netgear netgear router vulnerabilities and exploits

(subscribe to this query)

Netgear 614 and 624 routers, possibly running VXWorks, allow remote malicious users to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as ...

Netgear Netgear Router

An issue exists on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. They are prone to password disclosure via simple crafted requests to the web management server. The bug is exploitable remotely if the r...

Netgear R6200 Firmware 1.0.1.56 1.0.43 Netgear R6300 Firmware 1.0.2.78 1.0.58 Netgear Vegn2610 Firmware 1.0.0.36 Netgear Ac1450 Firmware 1.0.0.34 10.0.16 Netgear Wnr1000v3 Firmware 1.0.2.68 60.0.93 Netgear Wndr3700v3 Firmware 1.0.0.40 1.0.32 Netgear Wndr4000 Firmware 1.0.2.4 9.1.86 Netgear Wndr4500 Firmware 1.0.1.44 1.0.73 Netgear D6400 Firmware 1.0.0.44 Netgear D6220 Firmware 1.0.0.12 Netgear D6300 Firmware 1.0.0.96 Netgear D6300b Firmware 1.0.0.40 Netgear Dgn2200bv4 Firmware 1.0.0.68

1 EDB exploit1 Article

Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote malicious users to list arbitrary directories via a .. (dot dot) in the nextpage parameter.

Netgear Dg632 Firmware 3.4.0 Ap Netgear Dg632 -

1 EDB exploit

The “puhttpsniff” service, which runs by default, is susceptible to command injection due to improperly sanitized user input. An unauthenticated attacker on the same network segment as the router can execute arbitrary commands on the device without authentication.

Netgear Nighthawk Ax1800 Firmware Netgear Nighthawk Ax2400 Firmware Netgear Nighthawk Ax3000 Firmware Netgear Nighthawk Ax5400 Firmware Netgear Nighthawk Ax6000 Firmware Netgear Nighthawk Ax11000 Firmware

An exploitable firmware modification vulnerability exists in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass...

Netgear Wnr612v2 Firmware Netgear Dgn1000v3 Firmware Netgear D6100 Firmware Netgear Wnr1000v2 Firmware Netgear Xavn2001v2 Firmware Netgear Wnr2200 Firmware Netgear Wnr2500 Firmware Netgear R8900 Firmware Netgear R9000 Firmware

NETGEAR WNR1000v3 devices with firmware 1.0.2.68 use the same source port number for every DNS query, which makes it easier for remote malicious users to spoof responses by selecting that number for the destination port.

Netgear Wnr1000v3 Firmware 1.0.2.68 Netgear Wnr1000v3

Web-Based Administration in Netgear FVS318 VPN Router allows remote malicious users to cause a denial of service (no new connections) via a large number of open HTTP connections.

Netgear Fvs318 1.3 Netgear Fvs318 1.0 Netgear Fvs318 1.1 Netgear Fvs318 1.2

cgi-bin/welcome/VPN_only in the web interface in Netgear SSL312 allows remote malicious users to cause a denial of service (device crash) via a crafted query string, as demonstrated using directory traversal sequences.

Netgear Ssl312 -

1 EDB exploit

An issue exists on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router (SRR60) AC3000 V2.5.1.106. The administrative SOAP interface allows an unauthenticated remote leak of se...

Netgear Rbs50y Firmware 2.5.1.106 Netgear Srr60 Firmware 2.5.1.106 Netgear Srs60 Firmware 2.5.1.106

1 Github repository

An issue exists on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router (SRR60) AC3000 V2.5.1.106. The administrative SOAP interface allows an unauthenticated remote write of a...

Netgear Rbs50y Firmware 2.5.1.106 Netgear Srr60 Firmware 2.5.1.106 Netgear Srs60 Firmware 2.5.1.106

1 Github repository

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook