NETGEAR RAXE450

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPnP service, which listens on TCP port 5000 by default. When parsing the uuid request header, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-14110.

NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability

Improper input validation in NETGEAR Nighthawk routers

NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability

Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models

Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers

Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router

Certain NETGEAR devices allow administrators to tamper with system

Insufficient input validation in certain NETGEAR routers

Insufficient input validation in certain NETGEAR routers

Improper input validation in certain NETGEAR routers allows unauthorized modification of protected router functionality