CVE-2020-15635

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers with firmware 1.0.4.8410.0.58. Authentication is not required to exploit this vulnerability. The specific flaw exists within the acsd service, which...

NETGEAR R6700 Input Validation Error Vulnerability

The NETGEAR R6700 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR R6700 version V1.0.4.8410.0.58, which originates from the program failing to properly validate user-submitted data. An attacker can exploit the vulnerability to execute arbitrary code...

NETGEAR R6700 Authentication Issues Vulnerabilities

The NETGEAR R6700 is a wireless router from NETGEAR. A validation issue vulnerability exists in the handling of firmware updates in the NETGEAR R6700 version V1.0.4.8410.0.58, which stems from the program failing to properly validate the firmware image before performing the update. An attacker...

CVE-2020-15417

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. A crafted...

CVE-2020-10929

The CVE-2020-10929 entry concerns NETGEAR R6700 devices running V1.0.4.84_10.0.58. Affected component: string table file upload handling. Root cause: improper validation of user-supplied data leading to an integer overflow during buffer allocation. Impact: remote code execution possible with no a...

CVE-2020-10924

CVE-2020-10924 affects NETGEAR R6700 routers (e.g., V1.0.4.84_10.0.58) where the UPnP daemon (/usr/sbin/upnpd) mishandles length validation of user-supplied data, leading to a stack-based buffer overflow and potential code execution as root. The vulnerability is exploitable by network-adjacent at...