Количество 3
Количество 3
CVE-2021-34977
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116_10.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results from the lack of proper authentication verification before performing a password reset. An attacker can leverage this vulnerability to reset the admin password. Was ZDI-CAN-13483.
GHSA-6r85-9phq-3c46
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116_10.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results from the lack of proper authentication verification before performing a password reset. An attacker can leverage this vulnerability to reset the admin password. Was ZDI-CAN-13483.
BDU:2021-05320
Уязвимость микропрограммного обеспечения Wi-Fi роутеров NETGEAR D7000v2, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R8300, R8500, RS400, XR300, связанная с недостатками процедуры аутентификации перед выполнением сброса пароля, позволяющая нарушителю изменить пароль администратора
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-34977 This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116_10.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results from the lack of proper authentication verification before performing a password reset. An attacker can leverage this vulnerability to reset the admin password. Was ZDI-CAN-13483. | CVSS3: 8.8 | 0% Низкий | около 4 лет назад |
| GHSA-6r85-9phq-3c46 This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116_10.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results from the lack of proper authentication verification before performing a password reset. An attacker can leverage this vulnerability to reset the admin password. Was ZDI-CAN-13483. | 0% Низкий | около 4 лет назад | |
 | BDU:2021-05320 Уязвимость микропрограммного обеспечения Wi-Fi роутеров NETGEAR D7000v2, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R8300, R8500, RS400, XR300, связанная с недостатками процедуры аутентификации перед выполнением сброса пароля, позволяющая нарушителю изменить пароль администратора | CVSS3: 8.8 | 0% Низкий | больше 4 лет назад |
Уязвимостей на страницу