12226 matches found
CVE-2020-35784
CVE-2020-35784 affects NETGEAR Smart-Managed Plus switches: JGS516PE, JGS524PE, JGS524Ev2, and GS116Ev2, all before version 2.6.0.48. The root cause is lack of function-level access control, enabling partial disclosure/modification of resources. CVSS basis provided: high to medium impact dependin...
CVE-2020-35785
NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication aka PSV-2020-0363, PSV-2020-0364, and PSV-2020-0365...
CVE-2020-35785
NETGEAR DGN2200v1 devices with firmware versions prior to 1.0.0.60 are affected by an HTTPd authentication mishandling vulnerability (CVE-2020-35785). The issue enables unauthenticated or weakly authenticated access that could allow a remote attacker to exploit the HTTPd service. Public sources i...
CVE-2020-35786
The CVE-2020-35786 issue affects NETGEAR R7800 devices running versions prior to 1.0.2.74, where a buffer overflow can be triggered by an authenticated user. The vulnerability is described as a buffer overflow in these devices, indicating potential impact on availability (per NVD metrics) and the...
CVE-2020-35786
NETGEAR R7800 devices before 1.0.2.74 are affected by a buffer overflow by an authenticated user...
CVE-2020-35787
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.36, D7000 before 1.0.1.70, EX6200v2 before 1.0.1.78, EX7000 before 1.0.1.78, EX8000 before 1.0.1.186, JR6150 before 1.0.1.18, PR2000...
CVE-2020-35787
CVE-2020-35787 is a buffer overflow in a range of NETGEAR devices that can be triggered by an authenticated user. Affected products and firmware ranges include: D3600 < 1.0.0.76, D6000 < 1.0.0.76, D6200 < 1.1.00.36, D7000 < 1.0.1.70, EX6200v2 < 1.0.1.78, EX7000 < 1.0.1.78, EX800...
CVE-2020-35788
CVE-2020-35788 concerns NETGEAR WAC104 wireless access points. The vulnerability is described as a buffer overflow exploitable by an authenticated user, affecting devices prior to version 1.0.4.13. The primary public source describes the issue/cvss metrics and references a Netgear security adviso...
CVE-2020-35788
NETGEAR WAC104 devices before 1.0.4.13 are affected by a buffer overflow by an authenticated user...
CVE-2020-35789
NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user...
CVE-2020-35789
CVE-2020-35789 affects NETGEAR NMS300 devices prior to 1.6.0.27. An authenticated user can perform command injection, per multiple connected documents. The vulnerability is described as a command injection issue with authenticated access; there are no details on exploit vectors beyond authenticat...
CVE-2020-35790
CVE-2020-35790 affects certain NETGEAR routers: D7800 (≤1.0.1.56), R7800 (≤1.0.2.68), R8900 (≤1.0.4.26), and R9000 (≤1.0.4.26). The issue is a command injection by an authenticated user. CVSS details are provided (v3.1: AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H; base score 6.8; CVSS2 base 5.2). No expl...
CVE-2020-35790
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 before 1.0.4.26, and R9000 before 1.0.4.26...
CVE-2020-35791
CVE-2020-35791 affects certain NETGEAR routers (R7800 < 1.0.2.68, R8900 < 1.0.5.2, R9000
CVE-2020-35791
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.68, R8900 before 1.0.5.2, and R9000 before 1.0.5.2...
CVE-2020-35792
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7500v2 before 1.0.3.48, R8900 before 1.0.5.2, R9000 before 1.0.5.2, and R7800 before 1.0.2.68...
CVE-2020-35792
CVE-2020-35792 affects certain NETGEAR routers: R7500v2 ≤ 1.0.3.48, R8900 ≤ 1.0.5.2, R9000 ≤ 1.0.5.2, and R7800 ≤ 1.0.2.68. Reported issue is command injection exploitable by an authenticated user. The Red Hat and NVD records corroborate these device/version ranges; no exploitation details are pr...
CVE-2020-35793
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.58, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.5.2, and R9000 before 1.0.5.2...
CVE-2020-35793
CVE-2020-35793 affects NETGEAR routers (D7800; R7500v2; R7800; R8900; R9000) with an authenticated-user command-injection vulnerability. The cited advisories state affected versions: D7800 < 1.0.1.58, R7500v2 < 1.0.3.46, R7800 < 1.0.2.74, R8900 < 1.0.5.2, and R9000