Lucene search
+L

269 matches found

BDU FSTEC
BDU FSTEC
added 2023/08/24 12:00 a.m.12 views

The vulnerability of NETGEAR RAX30 network interface cards’ UPnP microprogramming service allows a hacker to execute arbitrary code.

The vulnerability of NETGEAR RAX30 microprogrammed software routing devices stems from the lack of measures taken to sanitize data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8AI score0.01097EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/22 12:00 a.m.8 views

PT-2023-4499 · NetGear · Netgear Rax30

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this issue. The...

8.8CVSS7.4AI score0.01097EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2023/08/22 12:00 a.m.27 views

NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the telnet C...

8CVSS7.4AI score0.00722EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/08/22 12:00 a.m.8 views

PT-2023-4500 · NetGear · Netgear Rax30

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: The issue is related to a stack-based buffer overflow in the telnet CLI service of NETGEAR RAX30 routers, allowing network-adjacent attackers to execute arbitrary code on affected...

8CVSS8AI score0.00722EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/08/22 12:00 a.m.22 views

PT-2023-4498 · NetGear · Netgear Rax30

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. The specific flaw exists within the UPnP service, resulting...

8.8CVSS7.3AI score0.01097EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2023/08/22 12:00 a.m.25 views

NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DHCP server. The issue results from the lack of proper validation of...

8.8CVSS7.3AI score0.01097EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/07/10 12:00 a.m.12 views

The vulnerability of the system() function in NETGEAR RAX30 microprogramming devices allows a hacker to execute arbitrary code.

The vulnerability of the system function in NETGEAR RAX30 microprogramming devices stems from insufficient validation of input data during the processing of port discovery requests via UPnP. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8AI score0.01258EPSS
SaveExploits0References6Affected Software1
CNVD
CNVD
added 2023/07/03 12:00 a.m.17 views

NETGEAR RAX30 UPnP Command Injection Vulnerability

The NETGEAR RAX30 is a wireless router from NETGEAR. The NETGEAR RAX30 suffers from a command injection vulnerability that stems from a command injection vulnerability when processing UPnP port mapping requests, which can be exploited by an attacker to execute arbitrary commands...

8.8CVSS9.1AI score0.01258EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/06/30 12:00 a.m.35 views

NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of UPnP port mapping requests. The issue results from the...

8.8CVSS7.3AI score0.01258EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/06/26 12:00 a.m.17 views

The vulnerability of NETGEAR RAX30 router microprogramming software, related to the use of strictly encrypted login credentials, allows a hacker to gain full access to the system.

The vulnerability of NETGEAR RAX30 router microprogramming software lies in the use of strictly encrypted login credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the system...

6.3CVSS6.5AI score0.00447EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/26 12:00 a.m.13 views

The vulnerability of NETGEAR RAX30 router microprogramming software lies in the improper handling of symbolic links before accessing the file, allowing attackers to disclose confidential information.

The vulnerability of NETGEAR RAX30 router microprogramming software is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to disclose confidential information...

4.9CVSS5.4AI score0.00645EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/26 12:00 a.m.12 views

The vulnerability of the `cmsCli_authenticate` function in NETGEAR RAX30 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the cmsCliauthenticate function in NETGEAR RAX30 router microprogramming devices is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

8.8CVSS8.3AI score0.00897EPSS
SaveExploits0References5Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/06/08 12:00 a.m.32 views

NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability

This vulnerability allows physically present attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of symbolic links on removable USB media. By...

4.6CVSS6.1AI score0.00645EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/06/08 12:00 a.m.26 views

NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the system configuration. The system contains a hardcoded user account...

6.3CVSS6.8AI score0.00447EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/06/08 12:00 a.m.27 views

NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within a shared library used by the telnetd service, which listens on TCP port ...

8.8CVSS7.3AI score0.00897EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/05/15 12:00 a.m.14 views

The vulnerability of NETGEAR RAX30 router microprogramming software lies in the lack of protection for service data. This allows attackers to disclose sensitive information and completely compromise the device.

The vulnerability of NETGEAR RAX30 router microprogramming software is related to the lack of protection for operational data. Exploiting this vulnerability can allow attackers to disclose sensitive information and completely compromise the device by sending specially crafted SOAP requests...

8.4CVSS7.1AI score0.00571EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/15 12:00 a.m.9 views

The vulnerability of NETGEAR RAX30 router microprogramming software lies in the lack of proper verification of the length of user data before it is copied into the fixed-length stack buffer. This allows a hacker to execute arbitrary code in the context of the root user.

The vulnerability of NETGEAR RAX30 router microprogramming software lies in the lack of proper verification of the length of user data before it is copied into the fixed-length stack buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the root context using...

7.7CVSS7.2AI score0.00856EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/15 12:00 a.m.10 views

The vulnerability of NETGEAR RAX30 and NETGEAR RAXE300 microprogrammed software routers stems from the lack of protective measures for the website structure, allowing attackers to execute arbitrary code within the root context.

The vulnerability of NETGEAR RAX30 and NETGEAR RAXE300 router microprogramming systems exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the root context...

6.8CVSS7.1AI score0.01238EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/05/15 12:00 a.m.8 views

The vulnerability of the soap_serverd binary in NETGEAR RAX30 microprogramming devices allows a hacker to bypass authentication procedures and execute arbitrary code.

The vulnerability of the binary file soapserverd in NETGEAR RAX30 router microprogramming systems arises due to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to bypass authentication procedures and execute arbitrary code...

8.4CVSS8.6AI score0.00782EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/15 12:00 a.m.13 views

The vulnerability of the soap_serverd binary in NETGEAR RAX30 microprogramming devices allows a hacker to bypass authentication procedures and execute arbitrary code.

The vulnerability of the binary file soapserverd in NETGEAR RAX30 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to bypass authentication procedures and execute arbitrary code...

8.4CVSS8.6AI score0.00782EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder