Approved changes feed: RSS · Atom

cpe:2.3:o:netgear:r6400_firmware:1.0.4.128:*:*:*:*:*:*:*

part: o version: 1.0.4.128 update: *

VendorNetgear (99700297-c207-56f4-abd0-97ab0c8bf3ab)
ProductR6400 Firmware (5a4ee7a2-9218-5ba0-a1a9-115243182c35)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52025 vulnerable 2026-06-08 06:52:14.597102 Details available
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at geniepppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Published: 2024-11-05T00:00:00.000Z
Updated: 2024-11-05T15:22:58.324Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52024 vulnerable 2026-06-08 06:52:14.590188 Details available
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at wizpppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Published: 2024-11-05T00:00:00.000Z
Updated: 2024-11-05T15:23:22.077Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52023 vulnerable 2026-06-08 06:52:14.589586 Details available
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe2.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Published: 2024-11-05T00:00:00.000Z
Updated: 2024-11-05T15:23:34.374Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52022 vulnerable 2026-06-08 06:52:14.588566 Details available
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component wlg_adv.cgi via the apmode_gateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
Published: 2024-11-05T00:00:00.000Z
Updated: 2024-11-05T15:29:56.466Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52021 vulnerable 2026-06-08 06:52:14.587880 Details available
Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at bsw_fix.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
Published: 2024-11-05T00:00:00.000Z
Updated: 2024-11-05T15:29:39.792Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52020 vulnerable 2026-06-08 06:52:14.587074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52016 vulnerable 2026-06-08 06:52:14.584713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52015 vulnerable 2026-06-08 06:52:14.583945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52014 vulnerable 2026-06-08 06:52:14.582989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52013 vulnerable 2026-06-08 06:52:14.581843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51021 vulnerable 2026-06-08 06:52:11.607433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51011 vulnerable 2026-06-08 06:52:11.602177 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51010 vulnerable 2026-06-08 06:52:11.601460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51003 vulnerable 2026-06-08 06:52:11.596220 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51002 vulnerable 2026-06-08 06:52:11.595020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50997 vulnerable 2026-06-08 06:52:11.586310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50996 vulnerable 2026-06-08 06:52:11.580829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.