Command injection

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.66, EX2700 before 1.0.1.68, WN3000RPv2 before 1.0.0.90, WN3000RPv3 before 1.0.2.100, LBR1020 before 2.6.5.20, LBR20 before 2.6.5.32, R6700AX before 1.0.10.110, R7800 before 1.0.2.86...

Cross site scripting

NETGEAR R7000 devices before 1.0.9.88 are affected by stored XSS...

Command injection

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before...

CVE-2021-45493

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RAX35 before 1.0.4.102, RAX38 before 1.0.4.102, and RAX40 before 1.0.4.102...

CVE-2021-45493

Netgear NETGEAR RAX35/RAX38/RAX40 devices are affected by a vulnerability described as disclosure of administrative credentials. The issue applies to those models running firmware before 1.0.4.102. Root cause: administrative credentials disclosure. Impact is described as a confidentiality concern...

CVE-2021-45494

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10...

CVE-2021-45494

NETGEAR CVE-2021-45494 affects RBK352, RBR350, and RBS350 devices prior to firmware version 4.4.0.10, where an attacker can read arbitrary files. The PT-Security entry confirms the issue allows reading protected information via a flaw in the affected firmware. Remediation is to upgrade to 4.4.0.1...

CVE-2021-45495

CVE-2021-45495 affects NETGEAR D7000 wireless modems; the vulnerability is an authentication bypass in firmware prior to 1.0.1.68. Multiple connected sources (NVD, Red Hat, CNVD, CVE List) corroborate that devices running versions before 1.0.1.68 are vulnerable, with potential for unauthorized ac...

CVE-2021-45495

NETGEAR D7000 devices before 1.0.1.68 are affected by authentication bypass...

CVE-2021-45496

NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass...

CVE-2021-45496

CVE-2021-45496 affects NETGEAR D7000 devices running firmware before 1.0.1.82. The vulnerability is an authentication bypass that can be exploited over the network with no user interaction, yielding a critical impact to confidentiality, integrity, and availability (CVSS 3.1; base score 9.8). The ...

CVE-2021-45497

NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass...

CVE-2021-45497

The CVE-2021-45497 entry affects NETGEAR D7000 devices running versions prior to 1.0.1.82 and involves an authentication bypass. Public sources (NVD, Red Hat, CNVD, CVE listing) consistently describe the issue as a login bypass affecting the D7000 line, with the vulnerable condition limited to fi...

CVE-2021-45498

NETGEAR R6700v2 devices before 1.2.0.88 are affected by authentication bypass...

CVE-2021-45498

CVE-2021-45498 affects NETGEAR R6700v2 wireless routers prior to version 1.2.0.88, with an authentication bypass vulnerability. The issue is evidenced across multiple sources (NVD, Red Hat, CNVD, CNVD/PRION mirrors) describing that failing to apply 1.2.0.88 permits bypassing access controls. Conn...

CVE-2021-45499

Certain NETGEAR devices are affected by authentication bypass. This affects R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000P before 1.4.2.84, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106...

CVE-2021-45499

CVE-2021-45499 affects certain NETGEAR routers and is an authentication bypass vulnerability. Public records enumerate affected models and firmware ranges: R6900P < 1.3.3.140, R7000P < 1.3.3.140, R7900P/R7960P/R8000P < 1.4.2.84, RAX75/RAX80

CVE-2021-45500

CVE-2021-45500 affects NETGEAR routers R7000P and R8000: authentication bypass in versions earlier than 1.3.3.140 (R7000P) and 1.0.4.68 (R8000). The CVSS v3.1 base score is 8.8 (HIGH) with an Adjacent network attack vector, low attack complexity, no privileges required, and high impact to confide...

CVE-2021-45500

Certain NETGEAR devices are affected by authentication bypass. This affects R7000P before 1.3.3.140 and R8000 before 1.0.4.68...

CVE-2021-45501

Certain NETGEAR devices are affected by authentication bypass. This affects AC2400 before 1.1.0.84, AC2600 before 1.1.0.84, D7000 before 1.0.1.82, R6020 before 1.0.0.52, R6080 before 1.0.0.52, R6120 before 1.0.0.80, R6220 before 1.1.0.110, R6230 before 1.1.0.110, R6260 before 1.1.0.84, R6330 befo...