ac1200_r6220_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/ac1200_r6220_firmware/ Sun, 26 Feb 2023 06:31:28 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png ac1200_r6220_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/ac1200_r6220_firmware/ 32 32 CVE-2019-17137 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-17137/ Sun, 26 Feb 2023 06:31:28 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-17137/ This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC1200 R6220 Firmware version 1.1.0.86 Smart WiFi Router. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of path strings. By inserting a null byte into the path, the user can skip most authentication checks. An […]

The post CVE-2019-17137 appeared first on CVE Vulnerability.

]]> This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC1200 R6220 Firmware version 1.1.0.86 Smart WiFi Router. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of path strings. By inserting a null byte into the path, the user can skip most authentication checks. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-8616.

The post CVE-2019-17137 appeared first on CVE Vulnerability.

]]> CVE-2022-47052 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-47052/ Thu, 23 Feb 2023 05:21:41 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-47052/ The web interface of the ‘Nighthawk R6220 AC1200 Smart Wi-Fi Router’ is vulnerable to a CRLF Injection attack that can be leveraged to perform Reflected XSS and HTML Injection. A malicious unauthenticated attacker can exploit this vulnerability using a specially crafted URL. This affects firmware versions: V1.1.0.112_1.0.1, V1.1.0.114_1.0.1.

The post CVE-2022-47052 appeared first on CVE Vulnerability.

]]> The web interface of the ‘Nighthawk R6220 AC1200 Smart Wi-Fi Router’ is vulnerable to a CRLF Injection attack that can be leveraged to perform Reflected XSS and HTML Injection. A malicious unauthenticated attacker can exploit this vulnerability using a specially crafted URL. This affects firmware versions: V1.1.0.112_1.0.1, V1.1.0.114_1.0.1.

The post CVE-2022-47052 appeared first on CVE Vulnerability.

]]>