Approved changes feed: RSS · Atom

cpe:2.3:o:netgear:xr300_firmware:1.0.3.38:*:*:*:*:*:*:*

part: o version: 1.0.3.38 update: *

VendorNetgear (99700297-c207-56f4-abd0-97ab0c8bf3ab)
ProductXr300 Firmware (50a3eb1a-838e-529c-a2dd-568deb70c343)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-52082 vulnerable 2026-06-08 07:31:11.372915 Details available
In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow exists in the HTTPD service through the usb_device.cgi endpoint. The vulnerability occurs when processing POST requests containing the read_access parameter.
Published: 2025-07-15T00:00:00.000Z
Updated: 2025-07-15T20:43:08.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52081 vulnerable 2026-06-08 07:31:11.372382 Details available
In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the usb_device.cgi endpoint. The vulnerability occurs when processing POST requests containing the usb_folder parameter.
Published: 2025-07-15T00:00:00.000Z
Updated: 2025-07-15T20:42:20.014Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52080 vulnerable 2026-06-08 07:31:11.370527 Details available
In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the usb_device.cgi endpoint. The vulnerability occurs when processing POST requests containing the share_name parameter.
Published: 2025-07-15T00:00:00.000Z
Updated: 2025-07-15T20:43:51.536Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.