NETGEAR WNR1000 Firmware 1.1.0.54
Approved changes feed: RSS · Atom
cpe:2.3:o:netgear:wnr1000_firmware:1.1.0.54:*:*:*:*:*:*:*
part: o version: 1.1.0.54 update: *
| Vendor | Netgear (99700297-c207-56f4-abd0-97ab0c8bf3ab) |
|---|---|
| Product | Wnr1000 Firmware (6cd2bd7b-20c9-5424-a506-e022c4756cbb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-20489 |
vulnerable | 2026-06-08 05:13:40.697426 |
Details available
An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. The web management interface (setup.cgi) has an authentication bypass and other problems that ultimately allow an attacker to remotely compromise the device from a malicious webpage. The attacker sends an FW_remote.htm&todo=cfg_init request without a cookie, reads the Set-Cookie header in the 401 Unauthorized response, and then repeats the FW_remote.htm&todo=cfg_init request with the specified cookie.
Published: 2020-03-02T15:06:16.000Z
Updated: 2024-08-05T02:39:10.085Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20488 |
vulnerable | 2026-06-08 05:13:40.697003 |
Details available
An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the web management interface (setup.cgi) are vulnerable to command injection, allowing remote attackers to execute arbitrary commands, as demonstrated by shell metacharacters in the sysDNSHost parameter.
Published: 2020-03-02T15:06:24.000Z
Updated: 2024-08-05T02:39:10.107Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20487 |
vulnerable | 2026-06-08 05:13:40.696670 |
Details available
An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the WNR1000V4 web management console are vulnerable to an unauthenticated GET request (exploitable directly or through CSRF), as demonstrated by the setup.cgi?todo=save_htp_account URI.
Published: 2020-03-02T15:06:06.000Z
Updated: 2024-08-05T02:39:10.096Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20486 |
vulnerable | 2026-06-08 05:13:40.695648 |
Details available
An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple pages (setup.cgi and adv_index.htm) within the web management console are vulnerable to stored XSS, as demonstrated by the configuration of the UI language.
Published: 2020-03-02T15:06:33.000Z
Updated: 2024-08-05T02:39:10.107Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.