CVE-2019-20746: Improper Neutralization of Input During Web Page Generation

Certain NETGEAR devices are affected by reflected XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, DM200 before 1.0.0.58, R7800 before 1.0.2.58, R8900 before 1.0.4.12, R9000 before 1.0.4.8, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28,...

CVE-2019-20736: Out-of-bounds Write

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6000 before 1.0.0.72, D6100 before 1.0.0.63, R7800 before 1.0.2.52, R8900 before 1.0.4.2, R9000 before 1.0.4.2, WNDR3700v4 before 1.0.2.102, WNDR4300v1 before 1.0.2.104, WNDR4300v2 before...

CVE-2019-20685: Out-of-bounds Write

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D6200 before 1.1.00.32, D7000 before 1.0.1.68, DM200 before 1.0.0.58, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before...

CVE-2019-20684: Out-of-bounds Write

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D6200 before 1.1.00.32, D7000 before 1.0.1.68, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.38, R6050 before...

CVE-2019-20709: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32...

CVE-2019-20752: Improper Neutralization of Input During Web Page Generation

Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, DM200 before 1.0.0.58, R7800 before 1.0.2.58, R8900 before 1.0.4.12, R9000 before 1.0.4.12, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28,...

CVE-2019-20704: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32...

PT-2020-10700

Name of the Vulnerable Software and Affected Versions NETGEAR D3600 versions prior to 1.0.0.75 NETGEAR D6000 versions prior to 1.0.0.75 NETGEAR D6100 versions prior to 1.0.0.63 NETGEAR R7800 versions prior to 1.0.2.52 NETGEAR R8900 versions prior to 1.0.4.2 NETGEAR R9000 versions prior to 1.0.4.2...

PT-2020-10685

Name of the Vulnerable Software and Affected Versions NETGEAR D3600 versions prior to 1.0.0.76 NETGEAR D6000 versions prior to 1.0.0.76 NETGEAR XR500 versions prior to 2.3.2.32 Description The issue allows command injection by an authenticated user. Recommendations For NETGEAR D3600 versions prio...

CVE-2019-20717: Undefined Security Weakness

Certain NETGEAR devices are affected by denial of service. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, EX2700 before 1.0.1.52, EX6200v2 before 1.0.1.74, EX8000 before 1.0.1.180, R7500v2 before 1.0.3.38, R7800 before 1.0.2.58, RBK20 before 2.3.0.28, RBR20 befo...

CVE-2019-20714: Improper Neutralization of Input During Web Page Generation

Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, DM200 before 1.0.0.58, R7500v2 before 1.0.3.40, R7800 before 1.0.2.60, R8900 before 1.0.4.12, R9000 before 1.0.4.12, RBK20 before 2.3.0.22, RBR20 before 2.3.0.22,...

CVE-2019-20724: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D6100 before 1.0.0.63, D7800 before 1.0.1.44, R7500v2 before 1.0.3.38, R7800 before 1.0.2.52, R8900 before 1.0.4.2, R9000 before 1.0.4.2, RBK20 before...

CVE-2019-20640

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.32, D7000 before 1.0.1.68, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.38, R6050 before...

CVE-2019-20640

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.32, D7000 before 1.0.1.68, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.38, R6050 before...

CVE-2019-20767

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.60, D3600 before 1.0.0.75, D6000 before 1.0.0.75, R9000 before 1.0.4.26, R8900 before 1.0.4.26, R7800 before 1.0.2.52, WNDR4500v3 before 1.0.0.58, WNDR4300v2 before...

Stack overflow

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.60, D3600 before 1.0.0.75, D6000 before 1.0.0.75, R9000 before 1.0.4.26, R8900 before 1.0.4.26, R7800 before 1.0.2.52, WNDR4500v3 before 1.0.0.58, WNDR4300v2 before...

PT-2020-10742

Name of the Vulnerable Software and Affected Versions NETGEAR D6100 versions prior to 1.0.0.60 NETGEAR D3600 versions prior to 1.0.0.75 NETGEAR D6000 versions prior to 1.0.0.75 NETGEAR R9000 versions prior to 1.0.4.26 NETGEAR R8900 versions prior to 1.0.4.26 NETGEAR R7800 versions prior to 1.0.2....

PT-2020-10615

Name of the Vulnerable Software and Affected Versions NETGEAR D3600 versions prior to 1.0.0.76 NETGEAR D6000 versions prior to 1.0.0.76 NETGEAR D6200 versions prior to 1.1.00.32 NETGEAR D7000 versions prior to 1.0.1.68 NETGEAR JR6150 versions prior to 1.0.1.18 NETGEAR PR2000 versions prior to...

CVE-2019-20767: Out-of-bounds Write

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.60, D3600 before 1.0.0.75, D6000 before 1.0.0.75, R9000 before 1.0.4.26, R8900 before 1.0.4.26, R7800 before 1.0.2.52, WNDR4500v3 before 1.0.0.58, WNDR4300v2 before...

The vulnerability of the implementation of the Point-to-Point Protocol (PPP) in NETGEAR’s embedded software for routers such as NETGEAR D3600, NETGEAR D6000, NETGEAR D6100, NETGEAR D7800, NETGEAR DM200, NETGEAR R7500v2, NETGEAR R7800, NETGEAR RBK50, NETGEAR RBR50, and NETGEAR RBS50, allows attackers to carry out cross-site scripting (XSS) attacks.

The vulnerability of the Point-to-Point Protocol PPP implementation in NETGEAR’s embedded software routers such as NETGEAR D3600, NETGEAR D6000, NETGEAR D6100, NETGEAR D7800, NETGEAR DM200, NETGEAR R7500v2, NETGEAR R7800, NETGEAR RBK50, NETGEAR RBR50, and NETGEAR RBS50 lies in the lack of measure...