PT-2020-10655

Name of the Vulnerable Software and Affected Versions NETGEAR D7000v2 versions prior to 1.0.0.53 NETGEAR R6220 versions prior to 1.1.0.80 NETGEAR R6260 versions prior to 1.1.0.64 NETGEAR R6700 versions prior to 1.0.2.6 NETGEAR R6700v2 versions prior to 1.2.0.36 NETGEAR R6800 versions prior to...

CVE-2019-17372: Improper Authentication

Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNUaccessPasswordrecovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D,...

CVE-2016-6277: Cross-Site Request Forgery (CSRF)

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow...