Approved changes feed: RSS · Atom

cpe:2.3:o:netgear:xr300_firmware:1.0.3.78:*:*:*:*:*:*:*

part: o version: 1.0.3.78 update: *

VendorNetgear (99700297-c207-56f4-abd0-97ab0c8bf3ab)
ProductXr300 Firmware (50a3eb1a-838e-529c-a2dd-568deb70c343)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52026 vulnerable 2026-06-08 06:52:14.597995 Details available
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at bsw_pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Published: 2024-11-05T00:00:00.000Z
Updated: 2024-11-05T15:21:54.109Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52025 vulnerable 2026-06-08 06:52:14.597050 Details available
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at geniepppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Published: 2024-11-05T00:00:00.000Z
Updated: 2024-11-05T15:22:58.324Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52024 vulnerable 2026-06-08 06:52:14.590166 Details available
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at wizpppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Published: 2024-11-05T00:00:00.000Z
Updated: 2024-11-05T15:23:22.077Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52023 vulnerable 2026-06-08 06:52:14.589459 Details available
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe2.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Published: 2024-11-05T00:00:00.000Z
Updated: 2024-11-05T15:23:34.374Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52022 vulnerable 2026-06-08 06:52:14.588538 Details available
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component wlg_adv.cgi via the apmode_gateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
Published: 2024-11-05T00:00:00.000Z
Updated: 2024-11-05T15:29:56.466Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52021 vulnerable 2026-06-08 06:52:14.587757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52020 vulnerable 2026-06-08 06:52:14.586954 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52018 vulnerable 2026-06-08 06:52:14.586111 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52017 vulnerable 2026-06-08 06:52:14.585379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52016 vulnerable 2026-06-08 06:52:14.584689 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52015 vulnerable 2026-06-08 06:52:14.583919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52014 vulnerable 2026-06-08 06:52:14.582887 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52013 vulnerable 2026-06-08 06:52:14.581725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51022 vulnerable 2026-06-08 06:52:11.608762 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51021 vulnerable 2026-06-08 06:52:11.607410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51016 vulnerable 2026-06-08 06:52:11.604775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51014 vulnerable 2026-06-08 06:52:11.603890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51011 vulnerable 2026-06-08 06:52:11.602143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51010 vulnerable 2026-06-08 06:52:11.601338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51008 vulnerable 2026-06-08 06:52:11.600087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51007 vulnerable 2026-06-08 06:52:11.599680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51003 vulnerable 2026-06-08 06:52:11.596192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51002 vulnerable 2026-06-08 06:52:11.594898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50997 vulnerable 2026-06-08 06:52:11.586274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50996 vulnerable 2026-06-08 06:52:11.580014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36499 vulnerable 2026-06-08 06:08:12.096471 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.