CPE Details
NETGEAR CBR40 Firmware 2.5.0.28
2.5.0.28
2023-04-04
12h15 +00:00
12h15 +00:00
2023-05-11
16h04 +00:00
16h04 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:o:netgear:cbr40_firmware:2.5.0.28:*:*:*:*:*:*:*
Informations
Vendor
netgearProduct
cbr40_firmwareVersion
2.5.0.28Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required. | 5.4 |
Moyen |
||
| An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required. | 7.5 |
Haute |
||
| This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UA_Parser utility. A crafted Host Name option in a DHCP request can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11076. | 8.8 |
Haute |
