Netgear Xwn5001 Firmware vulnerabilities
3 known vulnerabilities affecting netgear/xwn5001_firmware.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH3
Vulnerabilities
Page 1 of 1
CVE-2023-38922HIGHCVSS 8.8v0.4.1.12023-08-07
CVE-2023-38922 [HIGH] CWE-120 CVE-2023-38922: Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain m
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the update_auth function.
nvd
CVE-2023-39550HIGHCVSS 8.8v0.4.1.12023-08-07
CVE-2023-39550 [HIGH] CWE-120 CVE-2023-39550: Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain m
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the check_auth function.
nvd
CVE-2022-46424HIGHCVSS 8.1≤ 0.4.1.12022-12-20
CVE-2022-46424 [HIGH] CVE-2022-46424: An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 5
An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v0.4.1.1 and earli
nvd