CVE-2018-21170

CVE-2018-21170 affects multiple NETGEAR devices via a stack-based buffer overflow exploitable by an unauthenticated attacker. The connected sources specify affected models and minimum/affected firmware versions: EX2700 < 1.0.1.28, R7800 < 1.0.2.40, WN2000RPTv3 < 1.0.1.20, WN3000RPv3 <...

CVE-2018-21169

CVE-2018-21169 affects NETGEAR devices due to incorrect configuration of security settings. The vulnerability applies to multiple models (e.g., D7000, D7800, D8500, JNR1010v2, JR6150, JWNR2010v5, PR2000, R6050, R6220, R6400, R6700v2, R6800, R6900v2, R7300DST, R7500, R7500v2, R7800, R7900P, R8000P...

CVE-2018-21169

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7000 before 2018-03-01, D7800 before 1.0.1.31, D8500 before 1.0.3.36, JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.14, JWNR2010v5 before 1.1.0.46, PR2000 before 2018-03-01, R6050 before 1.0.1.14,...

CVE-2018-21168

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D7000 before 1.0.1.52, D7800 before 1.0.1.31, D8500 before 1.0.3.36, JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.14, JWNR2010v5 before 1.1.0.46, PR2000 before 1.0.0.20, R6050 before 1.0.1.14, R6220 before...

CVE-2018-21168

CVE-2018-21168 affects a broad set of NETGEAR devices (D7000, D7800, D8500, JNR1010v2, JR6150, JWNR2010v5, PR2000, R6050, R6220, R6400, R6400v2, R6700v2, R6800, R6900v2, R7300DST, R7500, R7500v2, R7800, R7900P, R8000P, R8300, R8500, R9000, WNDR3700v4/v5, WNDR4300/v2, WNDR4500v3, WNR1000v4, WNR202...

CVE-2018-21167

CVE-2018-21167 describes a stored XSS vulnerability affecting a range of NETGEAR devices (routers/gateways) where the web UI may process untrusted content. Affected models include D6100 (before 1.0.0.57), DM200 (before 1.0.0.50), EX2700 (before 1.0.1.32), EX6100v2 (before 1.0.1.70), EX6150v2 (bef...

CVE-2018-21167

Certain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.57, DM200 before 1.0.0.50, EX2700 before 1.0.1.32, EX6100v2 before 1.0.1.70, EX6150v2 before 1.0.1.70, EX6200v2 before 1.0.1.62, EX6400 before 1.0.1.78, EX7300 before 1.0.1.78, EX8000 before 1.0.0.114, R6100 befor...

CVE-2018-21159

NETGEAR ReadyNAS devices before 6.9.3 are affected by incorrect configuration of security settings...

CVE-2018-21159

CVE-2018-21159 affects NETGEAR ReadyNAS OS prior to 6.9.3, caused by a misconfiguration of security settings. The vulnerability is tied to ReadyNAS devices, with the fix available in version 6.9.3. Exploitation details are not provided in the sources; no publicly disclosed exploit information is ...

CVE-2018-21158

NETGEAR R7800 devices before 1.0.2.46 are affected by incorrect configuration of security settings...

CVE-2018-21158

The CVE-2018-21158 issue affects NETGEAR R7800 routers. Affected firmware includes versions prior to 1.0.2.46, with the vulnerability stemming from incorrect configuration of security settings. The core impact is high if exploited, as confidentiality, integrity, and availability could be compromi...

CVE-2018-21157

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.28, R6700 before 1.0.1.44, R6900 before 1.0.1.44, R7000 before 1.0.9.28, R7500v2 before 1.0.3.24, R7800 before 1.0.2.38, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.50, and...

CVE-2018-21157

CVE-2018-21157 affects several NETGEAR devices via command injection by an authenticated user. Affected models and firmware ranges include D7800 prior to 1.0.1.28; R6700 prior to 1.0.1.44; R6900 prior to 1.0.1.44; R7000 prior to 1.0.9.28; R7500v2 prior to 1.0.3.24; R7800 prior to 1.0.2.38; R9000 ...

CVE-2018-21156

CVE-2018-21156 is a buffer overflow vulnerability in multiple NETGEAR devices that can be triggered by an authenticated user. The description applies to a long list of models (e.g., D6220, D6400, D7000v2, D8500, DGN2200v4/Bv4, EX-series like EX3700/3800/6000/6100/6120/6130/6150/6200, R-series inc...

CVE-2018-21156

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.38, D6400 before 1.0.0.74, D7000v2 before 1.0.0.74, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.102, DGN2200Bv4 before 1.0.0.102, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70,...

CVE-2018-21155

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.52, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7500v2 before 1.0.3.26, R7800 before 1.0.2.42, R8900 before 1.0.4.2, R9000 before 1.0.3.16, WNDR4300 before 1.0.2.98, WNDR4300v2 before...

CVE-2018-21155

Consolidated sources confirm CVE-2018-21155 is a stored XSS in NETGEAR devices. Affected models and before-version cutoffs include D7800 < 1.0.1.34, DM200 < 1.0.0.52, R6100 < 1.0.1.22, R7500 < 1.0.0.122, R7500v2 < 1.0.3.26, R7800 < 1.0.2.42, R8900 < 1.0.4.2, R9000 < 1.0.3....

CVE-2018-21154

CVE-2018-21154 affects several NETGEAR devices. An authenticated user can perform command injection via components handling OS command construction, with affected models/versions including D7800 < 1.0.1.34, DM200 < 1.0.0.50, R6100 < 1.0.1.22, R7500 < 1.0.0.122, R7500v2 < 1.0.3.26, ...

CVE-2018-21154

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.50, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7500v2 before 1.0.3.26, and R7800 before 1.0.2.42...

CVE-2018-21153

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.50, EX2700 before 1.0.1.32, EX6100v2 before 1.0.1.70, EX6150v2 before 1.0.1.70, EX6200v2 before 1.0.1.62, EX6400 before 1.0.1.78, EX7300 before 1.0.1.62...