CVE-2017-18767

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, D8500 before 1.0.3.39, R6400 before 1.0.1.14, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7100LG before 1.0.0.32, R7300 before...

PT-2020-8301

Name of the Vulnerable Software and Affected Versions: NETGEAR EX3700 versions prior to 1.0.0.64 NETGEAR EX3800 versions prior to 1.0.0.64 NETGEAR EX6120 versions prior to 1.0.0.32 NETGEAR EX6130 versions prior to 1.0.0.16 NETGEAR R6300v2 versions prior to 1.0.4.12 NETGEAR R6700 versions prior to...

PT-2020-8339

Name of the Vulnerable Software and Affected Versions: NETGEAR R6700 versions prior to 1.0.1.26 NETGEAR R7000 versions prior to 1.0.9.10 NETGEAR R7100LG versions prior to 1.0.0.32 NETGEAR R7900 versions prior to 1.0.1.18 NETGEAR R8000 versions prior to 1.0.3.54 NETGEAR R8500 versions prior to...

PT-2020-8345

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400 versions prior to 1.0.1.24 NETGEAR R6700 versions prior to 1.0.1.26 NETGEAR R6900 versions prior to 1.0.1.28 NETGEAR R7000 versions prior to 1.0.9.10 NETGEAR R7000P versions prior to 1.0.1.16 NETGEAR R6900P versions prior to...

CVE-2017-18794: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Certain NETGEAR devices are affected by command injection. This affects R6300v2 before 1.0.4.810.0.77, R6400 before 1.0.1.24, R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, R8500 before 1.0.2.100, and D6100 before 1.0.0.500.0.5...

PT-2020-8348

Name of the Vulnerable Software and Affected Versions: NETGEAR R6200v2 versions prior to 1.0.3.14 NETGEAR R6250 versions prior to 1.0.4.8 NETGEAR R6300v2 versions prior to 1.0.4.8 NETGEAR R6700 versions prior to 1.1.1.20 NETGEAR R7000 versions prior to 1.0.7.10 NETGEAR R7000P/R6900P versions prio...

CVE-2017-18790: Exposure of Sensitive Information to an Unauthorized Actor

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100...

NETGEAR R7000 Buffer Overflow Vulnerability

The NETGEAR R7000 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR R7000 prior to version 1.0.9.42. The vulnerability stems from a networked system or product that performs operations in memory without properly validating data boundaries, resulting in...

CVE-2019-20758

NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user...

CVE-2019-20758

NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user...

CVE-2019-20758

NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user...

CVE-2019-20713

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D8500 before 1.0.3.44, R6250 before 1.0.4.34, R6300v2 before 1.0.4.32, R6400 before 1.0.1.46, R6700 before 1.0.2.6, R6900 before 1.0.2.4, R6900P before 1.3.1.64, R7000 before 1.0.9.42,...

PT-2020-10733

Name of the Vulnerable Software and Affected Versions NETGEAR R7000 versions prior to 1.0.9.42 Description A buffer overflow issue exists, allowing an authenticated user to potentially exploit it. Recommendations For versions prior to 1.0.9.42, update to version 1.0.9.42 or later to resolve the...

CVE-2019-20758: Buffer Copy without Checking Size of Input

NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user...

PT-2020-10655

Name of the Vulnerable Software and Affected Versions NETGEAR D7000v2 versions prior to 1.0.0.53 NETGEAR R6220 versions prior to 1.1.0.80 NETGEAR R6260 versions prior to 1.1.0.64 NETGEAR R6700 versions prior to 1.0.2.6 NETGEAR R6700v2 versions prior to 1.2.0.36 NETGEAR R6800 versions prior to...

CVE-2019-17372: Improper Authentication

Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNUaccessPasswordrecovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D,...

Command Execution Vulnerability in American Netgear R7000

The R7000 is a wireless router product from Netgear USA. A command execution vulnerability exists in the American Netgear R7000. An attacker is allowed to exploit the vulnerability to perform command injection via post requests...

Netgear R7000 / R6400 cgi-bin Command Injection Exploit

This Metasploit module exploits an arbitrary command injection vulnerability in Netgear R7000 and R6400 router firmware version 1.0.7.21.1.93 and possibly earlier. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework requir...

Netgear R7000 Cross-Site Scripting Vulnerability

Netgear R7000 is a wireless router product from Netgear. A cross-site scripting vulnerability exists in Netgear R7000 versions 1.0.7.2 through 1.1.93, which arises from the program failing to adequately filter user-submitted input. An attacker could exploit the vulnerability to steal cookie-based...

CVE-2016-6277: Cross-Site Request Forgery (CSRF)

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow...