Swings

The issue is related to a Buffer Overflow in the httpd service of the NETGEAR R6400v2 Wi-Fi router's firmware, which can be exploited by remote unauthenticated attackers to execute arbitrary code. This can be achieved via a crafted URL to the `httpd` service. The exploitation may allow a remote attacker to execute arbitrary code using a specially crafted malicious web page.

The issue exists due to insufficient input validation in the libradius service of the FreeBSD operating system. This can be exploited by a remote attacker to cause a denial of service.

The issue is related to multiple vulnerabilities in the web-based management interface of the affected devices. These vulnerabilities exist due to improper validation of HTTP requests, which could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to remotely execute arbitrary code on the device.

The issue is related to errors in processing HTTP requests in the web-based management interface of the affected devices. This could allow a remote attacker to execute arbitrary code on an affected device. The vulnerabilities exist because HTTP requests are not properly validated. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to remotely execute arbitrary code on the device.

Name of the Vulnerable Software and Affected Versions: D-Link DSR-250 version 3.14 D-Link DSR-1000N version 2.11B201 Description: The UPnP service in the affected devices contains a command injection issue, which can lead to remote command execution. Recommendations: For D-Link DSR-250 version 3.14, consider disabling the UPnP service until a patch is available. For D-Link DSR-1000N version 2.11B201, consider disabling the UPnP service until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: accel-ppp (affected versions not specified) Description: A variable underflow exists in the radius/packet.c file of accel-ppp when receiving a RADIUS vendor-specific attribute with a length field less than 2. This issue can lead to arbitrary code execution, but only when the attacker controls the RADIUS server. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue exists due to insufficient validation of user input in the web-based management interface of the affected routers. This could allow a remote attacker to execute arbitrary code or cause the device to restart unexpectedly. The attacker would need valid administrator credentials to exploit the issue. The estimated number of potentially affected devices is not specified.

The issue is a command injection vulnerability that could allow remote attackers to execute arbitrary commands if exploited.

A buffer overflow issue occurs when receiving an L2TP control packet with an AVP of type string and no hidden flags, where the length is set to less than 6. This issue is particularly concerning for applications used in open networks or those with untrusted nodes.