Lucene search
+L

540 matches found

CNNVD
CNNVD
added 2021/03/23 12:0 a.m.4 views

Netgear NETGEAR 命令注入漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A command injection vulnerability exists in NETGEAR that allows command injection by an authenticated user. The following products and versio...

9.6CVSS8.3AI score0.00706EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/03/23 12:0 a.m.5 views

Netgear NETGEAR 授权问题漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. Certain NETGEAR has a security vulnerability that affects the following products and versions: RBK852 before 3.2.17.12, RBK853 before...

9.6CVSS8.2AI score0.00608EPSS
Exploits0References2
OSV
OSV
added 2021/02/12 12:15 a.m.5 views

CVE-2020-27867

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Although authentication is required to exploit...

6.8CVSS7AI score0.02344EPSS
Exploits0References2
NVD
NVD
added 2021/02/12 12:15 a.m.22 views

CVE-2020-27866

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Authentication is not required to exploit this...

8.8CVSS0.08656EPSS
Exploits0References2
NVD
NVD
added 2021/02/12 12:15 a.m.18 views

CVE-2020-27867

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Although authentication is required to exploit...

7.7CVSS0.02344EPSS
Exploits0References2
OSV
OSV
added 2021/02/12 12:15 a.m.4 views

CVE-2020-27866

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Authentication is not required to exploit this...

8.8CVSS7.1AI score0.08656EPSS
Exploits0References2
Prion
Prion
added 2021/02/12 12:15 a.m.23 views

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Although authentication is required to exploit...

7.7CVSS6.9AI score0.02344EPSS
Exploits0References2Affected Software19
Prion
Prion
added 2021/02/12 12:15 a.m.21 views

Authentication flaw

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Authentication is not required to exploit this...

8.3CVSS8.9AI score0.08656EPSS
Exploits0References2Affected Software19
CNNVD
CNNVD
added 2021/02/11 12:0 a.m.8 views

Command Injection Vulnerability in Multiple Netgear Products

Netgear NETGEAR R8900 and others are products of Netgear, Inc.NETGEAR R8900 is a wireless router.NETGEAR R9000 is a wireless router.NETGEAR R7800 is a wireless router. A command injection vulnerability exists in a number of NETGEAR routers, which arises from a network system or product not proper...

7.7CVSS6.8AI score0.02344EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:0 a.m.6 views

The vulnerability of NETGEAR’s integrated software on routers exists due to the lack of measures to neutralize specific components, allowing attackers to execute arbitrary commands.

The vulnerability in NETGEAR’s embedded software exists because measures to neutralize specific components have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9.6CVSS8.2AI score0.02294EPSS
Exploits0References4Affected Software12
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:0 a.m.6 views

The vulnerability of NETGEAR’s integrated software on routers exists due to the lack of measures to neutralize specific components, allowing attackers to execute arbitrary commands.

The vulnerability in NETGEAR’s embedded software exists because measures to neutralize specific components have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

7.8CVSS7.3AI score0.01002EPSS
Exploits0References4Affected Software7
OSV
OSV
added 2020/12/30 12:15 a.m.3 views

CVE-2020-35837

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10...

4.8CVSS5.8AI score0.00675EPSS
Exploits0References1
OSV
OSV
added 2020/12/30 12:15 a.m.5 views

CVE-2020-35804

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D7800 before 1.0.1.58, R7800 before 1.0.2.74, R8900 before 1.0.5.18, R9000 before 1.0.5.18, and XR700 before 1.0.1.34...

4.6CVSS5.8AI score0.00325EPSS
Exploits0References1
CNNVD
CNNVD
added 2020/12/29 12:0 a.m.9 views

Certain NETGEAR devices Cross-Site Scripting Vulnerability

Netgear NETGEAR R8900 and others are products of Netgear, Inc.NETGEAR R8900 is a wireless router.NETGEAR R9000 is a wireless router.NETGEAR XR500 is a wireless router. A cross-site scripting vulnerability exists in Certain NETGEAR devices and affects the following products and versions: D7800...

8.1CVSS5.7AI score0.00708EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/12/29 12:0 a.m.7 views

Certain NETGEAR devices Cross-Site Scripting Vulnerability

Netgear NETGEAR R8900 and others are products of Netgear, Inc.NETGEAR R8900 is a wireless router.NETGEAR R9000 is a wireless router.NETGEAR XR500 is a wireless router. A cross-site scripting vulnerability exists in Certain NETGEAR devices and affects the following products and versions: D7800...

6.1CVSS5.7AI score0.00553EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/12/29 12:0 a.m.8 views

Certain NETGEAR devices Cross-Site Scripting Vulnerability

Netgear NETGEAR is a router from the American company Netgear. It is a hardware device that connects two or more networks and acts as a gateway between networks. Certain NETGEAR devices are affected by a cross-site scripting vulnerability in the following products and versions: D7800 before...

6.1CVSS5.6AI score0.00553EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/12/29 12:0 a.m.18 views

Command Injection Vulnerability in Multiple NETGEAR Devices

Netgear NETGEAR is a router from the American company Netgear. It is a hardware device that connects two or more networks and acts as a gateway between networks. Certain NETGEAR devices are vulnerable to a command injection vulnerability that affects the following products and versions: D7800...

6.8CVSS5.8AI score0.00715EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/12/29 12:0 a.m.7 views

Certain NETGEAR devices Cross-Site Scripting Vulnerability

Netgear NETGEAR is a router from the American company Netgear. It is a hardware device that connects two or more networks and acts as a gateway between networks. Certain NETGEAR devices are affected by a cross-site scripting vulnerability in the following products and versions: D7800 before...

6.1CVSS5.6AI score0.00675EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/12/29 12:0 a.m.7 views

Certain NETGEAR devices Cross-Site Scripting Vulnerability

Netgear NETGEAR is a router from the American company Netgear. It is a hardware device that connects two or more networks and acts as a gateway between networks. Certain NETGEAR devices are affected by a cross-site scripting vulnerability in the following products and versions: D7800 before...

6.1CVSS5.6AI score0.00553EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/12/29 12:0 a.m.9 views

Cross-Site Scripting Vulnerability in Multiple Netgear Products

NETGEAR NETGEAR WNR1000V4 is a wireless router.NETGEAR D6200 is a wireless modem.NETGEAR D7000 is a wireless modem. Certain NETGEAR devices are affected by a cross-site scripting vulnerability in the following products and versions: D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before...

7.6CVSS5.7AI score0.0062EPSS
Exploits0References2
Rows per page
Query Builder