NETGEAR R7450 Access Control Vulnerability

The NETGEAR R7450 is a router from Netgear, Inc. A hardware device that connects two or more networks and acts as a gateway between networks.Netgear R7450 1.2.0.621.0.1 routers is vulnerable to an access control error that lacks proper access control and could be exploited by an attacker to...

CVE-2020-27873: Improper Access Control

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.621.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API endpoint, which listens on TCP port 8...

NETGEAR Orbi Tri-Band Business Privilege Escalation

The vulnerabilities of the microprogrammed software of the NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite and the Pro Tri-Band Business WiFi Router SRR60 models, as well as the microprogrammed signal booster software for outdoor use RBS50Y, are related to the use of pre-installed credential...

NETGEAR Integrated Software Arbitrary Command Execution

The vulnerability in NETGEAR’s embedded software exists because measures to neutralize specific components have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

NETGEAR Integrated Software Arbitrary Command Execution

The vulnerability in NETGEAR’s embedded software exists because measures to neutralize specific components have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

NETGEAR Arbitrary Command Execution

The vulnerability in NETGEAR’s embedded software exists because measures are not taken to neutralize the special elements used in the operating system command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

NETGEAR Integrated Software Arbitrary Command Execution

The vulnerability in NETGEAR’s embedded software exists because measures to neutralize specific components have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

NETGEAR Embedded Software Command Injection

The vulnerability in NETGEAR’s embedded software exists because measures are not taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

NETGEAR Arbitrary Command Execution

The vulnerability in NETGEAR’s embedded software exists because measures are not taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

NETGEAR Embedded Software Command Injection

The vulnerability in NETGEAR’s embedded software exists because measures are not taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2021-11435

Name of the Vulnerable Software and Affected Versions: NETGEAR R7450 version 1.2.0.62 1.0.1 Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 routers. Authentication is not required to exploit this issue. The...

NETGEAR R7450 Password Recovery External Control of Critical State Data Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the minihttpd service, which listens on TCP port 80 by default. The issue...

NETGEAR R7450 SOAP API RecoverAdminPassword Improper Access Control Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API endpoint, which listens on TCP port 80 by default...

PT-2021-11434

Name of the Vulnerable Software and Affected Versions: NETGEAR R7450 version 1.2.0.62 1.0.1 Description: This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 routers. The specific flaw exists within the mini httpd service, which listens ...

Netgear Router WNR2000v3 Has Denial of Service Vulnerability

The WNR2000v3 is a router from Netgear. A denial of service vulnerability exists in Netgear router WNR2000v3, which can be exploited by attackers to cause a denial of service attack...

Denial of Service Vulnerability in Netgear AC1750 R6400v2

The Netgear AC1750 R6400v2 is a Wi-Fi router. A denial of service vulnerability exists in the Netgear AC1750 R6400v2. An attacker can exploit the vulnerability to cause a denial of service on the target router and its upper tier operator's router by sending a carefully constructed packet to a...

CVE-2020-35839

Certain NETGEAR devices are affected by Stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, XR500 before 2.3.2.56, XR700 before 1.0.1.10, and RAX120 before 1.0.0.78...

CVE-2020-35830

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30,...

CVE-2020-35841

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before...

CVE-2020-35833

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30,...