Xinan Zhou

قد تسمح مشكلة في الأذونات تتعلق بأخطاء الأذونات الموروثة لأحد التطبيقات بالوصول غير المصرح به إلى بيانات المستخدم المحمية.

توجد مشكلة منطقية تم تصحيحها من خلال تحسين عمليات التحقق. قد يتمكن مهاجم موجود في شبكة ذات امتيازات من اعتراض حركة مرور الشبكة.

This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR Orbi 760 routers. The specific flaw exists within the implementation of the SOAP API, resulting from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system.

The issue concerns Incorrect Access Control, allowing access revocation evasion attacks. Once a malicious sharee obtains access credentials, Chipolo devices can be affected.

This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR routers. The specific flaw exists within the `readycloud control.cgi` file, resulting from the lack of authentication prior to allowing access to functionality. An attacker can leverage this issue to execute code in the context of root. The exploitation of this issue may allow a remote attacker to bypass authentication via an alternative name.

This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR routers. The specific flaw exists within the processing of SOAP requests, resulting from the lack of proper authentication verification before performing a password reset. An attacker can leverage this issue to reset the admin password. The vulnerability is related to deficiencies in the authentication procedure before executing a password reset.