CVSS: 10.0EPSS: 0%CPEs: 30EXPL: 0CVE-2023-36187
https://notcve.org/view.php?id=CVE-2023-36187
01 Sep 2023 — Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd. Una vulnerabilidad de desbordamiento de búfer en NETGEAR R6400v2 antes de la versión 1.0.4.118, permite a atacantes remotos no autenticados ejecutar código arbitrario a través de una URL manipulada para httpd. • https://kb.netgear.com/000065571/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2020-0578 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 10.0EPSS: 0%CPEs: 12EXPL: 0CVE-2022-48322
https://notcve.org/view.php?id=CVE-2022-48322
13 Feb 2023 — NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability. This affects MR60 before 1.1.7.132, MS60 before 1.1.7.132, R6900P before 1.3.3.154, R7000P before 1.3.3.154, R7960P before 1.4.4.94, and R8000P before 1.4.4.94. • https://kb.netgear.com/000065265/Security-Advisory-for-Pre-authentication-Buffer-Overflow-on-Multiple-Products-PSV-2022-0155 • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 12EXPL: 0CVE-2022-48176
https://notcve.org/view.php?id=CVE-2022-48176
30 Jan 2023 — Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authentication stack overflow. Se descubrió que los routers Netgear R7000P anteriores a v1.3.3.154, anteriores a v1.3.3.154, R7960P anteriores a v1.4.4.94 y R8000P anteriores a v1.4.4.94 contenían un desbordamiento en la región stack de autenticación previa. • https://hdwsec.fr/blog/20221109-netgear • CWE-787: Out-of-bounds Write •
CVSS: 10.0EPSS: 0%CPEs: 18EXPL: 0CVE-2022-48196
https://notcve.org/view.php?id=CVE-2022-48196
30 Dec 2022 — Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX40 before 1.0.2.60, RAX35 before 1.0.2.60, R6400v2 before 1.0.4.122, R6700v3 before 1.0.4.122, R6900P before 1.3.3.152, R7000P before 1.3.3.152, R7000 before 1.0.11.136, R7960P before 1.4.4.94, and R8000P before 1.4.4.94. Ciertos dispositivos NETGEAR se ven afectados por un desbordamiento del búfer provocado por un atacante no autenticado. Esto afecta a RAX40 antes de 1.0.2.60, RAX35 antes de 1.0.2.60, ... • https://kb.netgear.com/000065495/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2019-0208 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 1CVE-2022-44197
https://notcve.org/view.php?id=CVE-2022-44197
22 Nov 2022 — Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_server_ip. Netgear R7000P V1.3.0.8 es vulnerable al desbordamiento del búfer mediante el parámetro openvpn_server_ip. • https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/15 • CWE-787: Out-of-bounds Write •
CVSS: 10.0EPSS: 0%CPEs: 3EXPL: 1CVE-2022-44200
https://notcve.org/view.php?id=CVE-2022-44200
22 Nov 2022 — Netgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters: stamode_dns1_pri and stamode_dns1_sec. Netgear R7000P V1.3.0.8, V1.3.1.64 es vulnerable al desbordamiento del búfer a través de los parámetros: stamode_dns1_pri y stamode_dns1_sec. • https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/17 • CWE-787: Out-of-bounds Write •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 1CVE-2022-44196
https://notcve.org/view.php?id=CVE-2022-44196
22 Nov 2022 — Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_push1. Netgear R7000P V1.3.0.8 es vulnerable al desbordamiento del búfer mediante el parámetro openvpn_push1. • https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/13 • CWE-787: Out-of-bounds Write •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 1CVE-2022-44187
https://notcve.org/view.php?id=CVE-2022-44187
22 Nov 2022 — Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via wan_dns1_pri. Netgear R7000P V1.3.0.8 es vulnerable al desbordamiento del búfer a través de wan_dns1_pri. • https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/3 • CWE-787: Out-of-bounds Write •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 1CVE-2022-44188
https://notcve.org/view.php?id=CVE-2022-44188
22 Nov 2022 — Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter enable_band_steering. Netgear R7000P V1.3.0.8 es vulnerable al desbordamiento del búfer en /usr/sbin/httpd a través del parámetro enable_band_steering. • https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/5 • CWE-787: Out-of-bounds Write •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 1CVE-2022-44184
https://notcve.org/view.php?id=CVE-2022-44184
22 Nov 2022 — Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_sec. Netgear R7000P V1.3.0.8 es vulnerable al desbordamiento del búfer en /usr/sbin/httpd a través del parámetro wan_dns1_sec. • https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/1 • CWE-787: Out-of-bounds Write •