Wnr854t Firmware (Netgear) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2025-03-31. Vendor: Netgear.
CVEs of Wnr854t Firmware
- CVE-2024-54807 - CVSS 9.8 (critical), 2025-03-31: In Netgear WNR854T 1.5.2 (North America), the UPNP service is vulnerable to command injection in the function addmap_exec which parses the NewInternalClient…
- CVE-2024-54809 - CVSS 9.8 (critical), 2025-03-31: Netgear Inc WNR854T 1.5.2 (North America) contains a stack-based buffer overflow vulnerability in the parse_st_header function due to use of a request header…
- CVE-2024-54808 - CVSS 9.8 (critical), 2025-03-31: Netgear WNR854T 1.5.2 (North America) contains a stack-based buffer overflow vulnerability in the SetDefaultConnectionService function due to an unconstrained…
- CVE-2024-54804 - CVSS 9.8 (critical), 2025-03-31: Netgear WNR854T 1.5.2 (North America) is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the nvram…
- CVE-2024-54803 - CVSS 9.8 (critical), 2025-03-31: Netgear WNR854T 1.5.2 (North America) is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the nvram…
- CVE-2024-54806 - CVSS 9.8 (critical), 2025-03-31: Netgear WNR854T 1.5.2 (North America) is vulnerable to Arbitrary command execution in cmd.cgi which allows for the execution of system commands via the web…
- CVE-2024-54802 - CVSS 9.8 (critical), 2025-03-31: In Netgear WNR854T 1.5.2 (North America), the UPNP service (/usr/sbin/upnp) is vulnerable to stack-based buffer overflow in the M-SEARCH Host header.
- CVE-2024-54805 - CVSS 9.8 (critical), 2025-03-31: Netgear WNR854T 1.5.2 (North America) is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the nvram…
- CVE-2017-18855 - CVSS 8.8 (high), 2020-04-29: NETGEAR WNR854T devices before 1.5.2 are affected by command execution.
