Approved changes feed: RSS · Atom

cpe:2.3:o:netgear:r6400v2_firmware:1.0.4.128:*:*:*:*:*:*:*

part: o version: 1.0.4.128 update: *

VendorNetgear (99700297-c207-56f4-abd0-97ab0c8bf3ab)
ProductR6400V2 Firmware (5d1f3828-f89b-5790-bd44-996cdb5c7b91)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52026 vulnerable 2026-06-08 06:52:14.598082 Details available
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at bsw_pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Published: 2024-11-05T00:00:00.000Z
Updated: 2024-11-05T15:21:54.109Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52025 vulnerable 2026-06-08 06:52:14.597399 Details available
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at geniepppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Published: 2024-11-05T00:00:00.000Z
Updated: 2024-11-05T15:22:58.324Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52024 vulnerable 2026-06-08 06:52:14.590265 Details available
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at wizpppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Published: 2024-11-05T00:00:00.000Z
Updated: 2024-11-05T15:23:22.077Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52023 vulnerable 2026-06-08 06:52:14.589677 Details available
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe2.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Published: 2024-11-05T00:00:00.000Z
Updated: 2024-11-05T15:23:34.374Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52022 vulnerable 2026-06-08 06:52:14.588969 Details available
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component wlg_adv.cgi via the apmode_gateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
Published: 2024-11-05T00:00:00.000Z
Updated: 2024-11-05T15:29:56.466Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52016 vulnerable 2026-06-08 06:52:14.584949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52015 vulnerable 2026-06-08 06:52:14.584286 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52014 vulnerable 2026-06-08 06:52:14.583325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52013 vulnerable 2026-06-08 06:52:14.582162 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51021 vulnerable 2026-06-08 06:52:11.607741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51011 vulnerable 2026-06-08 06:52:11.602403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51010 vulnerable 2026-06-08 06:52:11.601722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51003 vulnerable 2026-06-08 06:52:11.596831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51002 vulnerable 2026-06-08 06:52:11.595528 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50997 vulnerable 2026-06-08 06:52:11.591401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50996 vulnerable 2026-06-08 06:52:11.584483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.