Xwn5001 Firmware

xwn5001_firmware

Vendor: Netgear • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-39550 1Netgear 3Jwnr2000v2 Firmware Xavn2001v2 FirmwareXwn5001 Firmware Nov 21, 2024 Aug 7, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the check_auth function.
CVE-2023-38922 1Netgear 3Jwnr2000v2 Firmware Xavn2001v2 FirmwareXwn5001 Firmware Nov 21, 2024 Aug 7, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the update_auth function.
CVE-2022-46424 1Netgear 1Xwn5001 Firmware Apr 16, 2025 Dec 20, 2022 N/A· v4 8.1 HIGH· v3 N/A· v2 An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware ima...Show more An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v0.4.1.1 and earlier.Show less