NETGEAR Nighthawk WiFi6 Router vulnerabilities
We track 6 vulnerabilities in NETGEAR Nighthawk WiFi6 Router products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on March 10, 2023.
Latest NETGEAR Nighthawk WiFi6 Router vulnerabilities
- 9.8 Critical severity
NETGEAR Nighthawk WiFi6 Router: Buffer Copy without Checking Size of Input
NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary code on the device.
- 9.8 Critical severity
NETGEAR Nighthawk WiFi6 Router: Buffer Copy without Checking Size of Input
NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms that could allow an attacker to execute arbitrary code on the device.
- 8.8 High severity
NETGEAR Nighthawk WiFi6 Router: Cross-Site Request Forgery
NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF protections.
- 7.8 High severity
NETGEAR Nighthawk WiFi6 Router: Improper Neutralization of Special Elements used in an OS Command
The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, however, appear to be fed directly into a system call or other similar function. This allows any authenticated user to exe
- 8.8 High severity
NETGEAR Nighthawk WiFi6 Router: Improper Authentication
A support user exists on the device and appears to be a backdoor for Technical Support staff. The default password for this account is “support” and cannot be changed by a user via any normally accessible means.
- 8.8 High severity
NETGEAR Nighthawk WiFi6 Router: Improper Neutralization of Special Elements used in an OS Command
The “puhttpsniff” service, which runs by default, is susceptible to command injection due to improperly sanitized user input. An unauthenticated attacker on the same network segment as the router can execute arbitrary commands on the device without authenticat