CVE-2019-20715: Improper Neutralization of Input During Web Page Generation

Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6100 before 1.0.0.63, D7800 before 1.0.1.47, DM200 before 1.0.0.61, R7500v2 before 1.0.3.40, R7800 before 1.0.2.60, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, and RBS50 before 2.3.0....

CVE-2019-20710: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32...

CVE-2019-20705: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32...

CVE-2019-20703: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32...

CVE-2019-20701: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32...

CVE-2019-20683: Out-of-bounds Write

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.32, D7000 before 1.0.1.68, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.38, R6050 before...

PT-2020-10700

Name of the Vulnerable Software and Affected Versions NETGEAR D3600 versions prior to 1.0.0.75 NETGEAR D6000 versions prior to 1.0.0.75 NETGEAR D6100 versions prior to 1.0.0.63 NETGEAR R7800 versions prior to 1.0.2.52 NETGEAR R8900 versions prior to 1.0.4.2 NETGEAR R9000 versions prior to 1.0.4.2...

PT-2020-10742

Name of the Vulnerable Software and Affected Versions NETGEAR D6100 versions prior to 1.0.0.60 NETGEAR D3600 versions prior to 1.0.0.75 NETGEAR D6000 versions prior to 1.0.0.75 NETGEAR R9000 versions prior to 1.0.4.26 NETGEAR R8900 versions prior to 1.0.4.26 NETGEAR R7800 versions prior to 1.0.2....

PT-2020-10615

Name of the Vulnerable Software and Affected Versions NETGEAR D3600 versions prior to 1.0.0.76 NETGEAR D6000 versions prior to 1.0.0.76 NETGEAR D6200 versions prior to 1.1.00.32 NETGEAR D7000 versions prior to 1.0.1.68 NETGEAR JR6150 versions prior to 1.0.1.18 NETGEAR PR2000 versions prior to...

PT-2018-19351

Уязвимость реализации протокола Point-to-Point Protocol PPP встроенного программного обеспечения маршрутизаторов NETGEAR D3600, NETGEAR D6000, NETGEAR D6100, NETGEAR D7800, NETGEAR DM200, NETGEAR R7500v2, NETGEAR R7800, NETGEAR RBK50, NETGEAR RBR50, NETGEAR RBS50 связана с отсутствием мер по...

CVE-2015-8289: Exposure of Sensitive Information to an Unauthorized Actor

The password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier allows remote attackers to discover the cleartext administrator password by reading the cgi-bin/passrec.asp HTML source code...

CVE-2015-8288: Undefined Security Weakness

NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from...

PT-2016-3880

Name of the Vulnerable Software and Affected Versions NETGEAR D3600 version 1.0.0.49 NETGEAR D6000 versions 1.0.0.49 and earlier Description The issue concerns the password-recovery feature, which allows remote attackers to discover the cleartext administrator password by reading the HTML source...

PT-2016-3879

Name of the Vulnerable Software and Affected Versions NETGEAR D3600 versions 1.0.0.49 and earlier NETGEAR D6000 versions 1.0.0.49 and earlier Description The issue allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a hardcoded private key from another...

Netgear D6000 and D3600 Hardcoded RSA Key Vulnerability

The Netgear D6000 and D3600 are wireless router products from American Netgear. The Netgear D6000 and D3600 device firmware uses hard-coded RSA keys, which allows remote attackers to exploit the vulnerability to conduct a man-in-the-middle attack with the keys, gain administrator access, and...