NETGEAR Wi-Fi Router System Data Compromise

The vulnerabilities of NETGEAR Wi-Fi router software models D3600, D6000, D6200, D6220, D6400, D7000, D7000v2, D7800, D8500, DC112A, DGN2200v4, DGND2200Bv4, DM200, EX3700, EX3800, EX6120, EX6130, EX7000, PR2000, R6220, R6230, R6250, R6300v2, R6400, R6400v2, R6700, R6700v3, R6900, R7000, R7100LG,...

CVE-2021-34870: Missing Authentication for Critical Function

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR XR1000 1.0.0.521.0.38 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP messages. The issue resul...

NETGEAR Wi-Fi Router Operational Data Protection

The vulnerability of Wi-Fi router microprogramming systems from NETGEAR models D3600, D6000, D6200, and D6220 lies in the insufficient protection of operational data. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

PT-2022-1940

Name of the Vulnerable Software and Affected Versions Netgear WAC120 AC Access Point affected versions not specified Description The issue is related to unauthenticated cross-site scripting XSS in the Netgear WAC120 AC Access Point, which may lead to multiple attacks, including session hijacking...

NETGEAR XR1000 Trust Management Issue Vulnerability

The NETGEAR xr1000 is a router from Netgear, Inc. A hardware device that connects two or more networks and acts as a gateway between networks, the NETGEAR XR1000 device suffers from a security vulnerability that stems from the fact that NETGEAR XR1000 devices prior to 1.0.0.58 are subject to...

NETGEAR D6220 Command Injection Vulnerability

NETGEAR D6220 is a wireless modem from Netgear, Inc. A security vulnerability exists in the NETGEAR D6220 device, which stems from the fact that versions prior to 1.0.0.76 are subject to command injection by authenticated users, which can be exploited by attackers for command injection...

NETGEAR RBR750 Command Injection Vulnerability

Netgear NETGEAR is a router from Netgear, Inc. NETGEAR has a security vulnerability in certain devices, which stems from the lack of effective filtering and escaping of command parameters, making the device vulnerable to command injection by authenticated users, which can be exploited by attacker...

Netgear NETGEAR D7000 Licensing Issue Vulnerability (CNVD-2022-06684)

Netgear NETGEAR D7000 is a wireless modem from Netgear, Inc. A security vulnerability exists in versions prior to NETGEAR D7000 1.0.1.68, which is susceptible to authentication bypass and could be exploited by attackers to cause a denial of service attack...

NETGEAR D7000 and NETGEAR Licensing Issue Vulnerability

NETGEAR D7000 and NETGEAR are both products of Netgear, Inc. NETGEAR D7000 is a wireless modem. A hardware device that connects two or more networks and acts as a gateway between networks. a security vulnerability exists in versions prior to NETGEAR D7000 1.0.1.82, which stems from the device bei...

Netgear NETGEAR D7000 Licensing Issue Vulnerability

A security vulnerability exists in the Netgear NETGEAR D7000, a wireless modem from Netgear, Inc. The vulnerability stems from the fact that NETGEAR D7000 devices prior to 1.0.1.82 are affected by an authentication bypass, which can be exploited by an attacker to achieve a login bypass...

CVE-2021-34979

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SOAP requests. When parsing the SOAPAction...

CVE-2021-34977

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.11610.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results fro...

CVE-2021-34980

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. When parsing the SOAPLOGINTOKEN...

CVE-2021-34978

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. A crafted SOAP request can trigg...

CVE-2021-34978

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. A crafted SOAP request can trigg...

CVE-2021-34979

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SOAP requests. When parsing the SOAPAction...

CVE-2021-34980

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. When parsing the SOAPLOGINTOKEN...

CVE-2021-34977

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.11610.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results fro...

CVE-2021-34977

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.11610.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results fro...