Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.7
CVE-2022-40619
- EPSS 0.87%
- Veröffentlicht 28.01.2026 00:00:00
- Zuletzt bearbeitet 29.01.2026 19:16:09
FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices. This interface is vulnerable to unauthenticated arbitrary command injection through the funjsq_a...
7.7
CVE-2022-40620
- EPSS 0.05%
- Veröffentlicht 28.01.2026 00:00:00
- Zuletzt bearbeitet 29.01.2026 19:16:09
FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism. An attacker (suitably positioned on the network) co...
7.5
CVE-2025-44650
- EPSS 0.06%
- Veröffentlicht 21.07.2025 00:00:00
- Zuletzt bearbeitet 07.08.2025 17:58:36
In Netgear R7000 V1.3.1.64_10.1.36 and EAX80 V1.0.1.70_1.0.2, the USERLIMIT_GLOBAL option is set to 0 in the bftpd.conf configuration file. This can cause DoS attacks when unlimited users are connected.
1