Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UAParser utility. A crafted Host Name option in a DHCP reque...

Authentication flaw

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Authentication is not required to exploit this...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Although authentication is required to exploit...

CVE-2020-27867

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Although authentication is required to exploit...

CVE-2020-27867

CVE-2020-27867 affects NETGEAR routers (including R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100/AC2400) via a vulnerability in the mini_httpd service. The flaw arises when parsing the funjsq_access_token parameter, where insufficient validat...

CVE-2020-27866

Summary: CVE-2020-27866 is an authentication bypass affecting multiple NETGEAR devices (notably R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100/AC2400). The root cause is incorrect string matching logic in the mini_httpd service that listens o...

CVE-2020-27866

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Authentication is not required to exploit this...

CVE-2020-27861

NETGEAR Orbi devices running 2.5.1.16 are affected by CVE-2020-27861. The flaw resides in the UA_Parser utility, where a crafted Host Name option in a DHCP request can trigger a system call composed from a user-supplied string, allowing unauthenticated, remote code execution with root privileges....

CVE-2020-27861

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UAParser utility. A crafted Host Name option in a DHCP reque...

Command Injection Vulnerability in Multiple Netgear Products

Netgear NETGEAR R8900 and others are products of Netgear, Inc.NETGEAR R8900 is a wireless router.NETGEAR R9000 is a wireless router.NETGEAR R7800 is a wireless router. A command injection vulnerability exists in a number of NETGEAR routers, which arises from a network system or product not proper...

Multiple Netgear Products Licensing Issues Vulnerabilities

Netgear NETGEAR WNR2020 and others are products of Netgear, Inc.NETGEAR WNR2020 is a wireless router.NETGEAR R6220 is a wireless router.NETGEAR R6700v2 is a wireless router. An authorization issue vulnerability exists in multiple NETGEAR routers that stems from a lack of authentication measures o...

Netgear NETGEAR Operating System Command Injection Vulnerability

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. An operating system command injection vulnerability exists in the NETGEAR Orbi, which arises from a network system or product not properly...

NETGEAR R7450 Access Control Error Vulnerability

The NETGEAR R7450 is a router from Netgear, Inc. A hardware device that connects two or more networks and acts as a gateway between networks.Netgear R7450 1.2.0.621.0.1 routers is vulnerable to an access control error that lacks proper access control and could be exploited by an attacker to...

NETGEAR R7450 Certification Bypass Vulnerability

NETGEAR R7450 is a router from Netgear, Inc. A hardware device that connects two or more networks and acts as a gateway between networks, the NETGEAR R7450 is vulnerable to an authentication bypass vulnerability that stems from improper state tracking during password recovery. An attacker could...

CVE-2020-27873

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.621.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API endpoint, which listens on TCP port 8...

CVE-2020-27872

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.621.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the minihttpd service, which listens on TCP port 80 by...

CVE-2020-27873

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.621.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API endpoint, which listens on TCP port 8...

CVE-2020-27872

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.621.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the minihttpd service, which listens on TCP port 80 by...

Authentication flaw

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.621.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the minihttpd service, which listens on TCP port 80 by...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.621.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API endpoint, which listens on TCP port 8...