r6260_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/r6260_firmware/ Thu, 23 Feb 2023 14:10:24 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png r6260_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/r6260_firmware/ 32 32 CVE-2021-34978 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-34978/ Thu, 23 Feb 2023 14:10:24 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-34978/ This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. A crafted SOAP request can trigger an overflow of a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code […]

The post CVE-2021-34978 appeared first on CVE Vulnerability.

]]> This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. A crafted SOAP request can trigger an overflow of a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-13511.

The post CVE-2021-34978 appeared first on CVE Vulnerability.

]]> CVE-2021-34979 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-34979/ Thu, 23 Feb 2023 14:10:24 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-34979/ This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SOAP requests. When parsing the SOAPAction header, the process does not properly validate the length of user-supplied data prior to copying it […]

The post CVE-2021-34979 appeared first on CVE Vulnerability.

]]> This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SOAP requests. When parsing the SOAPAction header, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-13512.

The post CVE-2021-34979 appeared first on CVE Vulnerability.

]]> CVE-2021-34980 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-34980/ Thu, 23 Feb 2023 14:10:24 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-34980/ This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. When parsing the SOAP_LOGIN_TOKEN environment variable, the process does not properly validate the length of user-supplied data prior to copying it to […]

The post CVE-2021-34980 appeared first on CVE Vulnerability.

]]> This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. When parsing the SOAP_LOGIN_TOKEN environment variable, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-14107.

The post CVE-2021-34980 appeared first on CVE Vulnerability.

]]>