CVE-2018-21153

The CVE-2018-21153 entry describes a pre-auth buffer overflow affecting multiple NETGEAR devices. Affected products include D7800 (pre-1.0.1.34), DM200 (pre-1.0.0.50), EX-series (EX2700, EX6100v2, EX6150v2, EX6200v2, EX6400, EX7300, EX8000) with various pre-patch version thresholds, plus R6100, R...

CVE-2018-21152

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, R7500v2 before 1.0.3.26, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR4300v2 before 1.0.0.54, and WNDR4500v3 before 1.0.0.54...

CVE-2018-21152

CVE-2018-21152 affects multiple NETGEAR devices via an authenticated-command-injection flaw. The initial and connected records specify affected models and firmware versions: D7800 prior to 1.0.1.34; R7500v2 prior to 1.0.3.26; R7800 prior to 1.0.2.42; R8900 prior to 1.0.3.10; R9000 prior to 1.0.3....

CVE-2018-21149

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.50, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR3700v4 before 1.0.2.96...

CVE-2018-21149

CVE-2018-21149 affects NETGEAR devices (various gateways/routers) via a stack-based buffer overflow exploitable by an authenticated user. Affected products/versions include D7800 <1.0.1.34, DM200 <1.0.0.50, R6100 <1.0.1.22, R7500 <1.0.0.122, R7800 <1.0.2.42, R8900 <1.0.3.10, R90...

CVE-2018-21100

CVE-2018-21100 concerns NETGEAR R7800 routers pre-1.0.2.60, vulnerable to a command injection by an authenticated user. The NVD entry lists CVSS-3.1/8.0 (Adjacent network, Low complexity, Privileges Required: Low, No user interaction) with high impacts on confidentiality, integrity, and availabil...

CVE-2018-21100

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user...

CVE-2018-21099

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user...

CVE-2018-21099

CVE-2018-21099 affects NETGEAR R7800 routers, with the vulnerability stemming from a command injection flaw that can be exploited by an authenticated user. Affected condition: devices running firmware prior to 1.0.2.60 . Reported impacts cover confidentiality, integrity, and availability when exp...

CVE-2018-21098

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user...

CVE-2018-21098

CVE-2018-21098: NETGEAR R7800 devices with firmware older than 1.0.2.60 are vulnerable to command injection by an authenticated user. The issue affects the router’s ability to execute commands in contexts controlled by the attacker, impacting confidentiality, integrity and availability as indicat...

CVE-2018-21096

Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1....

CVE-2018-21095

Certain NETGEAR devices are affected by stored XSS. This affects SRR60 before 2.2.1.210 and SRS60 before 2.2.1.210...

CVE-2018-21097

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before...

CVE-2018-21096

Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1....

CVE-2018-21097

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before...

CVE-2018-21095

Certain NETGEAR devices are affected by stored XSS. This affects SRR60 before 2.2.1.210 and SRS60 before 2.2.1.210...

Cross site request forgery (csrf)

Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1....

Cross site scripting

Certain NETGEAR devices are affected by stored XSS. This affects SRR60 before 2.2.1.210 and SRS60 before 2.2.1.210...

Stack overflow

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before...