Latest Netgear Vulnerabilities

● CVE-2022-43654
NETGEAR CAX30S SSO Command Injection Remote Code Execution Vulnerability
NETGEAR CAX30S
● CVE-2021-34983
NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability
NETGEAR Multiple Routers
● CVE-2021-34982
NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability
NETGEAR Multiple Routers
● CVE-2021-34947
NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability
NETGEAR R7800
● CVE-2023-50231
NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability
NETGEAR ProSAFE Network Management System
● CVE-2023-44450
NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability
NETGEAR ProSAFE Network Management System
● CVE-2023-44449
NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability
NETGEAR ProSAFE Network Management System
● CVE-2023-44445
NETGEAR CAX30 SSO Stack-based Buffer Overflow Remote Code Execution Vulnerability
NETGEAR CAX30
● CVE-2023-41183
NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability
NETGEAR Orbi 760
● CVE-2023-41182
NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability
NETGEAR ProSAFE Network Management System
● CVE-2023-40480
NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability
Netgear RAX30
● CVE-2023-40479
NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability
Netgear RAX30
● CVE-2023-40478
NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability
Netgear RAX30
● CVE-2023-38102
NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability
NETGEAR ProSAFE Network Management System
● CVE-2023-38101
NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability
NETGEAR ProSAFE Network Management System
● CVE-2023-38100
NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability
NETGEAR ProSAFE Network Management System
● CVE-2023-38099
NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability
NETGEAR ProSAFE Network Management System
● CVE-2023-38098
NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability
NETGEAR ProSAFE Network Management System
● CVE-2023-38096
NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability
NETGEAR ProSAFE Network Management System
● CVE-2023-38097
NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution Vulnerability
NETGEAR ProSAFE Network Management System
● CVE-2023-38095
NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability
NETGEAR ProSAFE Network Management System
● CVE-2023-35722
NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability
Netgear RAX30
● CVE-2023-35721
NETGEAR Multiple Routers curl_post Improper Certificate Validation Remote Code Execution Vulnerability
NETGEAR Multiple Routers
● CVE-2023-34285
NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability
Netgear RAX30
● CVE-2023-34283
NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability
Netgear RAX30
● CVE-2023-34284
NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability
Netgear RAX30
● CVE-2023-27370
(Pwn2Own) NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability
Netgear RAX30
● CVE-2023-27368
(Pwn2Own) NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability
Netgear RAX30
● CVE-2023-27369
(Pwn2Own) NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability
Netgear RAX30
● CVE-2023-27367
(Pwn2Own) NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability
Netgear RAX30
● CVE-2023-27361
NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
Netgear RAX30
● CVE-2023-27360
NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability
Netgear RAX30
● CVE-2023-27358
(Pwn2Own) NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability
Netgear RAX30
● CVE-2023-27356
(Pwn2Own) NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability
Netgear RAX30
● CVE-2023-27357
(Pwn2Own) NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure Vulnerability
Netgear RAX30
● CVE-2024-1431
Netgear R7000 Web Management Interface debuginfo.htm information disclosure
Netgear R7000 Firmware=1.0.11.136_10.2.120
NETGEAR R7000
● CVE-2024-1430
Netgear R7000 Web Management Interface currentsetting.htm information disclosure
Netgear R7000 Firmware=1.0.11.136_10.2.120
NETGEAR R7000
● ZDI-23-1847
NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability
NETGEAR ProSAFE Network Management System
● ZDI-CAN-21838
ZDI-23-1847: NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability
NETGEAR ProSAFE Network Management System
● CVE-2023-50089
A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication.
Netgear Wnr2000 Firmware=1.0.0.70
Netgear WNR2000=v4
● CVE-2023-49007
In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd.
Netgear Rbr750 Firmware<7.2.6.21
Netgear Rbr750
● ZDI-23-1718
NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability
NETGEAR ProSAFE Network Management System
● ZDI-CAN-21858
ZDI-23-1718: NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability
NETGEAR ProSAFE Network Management System
● ZDI-CAN-21875
ZDI-23-1717: NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability
NETGEAR ProSAFE Network Management System
● ZDI-23-1717
NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability
NETGEAR ProSAFE Network Management System
● ZDI-23-1636
NETGEAR CAX30 SSO Stack-based Buffer Overflow Remote Code Execution Vulnerability
NETGEAR CAX30
● ZDI-CAN-19058
ZDI-23-1636: NETGEAR CAX30 SSO Stack-based Buffer Overflow Remote Code Execution Vulnerability
NETGEAR CAX30
● CVE-2023-36187
Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd.
Netgear Cbr40 Firmware<2.5.0.24
Netgear Cbr40
Netgear Lax20 Firmware<1.1.6.34
Netgear Lax20
Netgear Mk62 Firmware<1.1.6.122
Netgear Mk62
and 24 more
● ZDI-CAN-19716
ZDI-23-1284: NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability
NETGEAR ProSAFE Network Management System
● ZDI-23-1284
NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability
NETGEAR ProSAFE Network Management System

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203