CVE-2024-51004

The Netgear R8500 (v1.0.2.160) and R7000P (v1.3.3.154) routers are susceptible to multiple stack overflow vulnerabilities within the usb_device.cgi component. The root cause is identified as a buffer copy without checking the input size when processing the cifs_user, read_access, and write_access...

CVE-2024-52026

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoelocalip parameter at bswpppoe.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51016

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the addName%d parameter in usbapprove.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51014

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssidan parameter in bridgewirelessmain.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-52028: Buffer Copy without Checking Size of Input

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at wizpptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51022

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid parameter in bridgewirelessmain.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51004

Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usbdevice.cgi via the cifsuser, readaccess, and writeaccess parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51007

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at wireless.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50997

Several Netgear router models, including the R8500 (v1.0.2.160), XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400 v2 (v1.0.4.128), are vulnerable to a stack overflow in the pptp.cgi script. The root cause is a buffer copy operation that fails to check the size of input data when processing the p...

PT-2024-8365

Name of the Vulnerable Software and Affected Versions Netgear R8500 version 1.0.2.160 Description The issue is related to multiple stack overflow vulnerabilities in the openvpn.cgi component of the Netgear R8500 router's firmware. These vulnerabilities are caused by uncontrolled copying of user...

CVE-2024-52016

Netgear routers, including models R8500 (v1.0.2.160) , XR300 (v1.0.3.78) , R7000P (v1.3.3.154) , and R6400 v2 (v1.0.4.128) , are vulnerable to multiple stack overflow flaws in the wlg_adv.cgi component. The root cause is a lack of input size validation when processing the apmode_dns1_pri and apmo...

CVE-2024-51014

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssidan parameter in bridgewirelessmain.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50998

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component openvpn.cgi via the openvpnserviceport and openvpnserviceporttun parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51003

Netgear routers, specifically the R8500 v1.0.2.160 , XR300 v1.0.3.78 , R7000P v1.3.3.154 , and R6400 v2 1.0.4.128 , are susceptible to multiple stack overflow vulnerabilities within the ap_mode.cgi component. The root cause is improper handling of the apmode_dns1_pri and apmode_dns1_sec parameter...

CVE-2024-51022

The Netgear XR300 router, specifically version v1.0.3.78 , is vulnerable to a stack overflow in the bridge_wireless_main.cgi script. The root cause is the copying of buffers without verifying the size of the input data when processing the ssid parameter. A remote attacker can exploit this by send...

CVE-2024-51001: Buffer Copy without Checking Size of Input

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the sysDNSHost parameter at ddns.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51000: Buffer Copy without Checking Size of Input

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component wireless.cgi via the opmode, opmodean, and opmodean2 parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50994: Buffer Copy without Checking Size of Input

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component ipv6fix.cgi via the ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, and ipv6lanlength parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST...

CVE-2024-51006

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6staticip parameter in the ipv6tunnel function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51006: Buffer Copy without Checking Size of Input

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6staticip parameter in the ipv6tunnel function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...