Netgear

Rax38 Firmware

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2023-27358

  • EPSS 0.76%
  • Veröffentlicht 03.05.2024 02:15:13
  • Zuletzt bearbeitet 09.01.2025 15:37:04

NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit...

8.8

CVE-2022-27642

  • EPSS 0.04%
  • Veröffentlicht 29.03.2023 19:15:08
  • Zuletzt bearbeitet 21.11.2024 06:56:04

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ht...

8.8

CVE-2022-27645

  • EPSS 0.17%
  • Veröffentlicht 29.03.2023 19:15:08
  • Zuletzt bearbeitet 21.11.2024 06:56:05

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within readycloud_control.cgi. ...

8

CVE-2022-27647

  • EPSS 0.06%
  • Veröffentlicht 29.03.2023 19:15:08
  • Zuletzt bearbeitet 21.11.2024 06:56:05

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mech...

7.5

CVE-2021-45493

  • EPSS 0.32%
  • Veröffentlicht 26.12.2021 01:15:12
  • Zuletzt bearbeitet 21.11.2024 06:32:20

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RAX35 before 1.0.4.102, RAX38 before 1.0.4.102, and RAX40 before 1.0.4.102.

7.1

CVE-2021-41449

  • EPSS 1.44%
  • Veröffentlicht 09.12.2021 14:15:12
  • Zuletzt bearbeitet 21.11.2024 06:26:16

A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files of the web application, via s...

7.5

CVE-2021-38526

  • EPSS 0.28%
  • Veröffentlicht 11.08.2021 00:16:14
  • Zuletzt bearbeitet 21.11.2024 06:17:20

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX35 before 1.0.3.94, RAX38 before 1.0.3.94, and RAX40 before 1.0.3.94.