Buffer overflow

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, and R9000 before 1.0.2.52...

Design/Logic Flaw

The NETGEAR Insight application before 2.42 for Android and iOS is affected by password mismanagement...

CVE-2017-18859

CVE-2017-18859 affects NETGEAR cable modems/gateways (C6300, CM400, CM700, CMD31T) with slowdown/stoppage of network access reported prior to 2017-05-30. The available data from the CVE entry notes the affected models and a timeline but does not provide root-cause details, exploit descriptions, o...

CVE-2017-18859

Certain NETGEAR devices are affected by slowdown/stoppage. This affects C6300 before 2017-05-30, CM400 before 2017-05-30, CM700 before 2017-05-30, and CMD31T before 2017-05-30...

CVE-2017-18858

Certain NETGEAR devices are affected by command execution. This affects M4200-10MG-POE+ 12.0.2.11 and earlier, M4300-28G 12.0.2.11 and earlier, M4300-52G 12.0.2.11 and earlier, M4300-28G-POE+ 12.0.2.11 and earlier, M4300-52G-POE+ 12.0.2.11 and earlier, M4300-8X8F 12.0.2.11 and earlier, M4300-12X1...

CVE-2017-18858

CVE-2017-18858 affects certain NETGEAR devices, specifically M4200-10MG-POE+ (12.0.2.11 and earlier), M4300-28G (12.0.2.11 and earlier), M4300-52G (12.0.2.11 and earlier), M4300-28G-POE+ (12.0.2.11 and earlier), M4300-52G-POE+ (12.0.2.11 and earlier), M4300-8X8F (12.0.2.11 and earlier), M4300-12X...

CVE-2017-18857

The CVE-2017-18857 issue affects the NETGEAR Insight mobile app for Android and iOS prior to version 2.42, caused by password mismanagement in the app. The vulnerability is documented with a high to critical impact (CVSS v3.1: 9.8, CRITICAL; CVSS v2: 7.5, HIGH). Affected product: NETGEAR Insight ...

CVE-2017-18857

The NETGEAR Insight application before 2.42 for Android and iOS is affected by password mismanagement...

CVE-2018-21226

CVE-2018-21226 affects certain NETGEAR devices (JNR1010v2, JWNR2010v5, WNR1000v4, WNR2020, WNR2050) with an authentication bypass vulnerability. Affected software versions are prior to 1.1.0.48. The CVSS context shows high impact (C/H/I/H/A/H) with adjacent access, low complexity, no privileges r...

CVE-2018-21226

Certain NETGEAR devices are affected by authentication bypass. This affects JNR1010v2 before 1.1.0.48, JWNR2010v5 before 1.1.0.48, WNR1000v4 before 1.1.0.48, WNR2020 before 1.1.0.48, and WNR2050 before 1.1.0.48...

CVE-2018-21225

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, R6700 before 1.0.1.30, R6700v2 before 1.2.0.16, R6800 before 1.2.0.16, R6900 before 1.0.1.30, R6900P before 1.2.0.22, R6900v2 befor...

CVE-2018-21225

CVE-2018-21225 affects a range of NETGEAR routers (D7000, D7800, D8500, R6700/R6700v2/R6800/R6900/R6900P/R6900v2/R7000/R7000P/R7500v2/R7800/R8300/R8500/R9000) with specific firmware versions listed in the public advisories. The vulnerability is a command injection that can be exploited by an auth...

CVE-2018-21224

CVE-2018-21224 affects certain NETGEAR routers: D3600 (pre 1.0.0.67), D6000 (pre 1.0.0.67), D7800 (pre 1.0.1.30), R6100 (pre 1.0.1.20), R7500 (pre 1.0.0.118), R7500v2 (pre 1.0.3.24), R9000 (pre 1.0.2.52), WNDR3700v4 (pre 1.0.2.96), WNDR4300 (pre 1.0.2.98), WNDR4300v2 (pre 1.0.0.50), WNDR4500v3 (p...

CVE-2018-21224

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96,...

CVE-2018-21223

The CVE-2018-21223 entry pertains to a pre-auth, remote buffer overflow in certain NETGEAR routers/gateways. The affected devices and firmware ranges are: D3600 prior to 1.0.0.67; D6000 prior to 1.0.0.67; D7800 prior to 1.0.1.30; R6100 prior to 1.0.1.20; R7500 prior to 1.0.0.118; R7500v2 prior to...

CVE-2018-21223

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96,...

CVE-2018-21222

This CVE (CVE-2018-21222) describes a buffer overflow in certain NETGEAR devices that is exploitable by an unauthenticated attacker. Affected models and versions include D3600 before 1.0.0.67; D6000 before 1.0.0.67; D7800 before 1.0.1.30; R6100 before 1.0.1.20; R7500 before 1.0.0.118; R7500v2 bef...

CVE-2018-21222

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96,...

CVE-2018-21221

The CVE-2018-21221 entry describes a pre-auth buffer overflow affecting NETGEAR D3600 (<= 1.0.0.66), D6000 (<= 1.0.0.66), and R9000 (

CVE-2018-21221

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, and R9000 before 1.0.2.52...