CVE-2020-35838

CVE-2020-35838 is a stored XSS vulnerability in certain NETGEAR routers. Affected devices and fixed/blocked versions include: D7800 prior to 1.0.1.56, R7500v2 prior to 1.0.3.46, R7800 prior to 1.0.2.74, R8900 prior to 1.0.4.28, R9000 prior to 1.0.4.28, RAX120 prior to 1.0.0.78, XR500 prior to 2.3...

CVE-2020-35839

NETGEAR devices D7800 (before 1.0.1.56), R7500v2 (before 1.0.3.46), R7800 (before 1.0.2.68), R8900 (before 1.0.4.28), R9000 (before 1.0.4.28), XR500 (before 2.3.2.56), XR700 (before 1.0.1.10), and RAX120 (before 1.0.0.78) are affected by a Stored XSS vulnerability (CVE-2020-35839). The provided d...

CVE-2020-35839

Certain NETGEAR devices are affected by Stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, XR500 before 2.3.2.56, XR700 before 1.0.1.10, and RAX120 before 1.0.0.78...

CVE-2020-35840

CVE-2020-35840 is a stored XSS vulnerability in multiple NETGEAR routers (e.g., D6200, D7000, JNR1010v2, JR6150, JWNR2010v5, R60x/R62x/R6260 series, R6050/R6080, WNR1000v4, WNR2020, WNR2050, etc.) across various vendor firmware versions listed in the description. The root cause is unsanitized inp...

CVE-2020-35840

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before...

CVE-2020-35841

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before...

CVE-2020-35841

CVE-2020-35841 is a stored XSS vulnerability in NETGEAR devices. Affected are D6200 < 1.1.00.38, D7000 < 1.0.1.78, JNR1010v2 < 1.1.0.62, JR6150 < 1.0.1.24, JWNR2010v5 < 1.1.0.62, R6020 < 1.0.0.42, R6050 < 1.0.1.24, R6080 < 1.0.0.42, R6120 < 1.0.0.66, R6220 < 1.1.0.10...

CVE-2020-35842

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before...

CVE-2020-35842

CVE-2020-35842 describes a stored XSS vulnerability in NETGEAR devices across multiple models (D6200, D7000, JNR1010v2, JR6150, JWNR2010v5, R6020, R6050, R6080, R6120, R6220, R6260, WNR1000v4, WNR2020, WNR2050) affecting specific firmware versions listed in the initial entry. Connected sources co...

CVE-2020-35795

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D7800 before 1.0.1.58, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX7500...

CVE-2020-35795

CVE-2020-35795 affects a wide range of NETGEAR devices (e.g., AC2100/AC2400/AC2600, CBK40/CBR40, D7800, EAX series, EX7500, MK62, MR60, MS60, R6120/6220/6230/6260/6330/6350/6400/6400v2/6700/6700v2/v3/6800/6850/6900P/6900/v2/7000/7000P/7200/7350/7400/7450/7800/7850/7900/8900/9000 and R-series/RAX/...

CVE-2020-35796

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, DC112A before 1.0.0.48, DGN2200v4 before 1.0.0.114, EAX20 before 1.0.0.36,...

CVE-2020-35796

CVE-2020-35796 affects a broad set of NETGEAR devices (list includes CBR40, D6220, D6400, D7000v2, D8500, DC112A, DGN2200v4, EAX20/80, EX3700–EX7500, R-Series, XR300, etc.) with a pre-auth buffer overflow vulnerability. Root cause: improper handling/bounds checking leads to overflow when processi...

CVE-2020-35800

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D6000 before 1.0.0.80, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2...

CVE-2020-35800

CVE-2020-35800 affects a wide range of NETGEAR devices (e.g., AC2100/AC2400/AC2600, CBK40/CBR40, D6000/D6220/D6400/D7000v2/D7800/D8500/DC112A, EX-series, R-series, etc.). The root issue is an incorrect security settings configuration across these models, leading to a security misconfiguration. Th...

PT-2020-17423

Name of the Vulnerable Software and Affected Versions NETGEAR JGS516PE versions prior to 2.6.0.48 NETGEAR JGS524Ev2 versions prior to 2.6.0.48 NETGEAR JGS524PE versions prior to 2.6.0.48 NETGEAR GS116Ev2 versions prior to 2.6.0.48 Description The issue is related to a lack of access control at th...

PT-2020-17424

Name of the Vulnerable Software and Affected Versions NETGEAR JGS516PE versions prior to 2.6.0.48 NETGEAR GS116Ev2 versions prior to 2.6.0.48 NETGEAR JGS524Ev2 versions prior to 2.6.0.48 NETGEAR JGS524PE versions prior to 2.6.0.48 Description The issue is related to a lack of access control at th...

PT-2020-17439

Name of the Vulnerable Software and Affected Versions NETGEAR D3600 versions 1.0.0.0 through 1.0.0.75 NETGEAR D6000 versions 1.0.0.0 through 1.0.0.77 NETGEAR D6200 versions 1.0.0.0 through 1.1.00.31 NETGEAR D7000 versions 1.0.0.0 through 1.0.1.67 NETGEAR D7800 versions 1.0.0.0 through 1.0.1.55...

PT-2020-17431

Name of the Vulnerable Software and Affected Versions NETGEAR R7800 versions prior to 1.0.2.68 NETGEAR R8900 versions prior to 1.0.5.2 NETGEAR R9000 versions prior to 1.0.5.2 Description The issue is related to command injection by an authenticated user. Recommendations For NETGEAR R7800 versions...

PT-2020-17442

Name of the Vulnerable Software and Affected Versions CBR40 versions before 2.5.0.14 RBW30 versions before 2.6.1.4 RAX75 versions before 1.0.3.102 RAX80 versions before 1.0.3.102 RBK752 versions before 3.2.16.6 RBR750 versions before 3.2.16.6 RBS750 versions before 3.2.16.6 RBK852 versions before...