CVE-2021-34870

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR XR1000 1.0.0.521.0.38 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP messages. The issue resul...

CVE-2021-34865

CVE-2021-34865 affects NETGEAR routers running the mini_httpd service on port 80. The root cause is incorrect string matching logic when accessing protected pages, allowing network-adjacent attackers to bypass authentication and escalate to root-level arbitrary code execution. Affected software i...

CVE-2021-34865

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the minihttpd service, which listens on TCP port 80 by default. The...

CVE-2021-34865: Improper Authentication

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the minihttpd service, which listens on TCP port 80 by default. The...

NETGEAR Wi-Fi Router Authentication Bypass

The vulnerability of NETGEAR CBR40, CBR750, RBW30, RBK752, RBR750, RBS750, RBK852, RBR850, RBS850, and RBS40V Wi-Fi routers’ microprogramming software is related to deficiencies in authentication mechanisms. Exploiting this vulnerability can allow a malicious actor to circumvent security...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as CBR40, CBR750, EAX20, EAX80, EX3700, EX3800, EX6120, EX6130, EX7000, EX7500, LAX20, MR60, MS60, R6300v2, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7100LG, R7850, R7900, R7900P, R7960P, R8000, R8000P, R8300, R8500,...

NETGEAR XR1000 Resource Leak DoS

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software is related to improper resource release. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

NETGEAR Wi-Fi Router DoS

The vulnerability of NETGEAR’s Wi-Fi router software, including models RBK352, RBR350, and RBS350, lies in the use of pre-installed credentials. Exploiting this vulnerability could allow a malicious actor to remotely cause service failures...

NETGEAR XR1000 Unauthorized Access

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software relates to the use of pre-installed credentials. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

NETGEAR R7000 Buffer Overflow Information Disclosure

The vulnerability of NETGEAR R7000 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

NETGEAR Wi-Fi Router Buffer Overflow

The vulnerability of Wi-Fi router microprogramming systems from NETGEAR, including models D6220, D6400, D7000v2, D8500, DC112A, EX7000, EX7500, R6250, R6300v2, R6400, R6400v2, R6700v3, R7000, R7100LG, R7850, R7900, R7960P, R8000, RAX200, RBS40V, RS400, XR300, R7000P, R8000P, R8500, RAX80, R6900P,...

NETGEAR Router Configuration Service Data Protection

The vulnerability of the configuration of Wi-Fi router software from NETGEAR, including models R6400v2, R6700v3, and XR1000, lies in the lack of protection for sensitive data. Exploiting this vulnerability could allow a remote attacker to bypass security measures...

NETGEAR R7000 Wi-Fi Router XSS

The vulnerability of NETGEAR R7000 Wi-Fi routers’ built-in software relates to the lack of security measures for the website structure. Exploiting this vulnerability could allow attackers to carry out cross-site scripting attacks...

NETGEAR Wi-Fi Router SSI Injection

The vulnerability of the built-in Wi-Fi router software from NETGEAR, namely RBK40, RBR40, and RBS40, is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute a Server Side Include Injection SSI attack...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of the built-in Wi-Fi router software of NETGEAR models CBR40, CBR750, and RBK752 lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

NETGEAR Wi-Fi Router SSI Injection

The vulnerability of the built-in Wi-Fi router software from NETGEAR, namely RBK40, RBR40, and RBS40, is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to perform a Server Side Include Injection attack...

NETGEAR Wi-Fi Router SSI Injection

The vulnerability of the built-in Wi-Fi router software from NETGEAR, namely RBK40, RBR40, and RBS40, is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute a Server Side Include Injection SSI attack...

NETGEAR XR1000 Command Injection

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

NETGEAR Wi-Fi router software Unauthorized Access

The vulnerability of NETGEAR Wi-Fi router software models D7000v2, D8500, EX3700, EX3800, EX6120, and EX6130 lies in decoding errors related to network traffic. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

NETGEAR XR1000 Authentication Bypass

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions from a remote location...