CVE-2017-18761

NETGEAR R8000 devices before 1.0.4.2 are affected by a stack-based buffer overflow by an authenticated user...

CVE-2017-18761

NETGEAR R8000 devices before 1.0.4.2 are affected by a stack-based buffer overflow by an authenticated user...

CVE-2017-18767

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, D8500 before 1.0.3.39, R6400 before 1.0.1.14, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7100LG before 1.0.0.32, R7300 before...

Stack overflow

NETGEAR R8000 devices before 1.0.4.2 are affected by a stack-based buffer overflow by an authenticated user...

CVE-2017-18761

NETGEAR R8000 routers with firmware prior to 1.0.4.2 are affected by a stack-based buffer overflow exploitable by an authenticated user. Root cause: improper memory boundary handling leading to buffer overflow in affected firmware. Impact stated across multiple sources includes potential partial ...

PT-2020-8301

Name of the Vulnerable Software and Affected Versions: NETGEAR EX3700 versions prior to 1.0.0.64 NETGEAR EX3800 versions prior to 1.0.0.64 NETGEAR EX6120 versions prior to 1.0.0.32 NETGEAR EX6130 versions prior to 1.0.0.16 NETGEAR R6300v2 versions prior to 1.0.4.12 NETGEAR R6700 versions prior to...

CVE-2017-18761: Out-of-bounds Write

NETGEAR R8000 devices before 1.0.4.2 are affected by a stack-based buffer overflow by an authenticated user...

PT-2020-8310

Name of the Vulnerable Software and Affected Versions: NETGEAR R8000 versions prior to 1.0.4.2 Description: The issue is a stack-based buffer overflow that can be exploited by an authenticated user. Recommendations: For versions prior to 1.0.4.2, update to version 1.0.4.2 or later to resolve the...

CVE-2017-18790: Exposure of Sensitive Information to an Unauthorized Actor

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100...

PT-2020-8348

Name of the Vulnerable Software and Affected Versions: NETGEAR R6200v2 versions prior to 1.0.3.14 NETGEAR R6250 versions prior to 1.0.4.8 NETGEAR R6300v2 versions prior to 1.0.4.8 NETGEAR R6700 versions prior to 1.1.1.20 NETGEAR R7000 versions prior to 1.0.7.10 NETGEAR R7000P/R6900P versions prio...

PT-2020-8346

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400 versions prior to 1.0.1.24 NETGEAR R7900 versions prior to 1.0.1.18 NETGEAR R8000 versions prior to 1.0.3.54 NETGEAR R8500 versions prior to 1.0.2.100 Description: The issue allows an attacker to read arbitrary files on certain...

CVE-2017-18794: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Certain NETGEAR devices are affected by command injection. This affects R6300v2 before 1.0.4.810.0.77, R6400 before 1.0.1.24, R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, R8500 before 1.0.2.100, and D6100 before 1.0.0.500.0.5...

PT-2020-8339

Name of the Vulnerable Software and Affected Versions: NETGEAR R6700 versions prior to 1.0.1.26 NETGEAR R7000 versions prior to 1.0.9.10 NETGEAR R7100LG versions prior to 1.0.0.32 NETGEAR R7900 versions prior to 1.0.1.18 NETGEAR R8000 versions prior to 1.0.3.54 NETGEAR R8500 versions prior to...

CVE-2019-20713

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D8500 before 1.0.3.44, R6250 before 1.0.4.34, R6300v2 before 1.0.4.32, R6400 before 1.0.1.46, R6700 before 1.0.2.6, R6900 before 1.0.2.4, R6900P before 1.3.1.64, R7000 before 1.0.9.42,...

PT-2020-10693

Name of the Vulnerable Software and Affected Versions NETGEAR D6220 versions prior to 1.0.0.48 NETGEAR D6400 versions prior to 1.0.0.82 NETGEAR D7000v2 versions prior to 1.0.0.52 NETGEAR D8500 versions prior to 1.0.3.43 NETGEAR R6250 versions prior to 1.0.4.34 NETGEAR R6400 versions prior to...

PT-2020-10655

Name of the Vulnerable Software and Affected Versions NETGEAR D7000v2 versions prior to 1.0.0.53 NETGEAR R6220 versions prior to 1.1.0.80 NETGEAR R6260 versions prior to 1.1.0.64 NETGEAR R6700 versions prior to 1.0.2.6 NETGEAR R6700v2 versions prior to 1.2.0.36 NETGEAR R6800 versions prior to...

NETGEAR R8000 R8500 Arbitrary Action

The vulnerability of the wlgadv.cgi CGI handler in NETGEAR’s R8000 and R8500 routers stems from buffer overflows in static memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted HTTP request...

CVE-2019-17372: Improper Authentication

Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNUaccessPasswordrecovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D,...

PT-2019-20327

Уязвимость компонента wlg adv.cgi обработчика CGI встроенного программного обеспечения маршрутизаторов NETGEAR R8000 и R8500 связана с переполнением буфера в статической памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код путем отправки...

CVE-2016-6277: Cross-Site Request Forgery (CSRF)

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow...