XF
Product
Xr300 Firmware
55
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 18Medium 24Low 0
Watch
Add Xr300 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-52080 | 6.5 | Jul 15 | In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the usb_device.cgi endpoint Affected: 1.0.3.38 |
| CVE-2025-52081 | 6.5 | Jul 15 | In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the usb_device.cgi endpoint Affected: 1.0.3.38 |
| CVE-2025-52082 | 6.5 | Jul 15 | In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow exists in the HTTPD service through the usb_device.cgi endpoint Affected: 1.0.3.38 |
| CVE-2021-34983 | 6.5 | May 7 | NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability Affected: before 1.0.3.68 |
| CVE-2021-45639 | 6.1 | Dec 26 | Certain NETGEAR devices are affected by reflected XSS Affected: before 1.0.3.50 |
| CVE-2020-13245 | 5.9 | May 28 | Certain NETGEAR devices are affected by Missing SSL Certificate Validation Affected: v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100 |
| CVE-2024-52013 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at wiz_pptp.cgi Affected: 1.0.3.78 |
| CVE-2024-52014 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at genie_pptp.cgi Affected: 1.0.3.78 |
| CVE-2024-52015 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at bsw_pptp.cgi Affected: 1.0.3.78 |
| CVE-2024-52016 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component wlg_adv.cgi via… Affected: 1.0.3.78 |
| CVE-2024-52017 | 5.7 | Nov 5 | Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at bridge_wireless_main.cgi Affected: 1.0.3.78 |
| CVE-2024-50996 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpa_server parameter at genie_bpa.cgi Affected: 1.0.3.78 |
| CVE-2024-52023 | 5.7 | Nov 5 | Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe2.cgi Affected: 1.0.3.78 |
| CVE-2024-52024 | 5.7 | Nov 5 | Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at wizpppoe.cgi Affected: 1.0.3.78 |
| CVE-2024-52025 | 5.7 | Nov 5 | Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at geniepppoe.cgi Affected: 1.0.3.78 |
| CVE-2024-52026 | 5.7 | Nov 5 | Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at bsw_pppoe.cgi Affected: 1.0.3.78 |
| CVE-2024-51003 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component ap_mode.cgi via… Affected: 1.0.3.78 |
| CVE-2024-51007 | 5.7 | Nov 5 | Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at wireless.cgi Affected: 1.0.3.78 |
| CVE-2024-51002 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the l2tp_user_ip parameter at l2tp.cgi Affected: 1.0.3.78 |
| CVE-2024-51011 | 5.7 | Nov 5 | Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe.cgi Affected: 1.0.3.78 |
| CVE-2024-51014 | 5.7 | Nov 5 | Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid_an parameter in bridge_wireless_main.cgi Affected: 1.0.3.78 |
| CVE-2024-51016 | 5.7 | Nov 5 | Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the addName%d parameter in usb_approve.cgi Affected: 1.0.3.78 |
| CVE-2024-50997 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at pptp.cgi Affected: 1.0.3.78 |
| CVE-2024-51022 | 5.7 | Nov 5 | Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid parameter in bridge_wireless_main.cgi Affected: 1.0.3.78 |
Showing 24