CVE-2020-35785

NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication aka PSV-2020-0363, PSV-2020-0364, and PSV-2020-0365...

CVE-2020-35786

The CVE-2020-35786 issue affects NETGEAR R7800 devices running versions prior to 1.0.2.74, where a buffer overflow can be triggered by an authenticated user. The vulnerability is described as a buffer overflow in these devices, indicating potential impact on availability (per NVD metrics) and the...

CVE-2020-35786

NETGEAR R7800 devices before 1.0.2.74 are affected by a buffer overflow by an authenticated user...

CVE-2020-35787

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.36, D7000 before 1.0.1.70, EX6200v2 before 1.0.1.78, EX7000 before 1.0.1.78, EX8000 before 1.0.1.186, JR6150 before 1.0.1.18, PR2000...

CVE-2020-35787

CVE-2020-35787 is a buffer overflow in a range of NETGEAR devices that can be triggered by an authenticated user. Affected products and firmware ranges include: D3600 < 1.0.0.76, D6000 < 1.0.0.76, D6200 < 1.1.00.36, D7000 < 1.0.1.70, EX6200v2 < 1.0.1.78, EX7000 < 1.0.1.78, EX800...

CVE-2020-35788

CVE-2020-35788 concerns NETGEAR WAC104 wireless access points. The vulnerability is described as a buffer overflow exploitable by an authenticated user, affecting devices prior to version 1.0.4.13. The primary public source describes the issue/cvss metrics and references a Netgear security adviso...

CVE-2020-35788

NETGEAR WAC104 devices before 1.0.4.13 are affected by a buffer overflow by an authenticated user...

CVE-2020-35789

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user...

CVE-2020-35789

CVE-2020-35789 affects NETGEAR NMS300 devices prior to 1.6.0.27. An authenticated user can perform command injection, per multiple connected documents. The vulnerability is described as a command injection issue with authenticated access; there are no details on exploit vectors beyond authenticat...

CVE-2020-35790

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 before 1.0.4.26, and R9000 before 1.0.4.26...

CVE-2020-35790

CVE-2020-35790 affects certain NETGEAR routers: D7800 (≤1.0.1.56), R7800 (≤1.0.2.68), R8900 (≤1.0.4.26), and R9000 (≤1.0.4.26). The issue is a command injection by an authenticated user. CVSS details are provided (v3.1: AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H; base score 6.8; CVSS2 base 5.2). No expl...

CVE-2020-35791

CVE-2020-35791 affects certain NETGEAR routers (R7800 < 1.0.2.68, R8900 < 1.0.5.2, R9000

CVE-2020-35791

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.68, R8900 before 1.0.5.2, and R9000 before 1.0.5.2...

CVE-2020-35792

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7500v2 before 1.0.3.48, R8900 before 1.0.5.2, R9000 before 1.0.5.2, and R7800 before 1.0.2.68...

CVE-2020-35792

CVE-2020-35792 affects certain NETGEAR routers: R7500v2 ≤ 1.0.3.48, R8900 ≤ 1.0.5.2, R9000 ≤ 1.0.5.2, and R7800 ≤ 1.0.2.68. Reported issue is command injection exploitable by an authenticated user. The Red Hat and NVD records corroborate these device/version ranges; no exploitation details are pr...

CVE-2020-35793

CVE-2020-35793 affects NETGEAR routers (D7800; R7500v2; R7800; R8900; R9000) with an authenticated-user command-injection vulnerability. The cited advisories state affected versions: D7800 < 1.0.1.58, R7500v2 < 1.0.3.46, R7800 < 1.0.2.74, R8900 < 1.0.5.2, and R9000

CVE-2020-35793

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.58, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.5.2, and R9000 before 1.0.5.2...

CVE-2020-35794

CVE-2020-35794 affects several NETGEAR devices (RBS40V < 2.6.1.4; RBK752, RBR750, RBS750, RBK852, RBR850, RBS850

CVE-2020-35794

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBS40V before 2.6.1.4, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25...

CVE-2020-35797

The CVE-2020-35797 entry concerns NETGEAR NMS300 devices (pre-1.6.0.27). The vulnerability is a command injection flaw that can be exploited by an unauthenticated attacker. The available connected records confirm the affected product/version range and the root cause being command injection, with ...