NETGEAR JWNR2000v2 FIRMWARE 1.0.0.11
Approved changes feed: RSS · Atom
cpe:2.3:o:netgear:jwnr2000v2_firmware:1.0.0.11:*:*:*:*:*:*:*
part: o version: 1.0.0.11 update: *
| Vendor | Netgear (99700297-c207-56f4-abd0-97ab0c8bf3ab) |
|---|---|
| Product | Jwnr2000V2 Firmware (dbaddb56-bc8d-5767-9f2d-473db8ab1d68) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-4122 |
vulnerable | 2026-06-08 07:29:15.438223 |
Netgear JWNR2000v2 sub_435E04 command injection
MEDIUM (6.3)
A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been rated as critical. Affected by this issue is the function sub_435E04. The manipulation of the argument host leads to command injection. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-04-30T14:31:03.996Z
Updated: 2025-04-30T15:03:09.629Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4121 |
vulnerable | 2026-06-08 07:29:15.437631 |
Netgear JWNR2000v2 cmd_wireless command injection
MEDIUM (6.3)
A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been declared as critical. Affected by this vulnerability is the function cmd_wireless. The manipulation of the argument host leads to command injection. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-04-30T14:00:07.565Z
Updated: 2025-04-30T15:43:26.903Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4120 |
vulnerable | 2026-06-08 07:29:15.435879 |
Netgear JWNR2000v2 sub_4238E8 buffer overflow
HIGH (8.8)
A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been classified as critical. Affected is the function sub_4238E8. The manipulation of the argument host leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-04-30T14:00:05.715Z
Updated: 2025-04-30T15:42:52.387Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39550 |
vulnerable | 2026-06-08 06:09:37.783890 |
Details available
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the check_auth function.
Published: 2023-08-07T00:00:00.000Z
Updated: 2024-10-17T14:24:59.568Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38922 |
vulnerable | 2026-06-08 06:08:19.149815 |
Details available
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the update_auth function.
Published: 2023-08-07T00:00:00.000Z
Updated: 2024-10-11T14:15:52.712Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.