Netgear

R7000p Firmware

155 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.7

CVE-2024-51020

  • EPSS 0.09%
  • Published 05.11.2024 15:15:25
  • Last modified 02.05.2025 15:37:37

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the apn parameter at usbISP_detail_edit.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

8

CVE-2024-51021

  • EPSS 0.54%
  • Published 05.11.2024 15:15:25
  • Last modified 21.05.2025 20:13:00

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a command injection vulnerability via the wan_gateway parameter at genie_fix2.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a...

5.7

CVE-2024-51002

  • EPSS 0.09%
  • Published 05.11.2024 15:15:24
  • Last modified 30.04.2025 16:30:32

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the l2tp_user_ip parameter at l2tp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a ...

5.7

CVE-2024-51003

  • EPSS 0.09%
  • Published 05.11.2024 15:15:24
  • Last modified 07.05.2025 15:24:54

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component ap_mode.cgi via the apmode_dns1_pri and apmode_dns1_sec parameters. These vulnerabilities...

5.7

CVE-2024-51004

  • EPSS 0.09%
  • Published 05.11.2024 15:15:24
  • Last modified 30.04.2025 16:30:44

Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usb_device.cgi via the cifs_user, read_access, and write_access parameters. These vulnerabilities allow attackers to cause a De...

8

CVE-2024-51010

  • EPSS 0.54%
  • Published 05.11.2024 15:15:24
  • Last modified 21.05.2025 19:59:27

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component ap_mode.cgi via the apmode_gateway parameter. This vulnerability allows attackers to ex...

5.7

CVE-2024-51011

  • EPSS 0.09%
  • Published 05.11.2024 15:15:24
  • Last modified 21.05.2025 20:23:30

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST requ...

5.7

CVE-2024-50996

  • EPSS 0.09%
  • Published 05.11.2024 15:15:23
  • Last modified 07.05.2025 15:25:23

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpa_server parameter at genie_bpa.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via...

5.7

CVE-2024-50997

  • EPSS 0.09%
  • Published 05.11.2024 15:15:23
  • Last modified 01.05.2025 18:22:26

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a ...

8.8

CVE-2021-34982

  • EPSS 5.57%
  • Published 07.05.2024 23:15:13
  • Last modified 14.08.2025 01:41:19

NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple NETGEAR routers. Authentication is no...