<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: ex6120 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-4140: A vulnerability, which was classified as critical, has been found in Netgear EX6120 1.0.3.94</title><link>https://patchthecve.com/cve/CVE-2025-4140.html</link><guid>https://patchthecve.com/cve/CVE-2025-4140.html</guid><pubDate>Wed, 17 Jun 2026 09:32:35 +0000</pubDate><description>HIGH 8.8: A vulnerability, which was classified as critical, has been found in Netgear EX6120 1.0.3.94. Affected by this issue is the function sub_30394. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure bu</description></item><item><title>CVE-2025-4139: A vulnerability classified as critical was found in Netgear EX6120 1.0.0.68</title><link>https://patchthecve.com/cve/CVE-2025-4139.html</link><guid>https://patchthecve.com/cve/CVE-2025-4139.html</guid><pubDate>Wed, 17 Jun 2026 09:32:34 +0000</pubDate><description>HIGH 8.8: A vulnerability classified as critical was found in Netgear EX6120 1.0.0.68. Affected by this vulnerability is the function fwAcosCgiInbound. The manipulation of the argument host leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about this disclosure but </description></item><item><title>CVE-2024-35519: Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command inj</title><link>https://patchthecve.com/cve/CVE-2024-35519.html</link><guid>https://patchthecve.com/cve/CVE-2024-35519.html</guid><pubDate>Wed, 17 Jun 2026 07:34:58 +0000</pubDate><description>HIGH 8.4: Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operating_mode.cgi via the ap_mode parameter.</description></item><item><title>CVE-2024-35518: Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in genie_fix2.cgi via the wan_dns1_pri parameter.</title><link>https://patchthecve.com/cve/CVE-2024-35518.html</link><guid>https://patchthecve.com/cve/CVE-2024-35518.html</guid><pubDate>Wed, 17 Jun 2026 07:34:58 +0000</pubDate><description>HIGH 8.4: Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in genie_fix2.cgi via the wan_dns1_pri parameter.</description></item><item><title>CVE-2021-34982: NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2021-34982.html</link><guid>https://patchthecve.com/cve/CVE-2021-34982.html</guid><pubDate>Wed, 17 Jun 2026 03:56:55 +0000</pubDate><description>HIGH 8.8: NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability.

The spe</description></item></channel></rss>