Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the upnpd service, which listens on...

CVE-2021-27239

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the upnpd service, which listens on...

CVE-2021-27239: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the upnpd service, which listens on...

PT-2021-17345

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400 and R6700 firmware version 1.0.4.98 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR routers. Authentication is not required to exploit this issue. The...

CVE-2020-26918

Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 before 1.0.1.46, R6400v2 before 1.0.2.66, R6700v3 before 1.0.2.66, R7100LG before 1.0.0.50, R7300DST before 1.0.0.70, R7900 before 1.0.3.8, R8300 before 1.0.2.128, and R8500 befor...

PT-2020-5880

Name of the Vulnerable Software and Affected Versions: NETGEAR EX7000 versions 1.0.0 through 1.0.1.77 NETGEAR R6250 versions 1.0.0 through 1.0.4.33 NETGEAR R6400 versions 1.0.0 through 1.0.1.45 NETGEAR R6400v2 versions 1.0.0 through 1.0.2.65 NETGEAR R7100LG versions 1.0.0 through 1.0.0.49 NETGEAR...

PT-2020-5879

Name of the Vulnerable Software and Affected Versions: NETGEAR EX7000 versions 1.0.0 through 1.0.1.77 NETGEAR R6250 versions 1.0.0 through 1.0.4.33 NETGEAR R6400 versions 1.0.0 through 1.0.1.45 NETGEAR R6400v2 versions 1.0.0 through 1.0.2.65 NETGEAR R6700v3 versions 1.0.0 through 1.0.2.65 NETGEAR...

CVE-2020-15636: Stack-based Buffer Overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R6400, R6700, R7000, R7850, R7900, R8000, RS400, and XR300 routers with firmware 1.0.4.8410.0.58. Authentication is not required to exploit this vulnerability. The specific flaw exists within...

PT-2020-14558

Name of the Vulnerable Software and Affected Versions NETGEAR R6400, R6700, R7000, R7850, R7900, R8000, RS400, and XR300 routers with firmware 1.0.4.84 10.0.58 Description This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to...

PT-2020-8411

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400 versions prior to 1.0.1.24 NETGEAR R6400v2 versions prior to 1.0.2.32 NETGEAR R6700 versions prior to 1.0.1.22 NETGEAR R6900 versions prior to 1.0.1.22 NETGEAR R7000 versions prior to 1.0.9.4 NETGEAR R7000P versions prior to...

Information Disclosure Vulnerability in Multiple NETGEAR Products

NETGEAR R6400 and others are products of NETGEAR USA.NETGEAR R6400 is a wireless router.NETGEAR D6220 is a wireless modem.NETGEAR R6900 is a wireless router. An information disclosure vulnerability exists in multiple NETGEAR products that can be exploited by an attacker to read arbitrary files...

CVE-2017-18700: Improper Neutralization of Input During Web Page Generation

Certain NETGEAR devices are affected by stored XSS. This affects D6400 before 1.0.0.60, D7000 before 1.0.1.50, D8500 before 1.0.3.29, EX6200 before 1.0.3.84, EX7000 before 1.0.0.60, R6250 before 1.0.4.16, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.3...

PT-2020-8260

Name of the Vulnerable Software and Affected Versions: NETGEAR D7800 versions prior to 1.0.1.28 NETGEAR R6400 versions prior to 1.01.32 NETGEAR R6400v2 versions prior to 1.0.2.44 NETGEAR R6700 versions prior to 1.0.1.36 NETGEAR R6900 versions prior to 1.0.1.34 NETGEAR R6900P versions prior to...

CVE-2018-21162

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6400 before 1.0.0.78, EX6200 before 1.0.3.86, EX7000 before 1.0.0.64, R6250 before 1.0.4.8, R6300v2 before 1.0.4.6, R6400 before 1.0.1.12, R6700 before 1.0.1.16, R7000 before 1.0.7.10, R7100LG...

PT-2020-8294

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400 versions prior to 1.0.1.14 NETGEAR R6700 versions prior to 1.0.1.22 NETGEAR R6900 versions prior to 1.0.1.22 NETGEAR R7000 versions prior to 1.0.9.4 NETGEAR R7100LG versions prior to 1.0.0.32 NETGEAR R7300DST versions prior to...

CVE-2017-18767

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, D8500 before 1.0.3.39, R6400 before 1.0.1.14, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7100LG before 1.0.0.32, R7300 before...

PT-2020-8314

Name of the Vulnerable Software and Affected Versions: NETGEAR R6300v2 versions prior to 1.0.4.8 NETGEAR R6400 versions prior to 1.0.1.22 NETGEAR R6400v2 versions prior to 1.0.2.32 NETGEAR R6700 versions prior to 1.0.1.20 NETGEAR R6900 versions prior to 1.0.1.20 NETGEAR WNR3500Lv2 versions prior ...

CVE-2017-18765: Undefined Security Weakness

Certain NETGEAR devices are affected by denial of service. This affects R6300v2 before 1.0.4.8, R6400 before 1.0.1.22, R6400v2 before 1.0.2.32, R6700 before 1.0.1.20, R6900 before 1.0.1.20, WNR3500Lv2 before 1.2.0.44, and WNR2000v2 before 1.2.0.8...

PT-2020-8345

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400 versions prior to 1.0.1.24 NETGEAR R6700 versions prior to 1.0.1.26 NETGEAR R6900 versions prior to 1.0.1.28 NETGEAR R7000 versions prior to 1.0.9.10 NETGEAR R7000P versions prior to 1.0.1.16 NETGEAR R6900P versions prior to...

CVE-2017-18794: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Certain NETGEAR devices are affected by command injection. This affects R6300v2 before 1.0.4.810.0.77, R6400 before 1.0.1.24, R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, R8500 before 1.0.2.100, and D6100 before 1.0.0.500.0.5...