EUVD-2022-49229

Malicious code in bioql PyPI...

CVE-2023-39550

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the checkauth function...

CVE-2022-46424

An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM Man-in-the-Middle attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or...

CVE-2023-39550

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the checkauth function...

CVE-2023-38922

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the updateauth function...

Buffer overflow

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the updateauth function...

Buffer overflow

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the checkauth function...

NETGEAR JWNR2000 and XWN5001 and XAVN2001 Security Vulnerabilities

NETGEAR XWN5001 and NETGEAR JWNR2000 are both products of NETGEAR Corporation.NETGEAR XWN5001 is a wireless access point.NETGEAR JWNR2000 is a wireless router. A security vulnerability exists in NETGEAR JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7, which stems from a multiple...

NETGEAR JWNR2000 Security Vulnerabilities

The NETGEAR JWNR2000 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR JWNR2000 that stems from a buffer overflow vulnerability in the parameters httppasswd and httpusername. Affected products and versions: Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, XAVN2001v2...

PT-2023-27016 · NetGear · Netgear Wnr2000V2

Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 XWN5001 version 0.4.1.1 XAVN2001v2 version 0.4.0.7 Description: The issue is related to multiple buffer overflows that can occur via the http passwd and http username parameters in the check auth function...

CVE-2022-46424

An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM Man-in-the-Middle attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or...

CVE-2022-46424

An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM Man-in-the-Middle attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or...

Design/Logic Flaw

An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM Man-in-the-Middle attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or...

CVE-2022-46424

Affected product: Netgear XWN5001 Powerline 500 WiFi Access Point. Vulnerability: exploitable firmware modification allowing a MITM attacker to modify a user-uploaded firmware image and bypass CRC checks, enabling arbitrary code execution or Denial of Service. Root cause/condition: vulnerable fir...

PT-2022-27868 · NetGear · Netgear Xwn5001 Powerline 500 Wifi Access Point

Name of the Vulnerable Software and Affected Versions: Netgear XWN5001 Powerline 500 WiFi Access Point versions v0.4.1.1 and earlier Description: An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a...

NETGEAR XWN5001 命令注入漏洞

The NETGEAR XWN5001 is a wireless access point from NETGEAR. A command injection vulnerability exists in NETGEAR XWN5001 Powerline 500 WiFi v0.4.1.1 and earlier versions, which can be exploited by an attacker to conduct a MITM Man-in-the-Middle attack to modify a user-uploaded firmware image,...

CVE-2022-46424

An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM Man-in-the-Middle attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or...

CVE-2022-46424

An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM Man-in-the-Middle attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or...