ByteOS Network

Vulnerability Details :

CVE-2002-1877

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-28 Jun, 2005 | 04:00

Updated At-08 Aug, 2024 | 03:43

NETGEAR FM114P allows remote attackers to bypass access restrictions for web sites via a URL that uses the IP address instead of the hostname.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:28 Jun, 2005 | 04:00

Updated At:08 Aug, 2024 | 03:43

▼CVE Numbering Authority (CNA)

NETGEAR FM114P allows remote attackers to bypass access restrictions for web sites via a URL that uses the IP address instead of the hostname.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.iss.net/security_center/static/10061.php	vdb-entry x_refsource_XF
http://online.securityfocus.com/archive/1/290849	mailing-list x_refsource_BUGTRAQ
http://www.securityfocus.com/bid/5667	vdb-entry x_refsource_BID

Hyperlink: http://www.iss.net/security_center/static/10061.php

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://online.securityfocus.com/archive/1/290849

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://www.securityfocus.com/bid/5667

Resource:

vdb-entry

x_refsource_BID

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.iss.net/security_center/static/10061.php	vdb-entry x_refsource_XF x_transferred
http://online.securityfocus.com/archive/1/290849	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.securityfocus.com/bid/5667	vdb-entry x_refsource_BID x_transferred

Hyperlink: http://www.iss.net/security_center/static/10061.php

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://online.securityfocus.com/archive/1/290849

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://www.securityfocus.com/bid/5667

Resource:

vdb-entry

x_refsource_BID

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:31 Dec, 2002 | 05:00

Updated At:03 Apr, 2025 | 01:03

NETGEAR FM114P allows remote attackers to bypass access restrictions for web sites via a URL that uses the IP address instead of the hostname.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 2.0

Base score: 7.5

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

NETGEAR, Inc.

>>fm114p>>*

cpe:2.3:h:netgear:fm114p:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://online.securityfocus.com/archive/1/290849	cve@mitre.org	N/A
http://www.iss.net/security_center/static/10061.php	cve@mitre.org	N/A
http://www.securityfocus.com/bid/5667	cve@mitre.org	N/A
http://online.securityfocus.com/archive/1/290849	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.iss.net/security_center/static/10061.php	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/5667	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://online.securityfocus.com/archive/1/290849

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.iss.net/security_center/static/10061.php

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/5667

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://online.securityfocus.com/archive/1/290849

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.iss.net/security_center/static/10061.php

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/5667

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

61Records found

CVE-2020-35797

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-4.14% / 88.19%

7 Day CHG~0.00%

Published-29 Dec, 2020 | 23:38

Updated-04 Aug, 2024 | 17:09

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an unauthenticated attacker.

Vendor-n/a NETGEAR, Inc.

Product-nms300_firmware nms300 n/a

CWE ID-CWE-434

Unrestricted Upload of File with Dangerous Type

CVE-2016-11014

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.44% / 62.44%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 00:26

Updated-06 Aug, 2024 | 03:47

NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case.

Vendor-n/a NETGEAR, Inc.

Product-jnr1010_firmware jnr1010 n/a

CWE ID-CWE-613

Insufficient Session Expiration

CVE-2016-10176

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-86.62% / 99.38%

7 Day CHG~0.00%

Published-30 Jan, 2017 | 04:24

Updated-20 Apr, 2025 | 01:37

The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the embedded web server (uhttpd) and processed accordingly. The web server also contains another URL, apply_noauth.cgi, that allows an unauthenticated user to perform sensitive actions on the device. This functionality can be exploited to change the router settings (such as the answers to the password-recovery questions) and achieve remote code execution.

Vendor-n/a NETGEAR, Inc.

Product-wnr2000v5_firmware wnr2000v5 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2020-26927

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.4||CRITICAL

EPSS-0.59% / 68.27%

7 Day CHG~0.00%

Published-09 Oct, 2020 | 06:27

Updated-04 Aug, 2024 | 16:03

Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.42, R6080 before 1.0.0.42, R6050 before 1.0.1.26, JR6150 before 1.0.1.26, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6260 before 1.1.0.66, R6700v2 before 1.2.0.62, R6800 before 1.2.0.62, R6900v2 before 1.2.0.62, AC2100 before 1.2.0.62, AC2400 before 1.2.0.62, AC2600 before 1.2.0.62, R7450 before 1.2.0.62, and WNR2020 before 1.1.0.62.

CVE-2022-29383

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-78.81% / 99.01%

7 Day CHG~0.00%

Published-13 May, 2022 | 12:49

Updated-03 Aug, 2024 | 06:17

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi.

Vendor-n/a NETGEAR, Inc.

Product-ssl312_firmware ssl312 n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2020-11790

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.4||CRITICAL

EPSS-5.98% / 90.32%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 17:07

Updated-04 Aug, 2024 | 11:41

NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers.

Vendor-n/a NETGEAR, Inc.

Product-r7800 r7800_firmware n/a

CVE-2020-11789

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-8.3||HIGH

EPSS-3.58% / 87.29%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 17:06

Updated-04 Aug, 2024 | 11:41

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700 before 1.0.2.8, R6700v3 before 1.0.4.84, R6900 before 1.0.2.8, and R7900 before 1.0.3.10.

Vendor-n/a NETGEAR, Inc.

Product-r6900_firmware r7900_firmware r6700 r6400 r6400_firmware r6700_firmware r7900 r6900 n/a

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2018-21132

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-0.57% / 67.61%

7 Day CHG~0.00%

Published-23 Apr, 2020 | 19:41

Updated-05 Aug, 2024 | 12:19

Certain NETGEAR devices are affected by authentication bypass. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.

Vendor-n/a NETGEAR, Inc.

Product-wac505_firmware wac510_firmware wac505 wac510 n/a

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2018-21097

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.1||HIGH

EPSS-0.39% / 58.92%

7 Day CHG~0.00%

Published-27 Apr, 2020 | 15:57

Updated-05 Aug, 2024 | 12:19

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, and WND930 before 2.1.5.