Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-51004

No fix known EPSS <1%CVSS 5.7

Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usb_device.cgi via the cifs_user, read_access, and write_access parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted POST request.

Published 2024-11-05 · CVE record · OSV

Products: netgear r7000p_firmware, netgear r8500_firmware