Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker

Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an unauthenticated attacker

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker

Certain NETGEAR devices are affected by incorrect configuration of security settings

NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability

Certain NETGEAR devices are affected by incorrect configuration of security settings

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers

upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overflow

The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code execution as root via a MitM attack

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component wlg_adv.cgi via…

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a command injection vulnerability via the wan_gateway parameter at genie_fix2.cgi

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component ap_mode.cgi via…

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker

Certain NETGEAR devices are affected by disclosure of sensitive information

Certain NETGEAR devices are affected by incorrect configuration of security settings

Certain NETGEAR devices are affected by command injection by an authenticated user

Certain NETGEAR devices are affected by command injection by an authenticated user

NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability

Certain NETGEAR devices are affected by incorrect configuration of security settings

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at bsw_pppoe.cgi

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at geniepppoe.cgi

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at wizpppoe.cgi

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe2.cgi

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component wlg_adv.cgi via…

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at bsw_pptp.cgi

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at genie_pptp.cgi

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at wiz_pptp.cgi

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe.cgi

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component ap_mode.cgi via…

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the l2tp_user_ip parameter at l2tp.cgi

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at pptp.cgi

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpa_server parameter at genie_bpa.cgi

Certain NETGEAR devices are affected by disclosure of sensitive information

Certain NETGEAR devices are affected by stored XSS

Certain NETGEAR devices are affected by stored XSS

Insufficient input validation in certain NETGEAR routers

Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router