Lucene search
+L

16 matches found

NVD
NVD
•added 2022/01/13 10:15 p.m.•93 views

CVE-2021-34978

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. A crafted SOAP request can trigg...

8.8CVSS0.0152EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/01/13 10:15 p.m.•10 views

CVE-2021-34978

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. A crafted SOAP request can trigg...

8.8CVSS7.6AI score0.0152EPSS
SaveExploits0References3
Prion
Prion
•added 2022/01/13 10:15 p.m.•24 views

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. When parsing the SOAPLOGINTOKEN...

8.3CVSS8.8AI score0.01372EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/01/13 10:15 p.m.•29 views

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. A crafted SOAP request can trigg...

8.3CVSS8.9AI score0.0152EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/01/13 9:44 p.m.•44 views

CVE-2021-34980

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. When parsing the SOAPLOGINTOKEN...

8.8CVSS9AI score0.01372EPSS
SaveExploits0References2
CVE
CVE
•added 2022/01/13 9:44 p.m.•67 views

CVE-2021-34980

The CVE-2021-34980 entry concerns NETGEAR R6260 routers (1.1.0.78_1.0.1). The vulnerability is a stack-based buffer overflow in setupwizard.cgi triggered by parsing the SOAP_LOGIN_TOKEN environment variable, where input length is not validated before copying into a fixed-size stack buffer. This a...

8.8CVSS8.8AI score0.01372EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/01/13 9:44 p.m.•55 views

CVE-2021-34978

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. A crafted SOAP request can trigg...

8.8CVSS9.1AI score0.0152EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/13 12:00 a.m.•3 views

CVE-2021-34980: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. When parsing the SOAPLOGINTOKEN...

8.8CVSS6.7AI score0.01372EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/13 12:00 a.m.•3 views

CVE-2021-34978: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. A crafted SOAP request can trigg...

8.8CVSS6.6AI score0.0152EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/11/02 12:00 a.m.•16 views

The vulnerability of the setupwizard.cgi component in NETGEAR Wi-Fi router software models such as AC2100, AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6350, R6330, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, R7450, and WAC124 allows a hacker to execute arbitrary code.

The vulnerability of the setupwizard.cgi component in NETGEAR Wi-Fi routers such as AC2100, AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6350, R6330, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, R7450, and WAC124 lies in buffer overflow in the stack. Exploiting this...

8.8CVSS8.3AI score0.0152EPSS
SaveExploits0References4Affected Software19
BDU FSTEC
BDU FSTEC
•added 2021/11/02 12:00 a.m.•11 views

The vulnerability of the setupwizard.cgi component in NETGEAR Wi-Fi routers such as AC2100, AC2400, AC2600, R6020, R6080, R6120, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450 allows a hacker to execute arbitrary code.

The vulnerability of the setupwizard.cgi component in NETGEAR Wi-Fi routers such as AC2100, AC2400, AC2600, R6020, R6080, R6120, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450 is related to buffer overflow in the stack. Exploiting this vulnerability allows an...

8.8CVSS8.3AI score0.01372EPSS
SaveExploits0References3Affected Software17
CNVD
CNVD
•added 2021/10/31 12:00 a.m.•67 views

Buffer Overflow Vulnerability in the NETGEAR R6260 Stack

NETGEAR R6260 is a router from Netgear, Inc. NETGEAR R6260 routers is vulnerable because the setupwizard.cgi page fails to properly validate the length of data when parsing the SOAP LOGIN TOKEN environment variable. An attacker could exploit this vulnerability to execute arbitrary code on an...

8.8CVSS5.9AI score0.01372EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/28 12:00 a.m.•43 views

NETGEAR R6260 setupwizard.cgi Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. When parsing the SOAPLOGINTOKEN environment...

8.8CVSS5.6AI score0.01372EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/28 12:00 a.m.•58 views

NETGEAR R6260 setupwizard.cgi Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. A crafted SOAP request can trigger an overflow...

8.8CVSS6.4AI score0.0152EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/13 12:00 a.m.•1 views

PT-2021-4629

Name of the Vulnerable Software and Affected Versions NETGEAR R6260 version 1.1.0.78 1.0.1 NETGEAR AC2100, AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6350, R6330, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, R7450, WAC124 affected versions not specified Description This...

8.8CVSS0.0152EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2021/10/13 12:00 a.m.•4 views

PT-2021-4628

Name of the Vulnerable Software and Affected Versions NETGEAR R6260 version 1.1.0.78 1.0.1 Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR routers. Authentication is not required to exploit this issue. The specific flaw exist...

8.8CVSS0.01372EPSS
SaveExploits0References8
Rows per page
Query Builder