Stack overflow

NETGEAR R6400 devices before 1.0.1.52 are affected by a stack-based buffer overflow by an authenticated user...

CVE-2021-38522

NETGEAR R6400 devices before 1.0.1.52 are affected by a stack-based buffer overflow by an authenticated user...

Command injection

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.50, R7900P before 1.4.1.50, R8000P before 1.4.1.50, RAX75 before 1.0.1.62, and RAX80 before 1.0.1.62...

CVE-2021-38521

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.50, R7900P before 1.4.1.50, R8000P before 1.4.1.50, RAX75 before 1.0.1.62, and RAX80 before 1.0.1.62...

CVE-2021-38513

Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11, CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60 before 1.0.6.110, RBK752 before 3.2.10.10, RBR750...

CVE-2021-38513

The CVE-2021-38513 entry describes an authentication bypass affecting multiple NETGEAR devices. Affected products and firmware baselines include: RBK852, RBR850, RBS850, CBR40, EAX20, MK62, MR60, MS60, RBK752, RBR750, and RBS750 with the versions specified in the description (e.g., RBK852 before ...

CVE-2021-38515

Certain NETGEAR devices are affected by denial of service. This affects R6400v2 before 1.0.4.98, R6700v3 before 1.0.4.98, R7900 before 1.0.3.18, and R8000 before 1.0.4.46...

CVE-2021-38515

The CVE-2021-38515 entry covers denial‑of‑service affecting NETGEAR routers: R6400v2 prior to 1.0.4.98, R6700v3 prior to 1.0.4.98, R7900 prior to 1.0.3.18, and R8000 prior to 1.0.4.46. The connected sources confirm affected models and the exact vulnerable versions; no root‑cause or exploitation d...

CVE-2021-38516

Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D7000v2 before 1.0.0.52, D7800 before 1.0.1.44, D8500 before 1.0.3.43, DC112A before 1.0.0.40, DGN2200v4 before 1.0.0.108, RBK50 before 2.3.0.32, RBR50...

CVE-2021-38516

CVE-2021-38516 targets NETGEAR devices where there is a lack of function-level access control. Affected devices include D6220 (before 1.0.0.48), D6400 (before 1.0.0.82), D7000v2 (before 1.0.0.52), D7800 (before 1.0.1.44), D8500 (before 1.0.3.43), and numerous other models (list in public advisori...

CVE-2021-38517

Certain NETGEAR devices are affected by out-of-bounds reads and writes. This affects R6400 before 1.0.1.70, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, and XR300 before 1.0.3.50...

CVE-2021-38517

CVE-2021-38517 affects certain NETGEAR routers with out-of-bounds reads/writes: R6400 (<1.0.1.70), RAX75 (<1.0.4.120), RAX80 (<1.0.4.120), XR300 (

CVE-2021-38518

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RAX200 before 1.0.4.120, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12...

CVE-2021-38518

The CVE-2021-38518 entry covers an authenticated-command-injection vulnerability affecting several NETGEAR routers. Specifically, affected devices and fixed/affected versions include RAX200, RAX75, and RAX80 prior to 1.0.4.120, and RBK852, RBR850, and RBS850 prior to 3.2.17.12. The issue arises f...

CVE-2021-38519

CVE-2021-38519 affects several NETGEAR routers (R6250, R6300v2, R6400, R6400v2, R6700, R6700v3, R6900, R7000, R6900P, R7100LG, R7900, R8000, R7900P, RAX80, and others) with firmware versions prior to the listed fixes (e.g., R6250/R6300v2 < 1.0.4.36, R6400/R6400v2 < 1.0.1.50/1.0.2.66, R6700/...

CVE-2021-38519

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6250 before 1.0.4.36, R6300v2 before 1.0.4.36, R6400 before 1.0.1.50, R6400v2 before 1.0.2.66, R6700v3 before 1.0.2.66, R6700 before 1.0.2.8, R6900 before 1.0.2.8, R7000 before 1.0.9.88, R6900P befor...

CVE-2021-38520

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.52, R6400v2 before 1.0.4.84, R6700v3 before 1.0.4.84, R6700v2 before 1.2.0.62, R6900v2 before 1.2.0.62, and R7000P before 1.3.2.124...

CVE-2021-38520

CVE-2021-38520 affects several NETGEAR routers (R6400 before 1.0.1.52; R6400v2 before 1.0.4.84; R6700v3 before 1.0.4.84; R6700v2 before 1.2.0.62; R6900v2 before 1.2.0.62; R7000P before 1.3.2.124). Root cause reported as the system not filtering certain input characters, enabling command injection...

CVE-2021-38521

CVE-2021-38521 affects several NETGEAR routers (R6400 <= 1.0.1.50; R7900P <= 1.4.1.50; R8000P <= 1.4.1.50; RAX75 <= 1.0.1.62; RAX80

CVE-2021-38521

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.50, R7900P before 1.4.1.50, R8000P before 1.4.1.50, RAX75 before 1.0.1.62, and RAX80 before 1.0.1.62...