 v2 1.0.4.128) due to a stack overflow in the genie_bpa.cgi script via the bpa_server parameter. A crafted POST request can trigger a Denial of Service. Multiple sources confirm the vulner...

CVE-2024-52024

The CVE-2024-52024 issue affects Netgear XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400 v2 (1.0.4.128). It is a stack overflow in the wizpppoe.cgi component triggered by the pppoe_localip parameter, allowing a crafted POST request to cause a Denial of Service. Publicly available details in con...

CVE-2024-51012

CVE-2024-51012 affects Netgear R8500 v1.0.2.160. The vulnerability is a stack overflow in the ipv6_fix.cgi component triggered by the ipv6_pri_dns parameter, allowing an attacker to cause a Denial of Service via a crafted POST request. Public details consistently name the affected firmware/versio...

CVE-2024-51017

Netgear R7000P v1.3.3.154 contains a stack overflow in the l2tp.cgi component, triggered by the l2tp_user_netmask input. Multiple sources (NVD, Red Hat, CNVD, CNNVD) describe this as a vulnerability that can be exploited by sending crafted POST requests to cause Denial of Service; CNVD additional...

CVE-2024-52025

The CVE-2024-52025 entry affects Netgear XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400v2 (v1.0.4.128). A stack overflow in the geniepppoe.cgi component is triggered by processing the pppoe_localip parameter, allowing remote attackers to cause a Denial of Service via a crafted POST request. Pu...

CVE-2024-52028

CVE-2024-52028 affects NETGEAR R7000P (firmware v1.3.3.154). The vulnerability is a stack/buffer overflow in the wiz_pptp.cgi component, caused by improper handling of the pptp_user_netmask parameter, which can be triggered by a crafted POST request to trigger a Denial of Service. Multiple connec...

CVE-2024-51022

Netgear XR300, v1.0.3.78, contains a stack overflow in bridge_wireless_main.cgi when processing the ssid parameter, allowing a crafted POST to cause a Denial of Service. Public details across NVD/Red Hat/CVE records confirm the issue but do not provide an attacker’s exploit vector beyond the POST...

CVE-2024-50994

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component ipv6fix.cgi via the ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, and ipv6lanlength parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST...

CVE-2024-52028

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at wizpptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-52030

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at ruwanflow.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-52029

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at geniepptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-52030

Netgear R7000P v1.3.3.154 is affected by a stack/buffer overflow in ru_wan_flow.cgi triggered via the pptp_user_netmask parameter. A crafted POST request can cause Denial of Service (DoS). Some sources additionally note potential arbitrary-code concerns, but the primary detail is DoS via a crafte...