A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW. It has been classified as critical. This affects an unknown part of the component URL Handler. The manipulation with the input %00currentsetting.htm leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This issue appears to have been circulating as an 0day since 2024.
The end-of-life Netgear FVS336Gv2 and FVS336Gv3 are affected by a command injection vulnerability in the Telnet interface. An authenticated and remote attacker can execute arbitrary OS commands as root over Telnet by sending crafted "util backup_configuration" commands.
NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been observed to be exploited in the wild since at least 2017 and specifically by the Shadowserver Foundation on 2025-02-06 UTC.
NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerability.
The specific flaw exists within the getFilterString method. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-23399.
NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerability.
The specific flaw exists within the getSortString method. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-23207.
NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerability.
The specific flaw exists within the UpLoadServlet class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-22724.
NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerability.
The specific flaw exists within the UpLoadServlet class. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-22923.
NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerability.
The specific flaw exists within the product installer. The issue results from the use of a vulnerable version of Apache Tomcat. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-22868.
NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the product installer. The issue results from the use of default MySQL credentials. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22755.
A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially crafted HTTP request can lead to code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Multiple NETGEAR devices have a vulnerability that allows disclosure of the admin password through crafted requests to the web management server. This issue exposes sensitive information and has been exploited in the wild. No specific affected versions or patches are provided in the available data.
Multiple NETGEAR devices are affected by a buffer overflow vulnerability that enables authentication bypass and remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
CVE-2017-6334 is a high severity OS command injection vulnerability affecting NETGEAR DGN2200 devices with firmware versions up to 10.0.0.50. The vulnerability exists in the dnslookup.cgi component and allows remote authenticated users to execute arbitrary operating system commands. This vulnerability has been exploited in the wild. No specific patch or remediation information is provided in the available data.
Multiple NETGEAR Wireless Access Point devices are vulnerable to command injection via unauthenticated web pages that pass form input directly to the command-line interface. This vulnerability allows attackers to execute arbitrary code on affected devices. The issue has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
The NETGEAR WNR2000v5 router has a buffer overflow vulnerability that allows remote code execution. This vulnerability is known to be exploited in the wild. No specific affected versions or patch information is provided.
Multiple NETGEAR routers have a vulnerability that allows unauthenticated web pages to pass form input directly to the command-line interface, enabling remote code execution. This flaw has been confirmed by NETGEAR and is known to be exploited in the wild. The vulnerability is classified as high severity due to the potential for attackers to execute arbitrary commands remotely without authentication.
NETGEAR DGN2200 wireless routers have a remote code execution vulnerability identified as CVE-2017-6077. This flaw allows an attacker to execute arbitrary code remotely on affected devices. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
Netgear JGS516PE devices have a vulnerability due to missing function level access control. This security flaw allows unauthorized users to access functions that should be restricted. The vulnerability is known to be exploited in the wild, indicating active attacks targeting affected devices.
