Lucene search
K

8 matches found

BDU FSTEC
BDU FSTEC
โ€ขadded 2024/11/20 12:0 a.m.โ€ข2 views

The vulnerability in the `usb_remote_smb_conf.cgi` script of NETGEAR R8500 router software allows a hacker to execute arbitrary commands.

The vulnerability in the usbremotesmbconf.cgi script of NETGEAR R8500 router microprogramming software lies in the lack of measures to neutralize special elements used in the operating systemโ€™s command when processing the sharename parameter. Exploiting this vulnerability allows a remote attacker...

8CVSS5.9AI score0.00711EPSS
Exploits0References3Affected Software1
OSV
OSV
โ€ขadded 2024/11/05 3:15 p.m.โ€ข2 views

CVE-2024-51005

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sharename parameter at usbremotesmbconf.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...

8CVSS6AI score0.00711EPSS
Exploits0References2
OSV
OSV
โ€ขadded 2024/11/05 3:15 p.m.โ€ข2 views

CVE-2024-50995

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the sharename parameter at usbremotesmbconf.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

5.7CVSS5.8AI score0.00238EPSS
Exploits0References2
Positive Technologies
Positive Technologies
โ€ขadded 2024/10/28 12:0 a.m.โ€ข2 views

PT-2024-8390 ยท NetGear ยท Netgear R8500

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Description: The issue is related to a command injection vulnerability in the share name parameter at the "usb remote smb conf.cgi" endpoint. This vulnerability allows attackers to execute arbitrary OS commands...

8CVSS7.6AI score0.00711EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
โ€ขadded 2024/10/25 12:0 a.m.โ€ข3 views

The vulnerability in the `usb_remote_smb_conf.cgi` script of NETGEAR XR1000 Wi-Fi routers allows a hacker to execute arbitrary commands.

The vulnerability in the usbremotesmbconf.cgi script of NETGEAR XR1000 Wi-Fi routers lies in the lack of measures for sanitizing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the sharename parameter...

8.4CVSS5.9AI score0.10897EPSS
Exploits0References4Affected Software1
OSV
OSV
โ€ขadded 2024/10/11 10:15 p.m.โ€ข4 views

CVE-2024-35517

Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usbremotesmbconf.cgi via the sharename parameter...

7.2CVSS5.8AI score0.10897EPSS
Exploits0References1
CNNVD
CNNVD
โ€ขadded 2024/10/11 12:0 a.m.โ€ข3 views

NETGEAR XR1000 ๅฎ‰ๅ…จๆผๆดž

The NETGEAR XR1000 is a dual-band Wi-Fi 6 router from NETGEAR designed for gaming. A security vulnerability exists in NETGEAR XR1000 version v1.0.0.64, which stems from vulnerability to command injection attacks with the sharename parameter. No details of the vulnerability are provided at this ti...

8.4CVSS7.4AI score0.10897EPSS
Exploits0References2
Positive Technologies
Positive Technologies
โ€ขadded 2024/02/21 12:0 a.m.โ€ข6 views

PT-2024-7220 ยท NetGear ยท Netgear Xr1000

Name of the Vulnerable Software and Affected Versions: Netgear XR1000 version 1.0.0.64 Description: The issue is related to a lack of input sanitization in the usb remote smb conf.cgi script of the NETGEAR XR1000 Wi-Fi router's firmware. This can be exploited by a remote attacker to execute...

8.4CVSS8.2AI score0.10897EPSS
Exploits0References10
Rows per page
Query Builder