CVE-2021-38522

CVE-2021-38522 affects NETGEAR R6400 devices prior to firmware 1.0.1.52, with a stack-based buffer overflow exploitable by an authenticated user. The incident is documented across multiple sources (NVD, Red Hat, CVE listings, CNVD, CNNN, etc.), consistently noting the vulnerability in the router’...

CVE-2021-38522

NETGEAR R6400 devices before 1.0.1.52 are affected by a stack-based buffer overflow by an authenticated user...

CVE-2021-38523

NETGEAR R6400 devices before 1.0.1.70 are affected by a stack-based buffer overflow by an authenticated user...

CVE-2021-38523

Summary: CVE-2021-38523 affects NETGEAR R6400 routers prior to version 1.0.1.70. The issue is a stack-based buffer overflow that is exploitable by an authenticated user. Affected product/condition: NETGEAR R6400 with firmware versions earlier than 1.0.1.70. Technical details provided: Stack-based...

CVE-2021-38524

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60 before 1.0.6.110, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX200 before 1.0.3.106, RAX45 before 1.0.2.32, RAX50 before 1.0.2.32,...

CVE-2021-38524

CVE-2021-38524 affects multiple NETGEAR devices (MK62, MR60, MS60, RAX15/20/200/45/50/75/80, RBK752, RBR750, RBS750) prior to specific firmware versions (e.g., MK62/MR60/MS60 before 1.0.6.110; RAX series before 1.0.2.82/1.0.3.106; RBK/RBR/RBS before 3.2.16.6). The issue is a stack-based buffer ov...

CVE-2021-38525

CVE-2021-38525 affects a large set of NETGEAR routers (e.g., D3600, D6000, D6200, D7000, EX6xxx, XR500, R6xxx, R7xxx, etc.) with a stack-based buffer overflow vulnerability exploitable by an authenticated user. The issue occurs in multiple models and firmware revisions listed in the vulnerability...

CVE-2021-38525

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.36, D7000 before 1.0.1.70, EX6200v2 before 1.0.1.78, EX7000 before 1.0.1.78, EX8000 before 1.0.1.186, JR6150 before...

CVE-2021-38526

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX35 before 1.0.3.94, RAX38 before 1.0.3.94, and RAX40 before 1.0.3.94...

CVE-2021-38526

CVE-2021-38526 affects NETGEAR router models RAX35, RAX38, and RAX40 (firmware versions prior to 1.0.3.94). The issue is a buffer overflow exploitable by an unauthenticated attacker, leading to potential impact on availability. Public documents consistently describe the affected components as the...

CVE-2021-38527

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.14, EX6100v2 before 1.0.1.98, EX6150v2 before 1.0.1.98, EX6250 before 1.0.0.132, EX6400 before 1.0.2.158, EX6400v2 before 1.0.0.132, EX6410 before 1.0.0.132, EX6420 before...

CVE-2021-38527

CVE-2021-38527: Pre-auth command-injection vulnerability affecting a broad range of NETGEAR devices (e.g., CBR40, EX-series extenders/routers, XR series, RBK/RBR/RBS bundles, etc.). Root cause: unauthenticated input reaching a command-execution path; affected firmware versions include CBR40 <2...

CVE-2021-38528

CVE-2021-38528 affects NETGEAR gateways (D8500 < 1.0.3.58; R6900P < 1.3.2.132; R7000P < 1.3.2.132; R7100LG < 1.0.0.64; WNDR3400v3 < 1.0.1.38; XR300

CVE-2021-38528

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D8500 before 1.0.3.58, R6900P before 1.3.2.132, R7000P before 1.3.2.132, R7100LG before 1.0.0.64, WNDR3400v3 before 1.0.1.38, and XR300 before 1.0.3.56...

CVE-2021-38529

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 before 1.0.4.26, and R9000 before 1.0.4.26...

CVE-2021-38529

CVE-2021-38529 affects certain NETGEAR routers (D7800, R7800, R8900, R9000) with unauthenticated command injection. Affected versions: D7800 < 1.0.1.56, R7800 < 1.0.2.68, R8900 < 1.0.4.26, R9000

CVE-2021-38530

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.16, RBS40 before 2.5.1.16, RBK20 before 2.5.1.16, RBR20 before 2.5.1.16, RBS20 before 2.5.1.16, RBK50 before 2.5.1.16, RBR50 before 2.5.1.16, RBS50 befo...

CVE-2021-38530

Technical details about CVE-2021-38530 (affected Netgear devices, command injection vector, versions) are not publicly provided in the connected documents. Monitor for updates from vendors and security advisories.

CVE-2021-38531

Summary: CVE-2021-38531 affects multiple NETGEAR routers due to an incorrect configuration of security settings. Affected devices and fixed firmware (examples): D6200 ≤ 1.1.00.40, D7000 ≤ 1.0.1.78, R6020 ≤ 1.0.0.42, R6080 ≤ 1.0.0.42, R6120 ≤ 1.0.0.66, R6260 ≤ 1.1.0.78, R6700v2 ≤ 1.2.0.76, R6800 ≤...

CVE-2021-38531

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.42, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2...