Rax50 Firmware vulnerabilities
12 known vulnerabilities in Rax50 Firmware from NETGEAR. 12 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by…
A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands w
- 9.8 Critical severity
Rax50 Firmware: Improper Neutralization of Special Elements used in a Command
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vif_enable function.
- 9.8 Critical severity
Rax50 Firmware: Improper Neutralization of Special Elements used in a Command
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function.
- 9.8 Critical severity
Rax50 Firmware: Improper Neutralization of Special Elements used in a Command
NETGEAR RAX5 (AX1600 WiFi Router) v1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function.
- 9.8 Critical severity
Rax50 Firmware: Improper Neutralization of Special Elements used in a Command
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function.
- 9.8 Critical severity
Rax50 Firmware: Improper Neutralization of Special Elements used in a Command
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function.
- 9.8 Critical severity
Rax50 Firmware: Improper Neutralization of Special Elements used in a Command
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function.
- 9.8 Critical severity
Rax50 Firmware: Improper Neutralization of Special Elements used in a Command
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.
- 8.8 High severity
Multiple Routers: Improper Certificate Validation
NETGEAR Multiple Routers curl_post Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of multiple NETGEAR rou
- 8.0 High severity
R6700v3: Improper Neutralization of Special Elements used in an OS Command
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can
- 8.8 High severity
R6700v3: Incorrect Comparison
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within readycloud_control.cgi. The issue
- 8.8 High severity
R6700v3: Incorrect Authorization
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd servic