Xinan Zhou

A permissions issue related to inherited permissions errors may allow an application to gain unauthorized access to protected user data.

A logic issue exists that was addressed through improved checks. An attacker positioned on a privileged network may be able to intercept network traffic.

This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR Orbi 760 routers. The specific flaw exists within the implementation of the SOAP API, resulting from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system.

The issue concerns Incorrect Access Control, allowing access revocation evasion attacks. Once a malicious sharee obtains access credentials, Chipolo devices can be affected.

This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR routers. The specific flaw exists within the `readycloud control.cgi` file, resulting from the lack of authentication prior to allowing access to functionality. An attacker can leverage this issue to execute code in the context of root. The exploitation of this issue may allow a remote attacker to bypass authentication via an alternative name.

This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR routers. The specific flaw exists within the processing of SOAP requests, resulting from the lack of proper authentication verification before performing a password reset. An attacker can leverage this issue to reset the admin password. The vulnerability is related to deficiencies in the authentication procedure before executing a password reset.