Most severe vulnerabilities for "netgear fvs336gv3"

Where

Sort:

Versions

4.3-3.6

Netgear FVS336Gv2EOL Netgear FVS336v3 Telnet Configuration Backup Command Injection

Risk 66

Severity

7.2

OS Command Injection, Command Injection

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

The end-of-life Netgear FVS336Gv2 and FVS336Gv3 are affected by a command injection vulnerability in the Telnet interface. An authenticated and remote attacker can execute arbitrary OS commands as root over Telnet by sending crafted "util backupconfiguration" commands.

First published (updated )

CVE-2024-23690

Netgear Fvs336gv3 FirmwarePath Traversal

Risk 38

Severity

6.5

Path Traversal

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Directory traversal vulnerability in scgi-bin/platform.cgi on NETGEAR FVS336Gv3, FVS318N, FVS318Gv2, and SRX5308 devices with firmware before 4.3.3-8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the thispage parameter, as demonstrated by reading the /etc/shadow file.

First published (updated )

CVE-2016-10106

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.