UserGate UTM Corporate Network Interface Data Compromise

The vulnerability of the UserGate UTM corporate network interface of UserGate D500 exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to influence the confidentiality and integrity of the protected information...

UserGate D500 Web Interface Account Information Disclosure

The vulnerability of the UserGate D500 enterprise network interface relates to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain the current user name account information by using the password reset form...

PT-2021-4635

Name of the Vulnerable Software and Affected Versions UserGate UTM versions affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the UserGate UTM corporate firewall UserGate D500. Exploitation of this issue may allow a remote...

PT-2021-4637

Name of the Vulnerable Software and Affected Versions UserGate UTM versions affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the UserGate UTM corporate firewall UserGate D500. Exploitation of this issue may allow a remote...

PT-2021-4636

Name of the Vulnerable Software and Affected Versions UserGate D500 affected versions not specified Description The issue is related to insufficient protection of registration data in the web interface for remote administration of IPMI on the UserGate D500 corporate firewall. Exploitation of this...

CVE-2016-11055

CVE-2016-11055 is a CSRF vulnerability in multiple NETGEAR devices (e.g., CM400/CM600/D1500/D500/DST6501/JNR1010v1/JWNR2000Tv3/JWNR2010v3/PLW1000/PLW1010/WNR500/WNR612v3/N450/CG3000Dv2). Root cause: cross-site request forgery that enables an attacker with a crafted script to log in to the victim’...

CVE-2016-11055

Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1 before 2017-01-11, JWNR2000Tv3 before 2017-01-11, JWNR2010v3 before 2017-01-11, PLW1000 before...

CVE-2016-11055: Cross-Site Request Forgery (CSRF)

Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1 before 2017-01-11, JWNR2000Tv3 before 2017-01-11, JWNR2010v3 before 2017-01-11, PLW1000 before...

PT-2020-7988

Name of the Vulnerable Software and Affected Versions: NETGEAR AC1450 version before 2017-01-06 NETGEAR C6300 version before 2017-01-06 NETGEAR D500 version before 2017-01-06 NETGEAR D1500 version before 2017-01-06 NETGEAR D3600 version before 2017-01-06 NETGEAR D6000 version before 2017-01-06...

PT-2020-7984

Name of the Vulnerable Software and Affected Versions: CM400 versions before 2017-01-11 CM600 versions before 2017-01-11 D1500 versions before 2017-01-11 D500 versions before 2017-01-11 DST6501 versions before 2017-01-11 JNR1010v1 versions before 2017-01-11 JWNR2000Tv3 versions before 2017-01-11...

CVE-2017-18703

CVE-2017-18703 describes a Cross-Site Request Forgery (CSRF) in a wide range of NETGEAR devices. The web application does not adequately validate request origins, enabling CSRF exploitation that could affect multiple models (examples: D1500, D500, D6100, D7000, D7800, EX6100v2, EX6150v2, JNR1010v...

CVE-2018-21230: Undefined Security Weakness

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.57, D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, DGN2200v4 befor...

CVE-2017-18703: Cross-Site Request Forgery (CSRF)

Certain NETGEAR devices are affected by CSRF. This affects D1500 before 1.0.0.25, D500 before 1.0.0.25, D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800 before 1.0.1.28, EX6100v2 before 1.0.1.60, EX6150v2 before 1.0.1.60, JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.16, JWNR2010v5 before...

CVE-2018-21139

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.58, D6200 before 1.1.00.30, D6220 before 1.0.0.46, D6400 before 1.0.0.82, D7000 before 1.0.1.68, D7000v2 before 1.0.0.51, D7800 before 1.0.1.42...