CVE-2020-35794

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBS40V before 2.6.1.4, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25...

CVE-2020-35797

The CVE-2020-35797 entry concerns NETGEAR NMS300 devices (pre-1.6.0.27). The vulnerability is a command injection flaw that can be exploited by an unauthenticated attacker. The available connected records confirm the affected product/version range and the root cause being command injection, with ...

CVE-2020-35797

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an unauthenticated attacker...

CVE-2020-35798

CVE-2020-35798 covers unauthenticated command injection affecting a wide range of NETGEAR devices. Affected models and firmware versions include R6400v2 before 1.0.4.84, R6700v3 before 1.0.4.84, R6900P before 1.3.2.124, R7000 before 1.0.11.100, R7000P before 1.3.2.124, R7800 before 1.0.2.74, R785...

CVE-2020-35798

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700v3 before 1.0.4.84, R6900P before 1.3.2.124, R7000 before 1.0.11.100, R7000P before 1.3.2.124, R7800 before 1.0.2.74, R7850 before 1.0.5.60, R7900 before 1.0.4.26,...

CVE-2020-35799

CVE-2020-35799 affects a wide range of NETGEAR devices (D3600, D6000, D6200, D7000, D7800, DM200, EX2700, EX6100v2, EX6150v2, EX6200v2, EX6400, EX7300, EX8000, JR6150, PR2000, R6020, R6050, R6080, R6120, R6220, R6230, R6260, R6700v2, R6800, R6900v2, R7500v2, R7800, R8900, R9000, RBK/RBR/RBS famil...

CVE-2020-35799

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.78, D6200 before 1.1.00.32, D7000 before 1.0.1.68, D7800 before 1.0.1.56, DM200 before 1.0.0.61, EX2700 before 1.0.1.52, EX6100v2 before...

CVE-2020-35801

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. A TFTP server was found to be active by default. It allows remote authenticated users to...

CVE-2020-35801

Affected devices: NETGEAR ProSAFE switches JGS516PE, JGS524Ev2, JGS524PE, and GS116Ev2 (pre-2.6.0.48). Description: incorrect configuration of security settings leaves a TFTP server active by default, allowing remote authenticated users to update the switch firmware. Impact: potential unauthorize...

CVE-2020-35802

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects CBR40 before 2.5.0.14, RBW30 before 2.6.1.4, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before...

CVE-2020-35802

CVE-2020-35802 affects NETGEAR devices (CBR40 before 2.5.0.14; RBW30 before 2.6.1.4; RAX75/RAX80 before 1.0.3.102; RBK752/RBR750/RBS750 before 3.2.16.6; RBK852/RBR850/RBS850 before 3.2.16.6; RBK842/RBR840/RBS840 before 3.2.16.6; RBS40V before 2.6.1.4) with disclosure of sensitive information. Thi...

CVE-2020-35803

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.46, R6080 before 1.0.0.46, R6120 before 1.0.0.72, R6220 before 1.1.0.100, R6230 before 1.1.0.100, R6260 before 1.1.0.76, R6700v2 before...

CVE-2020-35803

The CVE-2020-35803 entry describes an information-disclosure issue in multiple NETGEAR routers. Affected devices and minimum versions (per sources) include: D6200 < 1.1.00.40; D7000 < 1.0.1.78; R6020 < 1.0.0.46; R6080 < 1.0.0.46; R6120 < 1.0.0.72; R6220 < 1.1.0.100; R6230 < 1...

CVE-2020-35804

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D7800 before 1.0.1.58, R7800 before 1.0.2.74, R8900 before 1.0.5.18, R9000 before 1.0.5.18, and XR700 before 1.0.1.34...

CVE-2020-35804

CVE-2020-35804 affects several NETGEAR routers via partial disclosure of sensitive information. Affected devices and firmware versions are D7800 prior to 1.0.1.58, R7800 prior to 1.0.2.74, R8900 prior to 1.0.5.18, R9000 prior to 1.0.5.18, and XR700 prior to 1.0.1.34. The initial sources indicate ...

CVE-2020-35805

CVE-2020-35805 corresponds to a stored cross-site scripting flaw affecting multiple NETGEAR routers and Orbi Wi‑Fi systems. Affected devices include D7800 (<1.0.1.56), R7500v2 (<1.0.3.46), R7800 (<1.0.2.74), R8900 (<1.0.4.28), R9000 (<1.0.4.28), RAX120 (<1.0.0.78), RBK/RBR/RBS s...

CVE-2020-35805

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30,...

CVE-2020-35806

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, RAX120 before 1.0.0.78, RBK22 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30,...

CVE-2020-35806

CVE-2020-35806 is a stored cross-site scripting vulnerability in NETGEAR devices. Affected models and firmware ranges include D7800 (<1.0.1.56), R7500v2 (<1.0.3.46), R7800 (<1.0.2.68), RAX120 (<1.0.0.78), RBK/RBR/RBS series (<2.3.5.26 or 2.3.5.30 depending on model), and WN3000RPv2 (

CVE-2020-35807

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, RAX120 before 1.0.0.78, RBK22 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK50 before 2.3.5.30,...