Netgear Xr300 Firmware vulnerabilities
57 known vulnerabilities affecting netgear/xr300_firmware.
Total CVEs
57
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL16HIGH17MEDIUM24
Vulnerabilities
Page 3 of 3
CVE-2024-50996P4MEDIUMCVSS 5.7v1.0.3.782024-11-05
CVE-2024-50996 [MEDIUM] CWE-120 CVE-2024-50996: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpa_server parameter at genie_bpa.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
nvd
CVE-2024-50997P4MEDIUMCVSS 5.7v1.0.3.782024-11-05
CVE-2024-50997 [MEDIUM] CWE-120 CVE-2024-50997: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
nvd
CVE-2024-52024P4MEDIUMCVSS 5.7v1.0.3.782024-11-05
CVE-2024-52024 [MEDIUM] CWE-120 CVE-2024-52024: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at wizpppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
nvd
CVE-2024-52026P4MEDIUMCVSS 5.7v1.0.3.782024-11-05
CVE-2024-52026 [MEDIUM] CWE-120 CVE-2024-52026: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at bsw_pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
nvd
CVE-2024-52025P4MEDIUMCVSS 5.7v1.0.3.782024-11-05
CVE-2024-52025 [MEDIUM] CWE-120 CVE-2024-52025: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at geniepppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
nvd
CVE-2024-51002P4MEDIUMCVSS 5.7v1.0.3.782024-11-05
CVE-2024-51002 [MEDIUM] CWE-120 CVE-2024-51002: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the l2tp_user_ip parameter at l2tp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
nvd
CVE-2024-52023P4MEDIUMCVSS 5.7v1.0.3.782024-11-05
CVE-2024-52023 [MEDIUM] CWE-120 CVE-2024-52023: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe2.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
nvd
CVE-2024-51022P4MEDIUMCVSS 5.7v1.0.3.782024-11-05
CVE-2024-51022 [MEDIUM] CWE-120 CVE-2024-51022: Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid parameter in bridge_
Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid parameter in bridge_wireless_main.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
nvd
CVE-2024-51014P4MEDIUMCVSS 5.7v1.0.3.782024-11-05
CVE-2024-51014 [MEDIUM] CWE-120 CVE-2024-51014: Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid_an parameter in brid
Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid_an parameter in bridge_wireless_main.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
nvd
CVE-2024-51007P4MEDIUMCVSS 5.7v1.0.3.782024-11-05
CVE-2024-51007 [MEDIUM] CWE-120 CVE-2024-51007: Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at w
Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at wireless.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
nvd
CVE-2024-51016P4MEDIUMCVSS 5.7v1.0.3.782024-11-05
CVE-2024-51016 [MEDIUM] CWE-120 CVE-2024-51016: Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the addName%d parameter in us
Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the addName%d parameter in usb_approve.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
nvd
CVE-2024-52015P4MEDIUMCVSS 5.7v1.0.3.782024-11-05
CVE-2024-52015 [MEDIUM] CWE-120 CVE-2024-52015: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at bsw_pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
nvd
CVE-2024-52013P4MEDIUMCVSS 5.7v1.0.3.782024-11-05
CVE-2024-52013 [MEDIUM] CWE-120 CVE-2024-52013: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at wiz_pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
nvd
CVE-2024-52014P4MEDIUMCVSS 5.7v1.0.3.782024-11-05
CVE-2024-52014 [MEDIUM] CWE-120 CVE-2024-52014: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at genie_pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
nvd
CVE-2024-51011P4MEDIUMCVSS 5.7v1.0.3.782024-11-05
CVE-2024-51011 [MEDIUM] CWE-120 CVE-2024-51011: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
nvd
CVE-2024-52016P4MEDIUMCVSS 5.7v1.0.3.782024-11-05
CVE-2024-52016 [MEDIUM] CWE-120 CVE-2024-52016: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component wlg_adv.cgi via the apmode_dns1_pri and apmode_dns1_sec parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted POST request.
nvd
CVE-2024-51003P4MEDIUMCVSS 5.7v1.0.3.782024-11-05
CVE-2024-51003 [MEDIUM] CWE-120 CVE-2024-51003: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component ap_mode.cgi via the apmode_dns1_pri and apmode_dns1_sec parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted POST request.
nvd
← Previous3 / 3