CVE-2024-52026

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at bsw_pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:netgear:xr300_firmware:1.0.3.78:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr300:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:netgear:r7000p_firmware:1.3.3.154:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:netgear:r6400v2_firmware:1.0.4.128:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6400v2:-:*:*:*:*:*:*:*

History

21 May 2025, 20:12

Type Values Removed Values Added
First Time Netgear r6400v2
Netgear r7000p Firmware
Netgear
Netgear xr300
Netgear xr300 Firmware
Netgear r7000p
Netgear r6400v2 Firmware
References () https://github.com/wudipjq/my_vuln/blob/main/Netgear5/vuln_52/52.md - () https://github.com/wudipjq/my_vuln/blob/main/Netgear5/vuln_52/52.md - Broken Link
References () https://www.netgear.com/about/security/ - () https://www.netgear.com/about/security/ - Vendor Advisory
CPE cpe:2.3:h:netgear:r6400v2:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r6400v2_firmware:1.0.4.128:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7000p_firmware:1.3.3.154:*:*:*:*:*:*:*
cpe:2.3:o:netgear:xr300_firmware:1.0.3.78:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr300:-:*:*:*:*:*:*:*

05 Nov 2024, 16:35

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-05 15:15

Updated : 2025-05-21 20:12


NVD link : CVE-2024-52026

Mitre link : CVE-2024-52026


JSON object : View

Products Affected

netgear

  • r7000p
  • r7000p_firmware
  • r6400v2
  • xr300_firmware
  • r6400v2_firmware
  • xr300
CWE

No CWE.