GCVE - cpe:2.3:h:netgear:xwn5001:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:netgear:xwn5001:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Netgear (`99700297-c207-56f4-abd0-97ab0c8bf3ab`)
Product	Xwn5001 (`924e302c-1f88-53ef-be23-98745802d370`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-39550`	not_vulnerable	2026-06-08 06:09:37.786125	Details available Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the check_auth function. Published: 2023-08-07T00:00:00.000Z Updated: 2024-10-17T14:24:59.568Z Open on db.gcve.eu Reference links https://www.netgear.com/about/security/ https://github.com/FirmRec/IoT-Vulns/blob/main/netgear/http_passwd_auth/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-39550`	vulnerable	2026-06-08 06:09:37.782085	Details available Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the check_auth function. Published: 2023-08-07T00:00:00.000Z Updated: 2024-10-17T14:24:59.568Z Open on db.gcve.eu Reference links https://www.netgear.com/about/security/ https://github.com/FirmRec/IoT-Vulns/blob/main/netgear/http_passwd_auth/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-38922`	not_vulnerable	2026-06-08 06:08:19.151252	Details available Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the update_auth function. Published: 2023-08-07T00:00:00.000Z Updated: 2024-10-11T14:15:52.712Z Open on db.gcve.eu Reference links https://www.netgear.com/about/security/ https://github.com/FirmRec/IoT-Vulns/blob/main/netgear/http_passwd_auth/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-38922`	vulnerable	2026-06-08 06:08:19.147371	Details available Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the update_auth function. Published: 2023-08-07T00:00:00.000Z Updated: 2024-10-11T14:15:52.712Z Open on db.gcve.eu Reference links https://www.netgear.com/about/security/ https://github.com/FirmRec/IoT-Vulns/blob/main/netgear/http_passwd_auth/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-46424`	not_vulnerable	2026-06-08 05:50:38.885745	Details available An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v0.4.1.1 and earlier. Published: 2022-12-20T00:00:00.000Z Updated: 2025-04-16T18:17:37.184Z Open on db.gcve.eu Reference links https://www.netgear.com/about/security/ https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1rKQuzDj	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.