Command injection

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7900 before 1.0.4.38, R7900P before 1.4.2.84, R8000 before 1.0.4.68, R8000P before 1.4.2.84, RAX200 before 1.0.3.106, MR60 before 1.0.6.110, RAX45 before 1.0.2.72, RAX80 before 1.0.3.106, MS60 before...

Command injection

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, EX7500 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 befo...

Command injection

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects LAX20 before 1.1.6.28, MK62 before 1.1.6.122, MR60 before 1.1.6.122, MS60 before 1.1.6.122, R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R6900P before 1.3.3.140, R7000 before 1.0.11.116, R7000P...

CVE-2021-45540

CVE-2021-45540 affects certain NETGEAR routers; vulnerability is a command injection exploitable by an authenticated user. Affected devices and firmware versions include: R7000 < 1.0.11.126, R7900 < 1.0.4.46, R7900P < 1.4.2.84, R7960P < 1.4.2.84, R8000 < 1.0.4.74, R8000P < 1.4.2...

CVE-2021-45540

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7000 before 1.0.11.126, R7900 before 1.0.4.46, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.74, R8000P before 1.4.2.84, RAX200 before 1.0.3.106, MR60 before 1.0.6.110, RAX45...

CVE-2021-45541

CVE-2021-45541 affects several NETGEAR devices via a command injection vulnerability that can be triggered by an authenticated user. The advisory lists affected models and firmware ranges, including R7900 (before 1.0.4.38), R7900P (before 1.4.2.84), R8000 (before 1.0.4.68), R8000P (before 1.4.2.8...

CVE-2021-45616

CVE-2021-45616 affects a wide range of NETGEAR devices (CBR750, LAX20, MK62, MR60, MS60, R6900P, R7000/R7000P, R7850, R7900/8000 series, RAX 15/20/200/35v2/40v2/43/45/50/75/80, RBK/RBR/RBS series, RS400, XR1000). The root cause is a pre-authenticated command-injection vulnerability allowing an un...

CVE-2021-45616

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 3.2.18.2, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140, R78...

CVE-2021-45669

CVE-2021-45669 describes a stored cross-site scripting vulnerability in certain NETGEAR devices, affecting multiple router/Wi‑Fi system models (e.g., RAX200, MR60, RAX20, RAX45, RAX80, MS60, RAX15, RAX50, RAX75, RBR750/R850, RBS750/850, RBK752/852) with various older firmware versions listed. The...

CVE-2021-45669

Certain NETGEAR devices are affected by stored XSS. This affects RAX200 before 1.0.3.106, MR60 before 1.0.6.110, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72, RAX80 before 1.0.3.106, MS60 before 1.0.6.110, RAX15 before 1.0.2.82, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, RBR750 before 3.2.16....

CVE-2021-45671

CVE-2021-45671 affects a range of NETGEAR devices (e.g., CBR40 < 2.5.0.10, EAX80 < 1.0.1.62, EX7500 < 1.0.0.72, R7900 < 1.0.4.38, R8000 < 1.0.4.68, RAX200 < 1.0.4.120, RBS40V < 2.6.1.4, RBW30 < 2.6.1.4, MR60 < 1.0.6.110, RAX20 < 1.0.2.82, RAX45 < 1.0.2.72, RAX80 &...

CVE-2021-45540: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7000 before 1.0.11.126, R7900 before 1.0.4.46, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.74, R8000P before 1.4.2.84, RAX200 before 1.0.3.106, MR60 before 1.0.6.110, RAX45...

CVE-2021-45539: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.74, R8000P before 1.4.2.84, MR60 before 1.0.6.110, RAX20 before 1.0.2.82, RAX45 before 1.0.2.28, RAX80 before 1.0.3.106, MS60 before...

CVE-2021-45669: Improper Neutralization of Input During Web Page Generation

Certain NETGEAR devices are affected by stored XSS. This affects RAX200 before 1.0.3.106, MR60 before 1.0.6.110, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72, RAX80 before 1.0.3.106, MS60 before 1.0.6.110, RAX15 before 1.0.2.82, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, RBR750 before 3.2.16....

CVE-2021-45617: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX7500 before 1.0.0.72, R6400 before 1.0.1.68, R6900P before 1.3.2.132, R7000 before 1.0.11.116, R7000P before 1.3.2.132, R79...

CVE-2021-45671: Improper Neutralization of Input During Web Page Generation

Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX80 before 1.0.1.62, EX7500 before 1.0.0.72, R7900 before 1.0.4.38, R8000 before 1.0.4.68, RAX200 before 1.0.4.120, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, MR60 before 1.0.6.110, RAX20 before 1.0.2.82,...

Netgear RBR750和NETGEAR 跨站脚本漏洞

Netgear RBR750 and NETGEAR are both products of Netgear, Inc.RBR750 is a home WiFi system.NETGEAR is a router. A hardware device that connects two or more networks and acts as a gateway between them. A security vulnerability exists in NETGEAR devices that are affected by stored cross-site...

CVE-2021-45620: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, LAX20 before 1.1.6.28, MR60 before 1.0.6.116, MR80 before 1.1.2.20, MS60 before 1.0.6.116, MS80 before...

CVE-2021-45612: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, EX7500 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 befo...

CVE-2021-45667: Improper Neutralization of Input During Web Page Generation

Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7960P before 1.4.1.66, RAX200 before 1.0.3.106, RBS40V before 2.6.1.4, RBW30 before 2.6.1....