NETGEAR R7800 Buffer Overflow Vulnerability

The NETGEAR R7800 is an AC2600 dual-band Gigabit wireless router. A buffer overflow vulnerability exists in the NETGEAR R7800 versions prior to 1.0.2.74. No details of the vulnerability are provided at this time...

NETGEAR NMS300 Denial of Service Vulnerability

The NETGEAR NMS300 is a ProSAFE network management system. A denial of service vulnerability exists in NETGEAR NMS300 versions prior to 1.6.0.27. No detailed vulnerability details are available at this time...

NETGEAR DGN2200v1 HTTPd Authentication Vulnerability

The NETGEAR DGN2200v1 is an N300 wireless ADSL2+ modem router. An HTTPd authentication vulnerability exists in versions prior to NETGEAR DGN2200v1 v1.0.0.60. No detailed vulnerability details are provided at this time...

NETGEAR NMS300 Denial of Service Vulnerability (CNVD-2020-75518)

The NETGEAR NMS300 is a ProSAFE network management system. A denial of service vulnerability exists in NETGEAR NMS300 versions prior to 1.6.0.27. No detailed vulnerability details are available at this time...

NETGEAR NMS300 Command Injection Vulnerability (CNVD-2020-75523)

The NETGEAR NMS300 is a ProSAFE network management system. A command injection vulnerability exists in NETGEAR NMS300 versions prior to 1.6.0.27. No details of the vulnerability are provided at this time...

CVE-2020-35777

Summary: NETGEAR DGN2200v1 devices with firmware older than v1.0.0.58 are affected by a command injection vulnerability. The CVE entry notes an adjacent-network attacker with low complexity and requires no user interaction, with impact on confidentiality, integrity, and availability rated high. R...

CVE-2020-35777

NETGEAR DGN2200v1 devices before v1.0.0.58 are affected by command injection...

CVE-2020-35778

Certain NETGEAR devices are affected by CSRF. This affects GS716Tv3 before 6.3.1.36 and GS724Tv4 before 6.3.1.36...

CVE-2020-35778

The CVE affects NETGEAR GS716Tv3 and GS724Tv4 devices with Cross-Site Request Forgery (CSRF). Affected versions are GS716Tv3 before 6.3.1.36 and GS724Tv4 before 6.3.1.36. Root cause: CSRF vulnerability allowing unauthorized requests to be executed in the context of an authenticated session. Impac...

CVE-2020-35779

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service...

CVE-2020-35779

NETGEAR NMS300 devices are affected by a denial-of-service vulnerability affecting versions prior to 1.6.0.27. The available documents consistently state the affected product and the version range but do not provide concrete root-cause details, exploit information, or explicit remediation steps w...

CVE-2020-35780

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service...

CVE-2020-35780

CVE-2020-35780 affects NETGEAR NMS300 devices before version 1.6.0.27, where a denial of service condition is reported. Public sources consistently describe DoS impact but do not provide detailed vulnerability mechanics in the connected documents. The CVSS data present in the initial entry show m...

CVE-2020-35781

The CVE-2020-35781 entry affects NETGEAR NMS300 devices prior to firmware 1.6.0.27, with a denial-of-service impact. The connected documents confirm the affected product and version constraint but do not provide details on root cause, attack vectors, or available fixes. Practical implications are...

CVE-2020-35781

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service...

CVE-2020-35782

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. The TFTP firmware update mechanism does not properly implement firmware validations,...

CVE-2020-35782

The CVE-2020-35782 entry affects NETGEAR Smart Managed Plus switches: JGS516PE, JGS524Ev2, JGS524PE, and GS116Ev2, all prior to firmware version 2.6.0.48. The underlying issue is lack of function-level access control, combined with a TFTP firmware update mechanism that does not properly validate ...

CVE-2020-35783

CVE-2020-35783 affects Netgear ProSafe/Smart+ switches JGS516PE, GS116Ev2, JGS524Ev2, and JGS524PE (pre-2.6.0.48). A lack of function-level access control and NSDP protocol behavior allow unauthenticated remote attackers to read all switch configuration parameters via read requests. Affected vers...

CVE-2020-35783

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and JGS524PE before 2.6.0.48. The NSDP protocol version allows unauthenticated remote attackers to obtain all the switc...

CVE-2020-35784

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and GS116Ev2 before 2.6.0.48...