CVE-2025-28219
- EPSS 0.22%
- Veröffentlicht 28.03.2025 00:00:00
- Zuletzt bearbeitet 02.05.2025 15:41:20
Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usb_adv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request.
CVE-2021-34983
- EPSS 0.18%
- Veröffentlicht 07.05.2024 23:15:13
- Zuletzt bearbeitet 14.08.2025 01:40:56
NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of multiple NETGEAR rou...
CVE-2021-34982
- EPSS 5.57%
- Veröffentlicht 07.05.2024 23:15:13
- Zuletzt bearbeitet 14.08.2025 01:41:19
NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple NETGEAR routers. Authentication is no...
CVE-2023-38925
- EPSS 0.35%
- Veröffentlicht 07.08.2023 19:15:10
- Zuletzt bearbeitet 21.11.2024 08:14:27
Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the http_passwd parameter in password.cgi.
CVE-2022-27643
- EPSS 4.65%
- Veröffentlicht 29.03.2023 19:15:08
- Zuletzt bearbeitet 21.11.2024 06:56:05
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the h...
CVE-2022-24655
- EPSS 0.13%
- Veröffentlicht 18.03.2022 11:15:08
- Zuletzt bearbeitet 21.11.2024 06:50:48
A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution of arbitrary code without authentication.
CVE-2021-45641
- EPSS 0.37%
- Veröffentlicht 26.12.2021 01:15:19
- Zuletzt bearbeitet 21.11.2024 06:32:45
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before 1.1.00.34, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000 before 1.0.1.74, D7000v2 befo...
CVE-2021-45640
- EPSS 0.59%
- Veröffentlicht 26.12.2021 01:15:19
- Zuletzt bearbeitet 21.11.2024 06:32:45
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before 1.1.00.34, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000 before 1.0.1.74, D7000v2 befo...
CVE-2021-45638
- EPSS 0.34%
- Veröffentlicht 26.12.2021 01:15:19
- Zuletzt bearbeitet 21.11.2024 06:32:44
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.102, D7000v2 before 1.0.0.74, D8500 before 1.0.3.60, DC112A before 1.0.0.56, R6300v2 before 1...
- EPSS 0.29%
- Veröffentlicht 26.12.2021 01:15:18
- Zuletzt bearbeitet 21.11.2024 06:32:39
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.66, D6400 before 1.0.0.100, D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, DC112A before 1.0.0.52, DGN2200v4 before 1.0.0.118, ...