Lucene search
K

49 matches found

Prion
Prion
added 2020/08/20 1:17 a.m.13 views

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 routers with firmware 1.0.4.8410.0.58. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads...

5.8CVSS6.5AI score0.00343EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2020/08/05 12:0 a.m.1 views

NETGEAR R6700 Remote Code Execution Vulnerability

The NETGEAR R6700 is an AC1750 Smart WiFi Router. A remote code execution vulnerability exists in the handling of string table file uploads in the NETGEAR R6700 versions prior to 1.0.4.98. The vulnerability stems from a failure to properly validate user-supplied strings before using them as forma...

6.3CVSS8.2AI score0.00343EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/04 12:0 a.m.30 views

NETGEAR R6700 httpd strtblupgrade Format String Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. The issue results from the la...

6.3CVSS1.3AI score0.00343EPSS
Exploits0References1
NVD
NVD
added 2020/07/28 6:15 p.m.14 views

CVE-2020-15417

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. A crafted...

6.3CVSS6.7AI score0.00258EPSS
Exploits0References1
OSV
OSV
added 2020/07/28 6:15 p.m.2 views

CVE-2020-15417

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. A crafted...

6.3CVSS7AI score
Exploits0References1
OSV
OSV
added 2020/07/28 6:15 p.m.1 views

CVE-2020-10929

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. The issue...

8.8CVSS6.2AI score0.00839EPSS
Exploits0References1
OSV
OSV
added 2020/07/28 6:15 p.m.2 views

CVE-2020-10928

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. The issue...

8.4CVSS7.6AI score
Exploits0References1
NVD
NVD
added 2020/07/28 6:15 p.m.12 views

CVE-2020-10929

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. The issue...

8.8CVSS9AI score0.00839EPSS
Exploits0References1
Prion
Prion
added 2020/07/28 6:15 p.m.16 views

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. A crafted...

5.8CVSS6.8AI score0.00258EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2020/07/28 6:15 p.m.11 views

Heap overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. The issue...

4.6CVSS8.5AI score0.00424EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/07/28 5:10 p.m.16 views

CVE-2020-15417

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. A crafted...

6.3CVSS6.7AI score0.00258EPSS
Exploits0References1
CVE
CVE
added 2020/07/28 5:10 p.m.55 views

CVE-2020-15417

The CVE-2020-15417 issue affects NETGEAR R6700 devices (V1.0.4.84_10.0.58). A vulnerability in the handling of string table file uploads can overflow a fixed-length stack-based buffer in the web server, allowing network-adjacent attackers to execute arbitrary code without authentication. The root...

6.3CVSS6.8AI score0.00258EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/07/28 5:10 p.m.12 views

CVE-2020-10928

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. The issue...

8.4CVSS8.5AI score0.00424EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/06/15 12:0 a.m.24 views

(0Day) NETGEAR R6700 httpd strtblupgrade Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. A crafted guiregion in a stri...

6.3CVSS3.8AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2020/06/15 12:0 a.m.25 views

(0Day) NETGEAR R6700 httpd strtblupgrade Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. The issue results from the la...

8.4CVSS2.8AI score
Exploits0
OSV
OSV
added 2020/01/08 5:15 p.m.1 views

ALPINE-CVE-2019-20367

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table strtab...

9.1CVSS6.9AI score0.00873EPSS
Exploits1References1
OSV
OSV
added 2020/01/08 5:15 p.m.1 views

DEBIAN-CVE-2019-20367

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table strtab...

9.1CVSS8.2AI score0.00873EPSS
Exploits1References1
OSV
OSV
added 2020/01/08 5:15 p.m.1 views

UBUNTU-CVE-2019-20367

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table strtab...

9.1CVSS7.2AI score0.00873EPSS
Exploits1References4
Prion
Prion
added 2020/01/08 5:15 p.m.15 views

Out-of-bounds

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table strtab...

6.4CVSS8.9AI score0.00873EPSS
Exploits1References7Affected Software4
AlpineLinux
AlpineLinux
added 2020/01/08 4:50 p.m.34 views

CVE-2019-20367

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table strtab...

9.1CVSS9.2AI score0.00873EPSS
Exploits1
Rows per page
Query Builder