PT-2021-5874

Name of the Vulnerable Software and Affected Versions NETGEAR CBR40 versions prior to 2.5.0.10 NETGEAR EAX20 versions prior to 1.0.0.32 NETGEAR EAX80 versions prior to 1.0.1.62 NETGEAR EX6120 versions prior to 1.0.0.64 NETGEAR EX6130 versions prior to 1.0.0.44 NETGEAR EX7000 versions prior to...

PT-2021-6173

Name of the Vulnerable Software and Affected Versions NETGEAR R8000 versions prior to 1.0.4.76 Description The issue is related to a lack of input sanitization in the embedded software of NETGEAR R8000 routers. This can be exploited to execute arbitrary commands. An authenticated user can...

PT-2021-5944

Name of the Vulnerable Software and Affected Versions NETGEAR R7000 versions prior to 1.0.9.42 Description The issue is related to a buffer overflow due to the lack of input size validation in the Wi-Fi router's firmware. This can allow a remote attacker to gain unauthorized access to protected...

PT-2021-6270

Name of the Vulnerable Software and Affected Versions NETGEAR D7000 versions prior to 1.0.1.82 Description The issue is caused by a stack-based buffer overflow. This can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information. An...

PT-2021-5842

Name of the Vulnerable Software and Affected Versions NETGEAR R7000 versions prior to 1.0.11.126 Description The issue is related to stored XSS and is caused by the failure to protect the structure of web pages. This could allow an attacker to perform cross-site scripting attacks. Recommendations...

PT-2021-6182

Name of the Vulnerable Software and Affected Versions NETGEAR D7800 versions prior to 1.0.1.60 NETGEAR DM200 versions prior to 1.0.0.66 NETGEAR EX2700 versions prior to 1.0.1.56 NETGEAR EX6150v2 versions prior to 1.0.1.86 NETGEAR EX6200v2 versions prior to 1.0.1.86 NETGEAR EX6250 versions prior t...

PT-2021-5903

Name of the Vulnerable Software and Affected Versions NETGEAR R7000 versions prior to 1.0.9.88 Description The issue is related to a stored XSS in the NETGEAR R7000 devices, which is caused by the lack of protection measures for the web page structure. This could allow an attacker to perform...

PT-2021-5926

Name of the Vulnerable Software and Affected Versions NETGEAR GS108Tv2 versions prior to 5.4.2.36 NETGEAR GS110TPv2 versions prior to 5.4.2.36 Description The issue is related to stored XSS, which can be exploited by a remote attacker to conduct cross-site scripting attacks. This is due to the la...

PT-2021-5917

Name of the Vulnerable Software and Affected Versions NETGEAR R7800 versions prior to 1.0.2.74 NETGEAR R9000 versions prior to 1.0.5.2 NETGEAR XR500 versions prior to 2.3.2.66 Description The issue is related to insufficient input validation, allowing an unauthenticated attacker to perform comman...

PT-2021-6233

Name of the Vulnerable Software and Affected Versions NETGEAR EX6120 versions prior to 1.0.0.66 NETGEAR EX6130 versions prior to 1.0.0.46 NETGEAR EX7000 versions prior to 1.0.1.106 NETGEAR EX7500 versions prior to 1.0.1.76 NETGEAR EX3700 versions prior to 1.0.0.94 NETGEAR EX3800 versions prior to...

PT-2021-5869

Name of the Vulnerable Software and Affected Versions NETGEAR RAX200 versions prior to 1.0.5.126 NETGEAR RAX20 versions prior to 1.0.2.82 NETGEAR RAX80 versions prior to 1.0.5.126 NETGEAR RAX15 versions prior to 1.0.2.82 NETGEAR RAX75 versions prior to 1.0.5.126 Description The issue is related t...

PT-2021-6185

Name of the Vulnerable Software and Affected Versions NETGEAR R7000 versions prior to 1.0.11.110 NETGEAR R7900 versions prior to 1.0.4.30 NETGEAR R8000 versions prior to 1.0.4.62 NETGEAR RAX15 versions prior to 1.0.2.82 NETGEAR RAX20 versions prior to 1.0.2.82 NETGEAR RAX200 versions prior to...

PT-2021-6183

Name of the Vulnerable Software and Affected Versions NETGEAR R7000 versions prior to 1.0.11.110 NETGEAR R7900 versions prior to 1.0.4.30 NETGEAR R8000 versions prior to 1.0.4.62 NETGEAR RAX200 versions prior to 1.0.3.106 NETGEAR R7000P versions prior to 1.3.3.140 NETGEAR RAX80 versions prior to...

PT-2021-5947

Name of the Vulnerable Software and Affected Versions NETGEAR EX6000 versions 1.0.0.0 through 1.0.0.37 NETGEAR EX6120 versions 1.0.0.0 through 1.0.0.47 NETGEAR EX6130 versions 1.0.0.0 through 1.0.0.29 NETGEAR R6300v2 versions 1.0.0.0 through 1.0.4.51 NETGEAR R6400 versions 1.0.0.0 through 1.0.1.5...

PT-2021-5726

Name of the Vulnerable Software and Affected Versions NETGEAR RAX35 versions prior to 1.0.4.102 NETGEAR RAX38 versions prior to 1.0.4.102 NETGEAR RAX40 versions prior to 1.0.4.102 Description The issue is related to the disclosure of administrative credentials in certain NETGEAR devices. It may...

NETGEAR Router Synchronization Error

The vulnerability of the embedded software of NETGEAR routers such as NETGEAR GC108P, NETGEAR GC108PP, NETGEAR GS108Tv3, NETGEAR GS110TPP, NETGEAR GS110TPv3, NETGEAR GS110TUP, NETGEAR GS308T, NETGEAR GS310TP, NETGEAR GS710TUP, NETGEAR GS716TP, NETGEAR GS716TPP, NETGEAR GS724TPP, NETGEAR GS724TPv2...

Netgear Access Control Error Vulnerability

Netgear RAX35 is a router from Netgear, Inc. A hardware device that connects two or more networks and acts as a gateway between networks.An access control error vulnerability exists in firmware versions prior to Netgear RAX35, RAX38 and RAX40 routers v1.0.4.102, which stems from a network system ...

CVE-2021-41449

A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files of the web application, via sending a specially crafted HTTP packet...

CVE-2021-41449

A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files of the web application, via sending a specially crafted HTTP packet...

CVE-2021-41449

A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files of the web application, via sending a specially crafted HTTP packet...