CVE-2020-35797

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an unauthenticated attacker...

CVE-2020-35798

CVE-2020-35798 covers unauthenticated command injection affecting a wide range of NETGEAR devices. Affected models and firmware versions include R6400v2 before 1.0.4.84, R6700v3 before 1.0.4.84, R6900P before 1.3.2.124, R7000 before 1.0.11.100, R7000P before 1.3.2.124, R7800 before 1.0.2.74, R785...

CVE-2020-35798

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700v3 before 1.0.4.84, R6900P before 1.3.2.124, R7000 before 1.0.11.100, R7000P before 1.3.2.124, R7800 before 1.0.2.74, R7850 before 1.0.5.60, R7900 before 1.0.4.26,...

CVE-2020-35799

CVE-2020-35799 affects a wide range of NETGEAR devices (D3600, D6000, D6200, D7000, D7800, DM200, EX2700, EX6100v2, EX6150v2, EX6200v2, EX6400, EX7300, EX8000, JR6150, PR2000, R6020, R6050, R6080, R6120, R6220, R6230, R6260, R6700v2, R6800, R6900v2, R7500v2, R7800, R8900, R9000, RBK/RBR/RBS famil...

CVE-2020-35799

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.78, D6200 before 1.1.00.32, D7000 before 1.0.1.68, D7800 before 1.0.1.56, DM200 before 1.0.0.61, EX2700 before 1.0.1.52, EX6100v2 before...

CVE-2020-35801

Affected devices: NETGEAR ProSAFE switches JGS516PE, JGS524Ev2, JGS524PE, and GS116Ev2 (pre-2.6.0.48). Description: incorrect configuration of security settings leaves a TFTP server active by default, allowing remote authenticated users to update the switch firmware. Impact: potential unauthorize...

CVE-2020-35801

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. A TFTP server was found to be active by default. It allows remote authenticated users to...

CVE-2020-35802

CVE-2020-35802 affects NETGEAR devices (CBR40 before 2.5.0.14; RBW30 before 2.6.1.4; RAX75/RAX80 before 1.0.3.102; RBK752/RBR750/RBS750 before 3.2.16.6; RBK852/RBR850/RBS850 before 3.2.16.6; RBK842/RBR840/RBS840 before 3.2.16.6; RBS40V before 2.6.1.4) with disclosure of sensitive information. Thi...

CVE-2020-35802

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects CBR40 before 2.5.0.14, RBW30 before 2.6.1.4, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before...

CVE-2020-35803

The CVE-2020-35803 entry describes an information-disclosure issue in multiple NETGEAR routers. Affected devices and minimum versions (per sources) include: D6200 < 1.1.00.40; D7000 < 1.0.1.78; R6020 < 1.0.0.46; R6080 < 1.0.0.46; R6120 < 1.0.0.72; R6220 < 1.1.0.100; R6230 < 1...

CVE-2020-35803

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.46, R6080 before 1.0.0.46, R6120 before 1.0.0.72, R6220 before 1.1.0.100, R6230 before 1.1.0.100, R6260 before 1.1.0.76, R6700v2 before...

CVE-2020-35804

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D7800 before 1.0.1.58, R7800 before 1.0.2.74, R8900 before 1.0.5.18, R9000 before 1.0.5.18, and XR700 before 1.0.1.34...

CVE-2020-35804

CVE-2020-35804 affects several NETGEAR routers via partial disclosure of sensitive information. Affected devices and firmware versions are D7800 prior to 1.0.1.58, R7800 prior to 1.0.2.74, R8900 prior to 1.0.5.18, R9000 prior to 1.0.5.18, and XR700 prior to 1.0.1.34. The initial sources indicate ...

CVE-2020-35805

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30,...

CVE-2020-35805

CVE-2020-35805 corresponds to a stored cross-site scripting flaw affecting multiple NETGEAR routers and Orbi Wi‑Fi systems. Affected devices include D7800 (<1.0.1.56), R7500v2 (<1.0.3.46), R7800 (<1.0.2.74), R8900 (<1.0.4.28), R9000 (<1.0.4.28), RAX120 (<1.0.0.78), RBK/RBR/RBS s...

CVE-2020-35806

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, RAX120 before 1.0.0.78, RBK22 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30,...

CVE-2020-35806

CVE-2020-35806 is a stored cross-site scripting vulnerability in NETGEAR devices. Affected models and firmware ranges include D7800 (<1.0.1.56), R7500v2 (<1.0.3.46), R7800 (<1.0.2.68), RAX120 (<1.0.0.78), RBK/RBR/RBS series (<2.3.5.26 or 2.3.5.30 depending on model), and WN3000RPv2 (

CVE-2020-35807

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, RAX120 before 1.0.0.78, RBK22 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK50 before 2.3.5.30,...

CVE-2020-35807

CVE-2020-35807 is a stored cross-site scripting vulnerability affecting several NETGEAR routers. Affected models and firmware ranges are listed (D7800 < 1.0.1.56, R7800 < 1.0.2.68, RAX120 < 1.0.0.78, RBK22/RBR20/RBS20 < 2.3.5.26, RBK40/RBR40/RBS40 < 2.3.5.30, RBK50/RBR50/RBS50 <...

CVE-2020-35808

The CVE-2020-35808 entry concerns stored cross-site scripting affecting multiple NETGEAR devices. Affected models and firmware versions are D6100 (before 1.0.0.63), DM200 (before 1.0.0.61), R7800 (before 1.0.2.52), R8900 (before 1.0.4.12), R9000 (before 1.0.4.12), WN3000RPv2 (before 1.0.0.68), an...