CVE-2024-52016

Netgear routers, including models R8500 (v1.0.2.160) , XR300 (v1.0.3.78) , R7000P (v1.3.3.154) , and R6400 v2 (v1.0.4.128) , are vulnerable to multiple stack overflow flaws in the wlg_adv.cgi component. The root cause is a lack of input size validation when processing the apmode_dns1_pri and apmo...

CVE-2024-52017

The Netgear XR300 wireless router (v1.0.3.78) contains a stack overflow vulnerability in the bridge_wireless_main.cgi component. The root cause is the copying of buffers without checking the size of the input data during the processing of the passphrase parameter. A remote attacker can exploit th...

CVE-2024-52023

Netgear XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400 v2 (v1.0.4.128) are vulnerable to a stack overflow in the pppoe2.cgi component. The root cause is a buffer copy operation that fails to check the size of input data when processing the pppoe_localip parameter. A remote attacker can exploit...

CVE-2024-51007

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at wireless.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51004

Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usbdevice.cgi via the cifsuser, readaccess, and writeaccess parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50996

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpaserver parameter at geniebpa.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50997

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptpuserip parameter at pptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51000

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component wireless.cgi via the opmode, opmodean, and opmodean2 parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50998

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component openvpn.cgi via the openvpnserviceport and openvpnserviceporttun parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51022

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid parameter in bridgewirelessmain.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-50994

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component ipv6fix.cgi via the ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, and ipv6lanlength parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted POST...

CVE-2024-51012

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6pridns parameter at ipv6fix.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51014

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssidan parameter in bridgewirelessmain.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51013

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the RADIUSAddr%dwla parameter at wireless.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51006

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6staticip parameter in the ipv6tunnel function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51016

The Netgear XR300 wireless router (version 1.0.3.78 ) is vulnerable to a stack overflow within the usb_approve.cgi script. The flaw originates from the addName%d parameter, which fails to properly validate the length of input data. A remote attacker can exploit this by sending a specially crafted...

CVE-2024-51004

The Netgear R8500 (v1.0.2.160) and R7000P (v1.3.3.154) routers are susceptible to multiple stack overflow vulnerabilities within the usb_device.cgi component. The root cause is identified as a buffer copy without checking the input size when processing the cifs_user, read_access, and write_access...

CVE-2024-50996

Netgear routers, specifically models R8500 v1.0.2.160 , XR300 v1.0.3.78 , R7000P v1.3.3.154 , and R6400 v2 1.0.4.128 , are susceptible to a stack overflow vulnerability. The issue exists in the genie_bpa.cgi script when processing the bpa_server parameter due to a buffer copy without checking the...

CVE-2024-50997

Several Netgear router models, including the R8500 (v1.0.2.160), XR300 (v1.0.3.78), R7000P (v1.3.3.154), and R6400 v2 (v1.0.4.128), are vulnerable to a stack overflow in the pptp.cgi script. The root cause is a buffer copy operation that fails to check the size of input data when processing the p...

CVE-2024-51003

Netgear routers, specifically the R8500 v1.0.2.160 , XR300 v1.0.3.78 , R7000P v1.3.3.154 , and R6400 v2 1.0.4.128 , are susceptible to multiple stack overflow vulnerabilities within the ap_mode.cgi component. The root cause is improper handling of the apmode_dns1_pri and apmode_dns1_sec parameter...