Wnr854t Firmware vulnerabilities

7 known vulnerabilities in Wnr854t Firmware from NETGEAR. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Wnr854t Firmware: Stack-based Buffer Overflow

  CVE-2024-54809Mar 31, 2025NETGEAR

  Netgear Inc WNR854T 1.5.2 (North America) contains a stack-based buffer overflow vulnerability in the parse_st_header function due to use of a request header parameter in a strncpy where size is determined based on the input specified. By sending a specially c

• 9.8 Critical severity

  Wnr854t Firmware: Stack-based Buffer Overflow

  CVE-2024-54808Mar 31, 2025NETGEAR

  Netgear WNR854T 1.5.2 (North America) contains a stack-based buffer overflow vulnerability in the SetDefaultConnectionService function due to an unconstrained use of sscanf. The vulnerability allows for control of the program counter and can be utilized to ach

• 9.8 Critical severity

  Wnr854t Firmware: Improper Control of Generation of Code

  CVE-2024-54807Mar 31, 2025NETGEAREPSS 2.46%

  In Netgear WNR854T 1.5.2 (North America), the UPNP service is vulnerable to command injection in the function addmap_exec which parses the NewInternalClient parameter of the AddPortMapping SOAPAction into a system call without sanitation. An attacker can send

• 9.8 Critical severity

  Wnr854t Firmware: Improper Control of Generation of Code

  CVE-2024-54806Mar 31, 2025NETGEAREPSS 1.08%

  Netgear WNR854T 1.5.2 (North America) is vulnerable to Arbitrary command execution in cmd.cgi which allows for the execution of system commands via the web interface.

• 9.8 Critical severity

  Wnr854t Firmware: Improper Control of Generation of Code

  CVE-2024-54805Mar 31, 2025NETGEAREPSS 2.46%

  Netgear WNR854T 1.5.2 (North America) is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the nvram parameter get_email. After which, they can visit the send_log.cgi endpoint which uses the parameter in a

• 9.8 Critical severity

  Wnr854t Firmware: Improper Control of Generation of Code

  CVE-2024-54804Mar 31, 2025NETGEAREPSS 1.69%

  Netgear WNR854T 1.5.2 (North America) is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the nvram parameter wan_hostname and forcing a reboot. This will result in command injection.

• 9.8 Critical severity

  Wnr854t Firmware: Improper Control of Generation of Code

  CVE-2024-54803Mar 31, 2025NETGEAREPSS 1.69%

  Netgear WNR854T 1.5.2 (North America) is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the nvram parameter pppoe_peer_mac and forcing a reboot. This will result in command injection.