Netgear Security Vulnerabilities (CVEs)

This vulnerability is a stack overflow in Netgear routers' pptp_user_ip parameter at wiz_pptp.cgi. Attackers can exploit it via crafted POST requests ...

This vulnerability is a stack overflow in specific Netgear router models via the pptp_user_ip parameter in the bsw_pptp.cgi script. Attackers can expl...

This vulnerability in Netgear XR300 routers allows attackers to trigger a stack overflow via the passphrase parameter in bridge_wireless_main.cgi, lea...

This CVE describes a command injection vulnerability in Netgear XR300 routers that allows attackers to execute arbitrary operating system commands by ...

This CVE describes a command injection vulnerability in Netgear R8500 routers that allows attackers to execute arbitrary operating system commands by ...

This vulnerability in Netgear R8500 routers allows attackers to cause a Denial of Service (DoS) by sending a specially crafted POST request to the ipv...

CVE-2024-51014 is a stack overflow vulnerability in Netgear XR300 routers that allows attackers to cause a Denial of Service (DoS) by sending a specia...

Netgear XR300 routers running firmware v1.0.3.78 contain a stack buffer overflow vulnerability in the usb_approve.cgi component. Attackers can exploit...

This vulnerability in Netgear R7000P routers allows attackers to cause a Denial of Service (DoS) by sending a specially crafted POST request to the pp...

This vulnerability in Netgear R7000P routers allows attackers to trigger a stack overflow via the apn parameter in usbISP_detail_edit.cgi, leading to ...

This CVE describes a command injection vulnerability in specific Netgear router models that allows attackers to execute arbitrary operating system com...

This vulnerability in Netgear R8500 routers allows attackers to trigger a stack overflow via the sysDNSHost parameter in ddns.cgi, causing a Denial of...

Multiple Netgear router models contain stack overflow vulnerabilities in the ap_mode.cgi component via DNS parameters. Attackers can exploit these vul...

This vulnerability allows attackers to execute arbitrary operating system commands on Netgear R8500 routers by sending specially crafted requests to t...

This vulnerability allows attackers to cause a Denial of Service (DoS) on Netgear XR300 routers by sending a specially crafted POST request to the wir...

This vulnerability allows remote attackers to execute arbitrary operating system commands on Netgear XR300 routers by sending specially crafted reques...

This CVE describes a command injection vulnerability in specific Netgear router models that allows attackers to execute arbitrary operating system com...

This vulnerability allows attackers to execute arbitrary operating system commands on Netgear R8500 routers by sending specially crafted requests to t...

This vulnerability in Netgear R8500 routers allows attackers to cause a Denial of Service (DoS) by sending a specially crafted POST request to the usb...

This vulnerability allows attackers to cause a Denial of Service (DoS) on affected Netgear routers by sending a specially crafted POST request to the ...

This CVE describes a command injection vulnerability in Netgear R8500 routers where attackers can execute arbitrary operating system commands by sendi...

This vulnerability allows remote attackers to execute arbitrary commands on Netgear EX6120 WiFi extenders by injecting malicious commands into the wan...

This vulnerability allows authenticated attackers to execute arbitrary commands on Netgear R7000 routers by injecting malicious input into the device_...

This vulnerability allows authenticated attackers to execute arbitrary commands on Netgear EX3700 AC750 WiFi Range Extender Essentials Edition devices...

This vulnerability allows remote attackers to execute arbitrary code on Netgear DGN1000WW routers via the Diagnostics page. It affects users running v...

This vulnerability allows authenticated remote attackers to execute arbitrary SQL commands on NETGEAR ProSAFE Network Management System installations,...

This vulnerability allows attackers to bypass authentication on Netgear WNR614 JNR1010V2 N300 routers and access the administrative interface. Attacke...

This vulnerability in Netgear WNR614 routers allows attackers to set passwords that bypass the device's security policy requirements. Attackers could ...

This vulnerability in Netgear WNR614 routers allows attackers to obtain the WPS PIN through implementation flaws in the Wi-Fi Protected Setup feature....

This vulnerability involves insecure permissions in Netgear WNR614 JNR1010V2 routers, allowing attackers to access URLs and directories embedded withi...

This vulnerability allows authenticated remote attackers to execute arbitrary code with SYSTEM privileges on NETGEAR ProSAFE Network Management System...

This vulnerability allows authenticated remote attackers to upload arbitrary files to NETGEAR ProSAFE Network Management System installations, leading...

This vulnerability allows local attackers with low-privileged access to escalate to SYSTEM privileges on NETGEAR ProSAFE Network Management System ins...

This is a critical stack-based buffer overflow vulnerability in NETGEAR routers' httpd service that allows network-adjacent attackers to execute arbit...

This is a critical remote code execution vulnerability in NETGEAR R7800 routers that allows network-adjacent attackers to execute arbitrary code as ro...

This vulnerability allows authenticated remote attackers to perform SQL injection through the clearAlertByIds function in NETGEAR ProSAFE Network Mana...

This is a critical stack-based buffer overflow vulnerability in NETGEAR CAX30 routers that allows network-adjacent attackers to execute arbitrary code...

This vulnerability in NETGEAR ProSAFE Network Management System allows authenticated attackers to bypass authentication and execute arbitrary code wit...

This vulnerability allows network-adjacent attackers to execute arbitrary code as root on NETGEAR RAX30 routers by exploiting a stack-based buffer ove...

This vulnerability allows attackers on the same local network to execute arbitrary commands with root privileges on NETGEAR RAX30 routers without auth...

This vulnerability allows authenticated attackers to bypass authorization checks in NETGEAR ProSAFE Network Management System's createUser function, e...

This vulnerability allows authenticated remote attackers to bypass authentication and upload arbitrary files to NETGEAR ProSAFE Network Management Sys...

This SQL injection vulnerability in NETGEAR ProSAFE Network Management System allows authenticated attackers to bypass authentication mechanisms and e...

This vulnerability allows authenticated remote attackers to bypass authentication and upload arbitrary files to NETGEAR ProSAFE Network Management Sys...

This vulnerability in NETGEAR routers allows network-adjacent attackers to exploit improper certificate validation in the HTTPS update functionality. ...

This is a critical stack-based buffer overflow vulnerability in NETGEAR RAX30 routers that allows network-adjacent attackers to execute arbitrary code...

This vulnerability allows physically present attackers to access arbitrary files on NETGEAR RAX30 routers by exploiting improper symbolic link handlin...

This vulnerability allows network-adjacent attackers to execute arbitrary code on NETGEAR RAX30 routers without authentication. Attackers can exploit ...