14729 matches found
Cross-Site Scripting Vulnerability in Multiple Netgear Products
Netgear NETGEAR R8900 and others are products of Netgear, Inc.NETGEAR R8900 is a wireless router.NETGEAR R9000 is a wireless router.NETGEAR XR500 is a wireless router. A cross-site scripting vulnerability exists in Certain NETGEAR devices and affects the following products and versions: D7800...
Certain NETGEAR devices Default Configuration Issue Vulnerability
NETGEAR Route Serices are a series of wireless routers from NETGEAR. Certain NETGEAR devices are vulnerable to a default configuration issue and the following products and versions are affected: AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40...
CVE-2020-35795: Buffer Copy without Checking Size of Input
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D7800 before 1.0.1.58, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX7500...
PT-2020-17426
Name of the Vulnerable Software and Affected Versions NETGEAR R7800 versions prior to 1.0.2.74 Description The issue is a buffer overflow that can be triggered by an authenticated user. Recommendations For versions prior to 1.0.2.74, update to version 1.0.2.74 or later to resolve the issue...
PT-2020-17471
Name of the Vulnerable Software and Affected Versions NETGEAR D7800 versions 1.0.1.56 and earlier NETGEAR R7500v2 versions 1.0.3.46 and earlier NETGEAR R7800 versions 1.0.2.68 and earlier NETGEAR R8900 versions 1.0.4.28 and earlier NETGEAR R9000 versions 1.0.4.28 and earlier NETGEAR RAX120 versio...
CVE-2020-35778: Cross-Site Request Forgery (CSRF)
Certain NETGEAR devices are affected by CSRF. This affects GS716Tv3 before 6.3.1.36 and GS724Tv4 before 6.3.1.36...
PT-2020-17419
Name of the Vulnerable Software and Affected Versions NETGEAR GS716Tv3 versions prior to 6.3.1.36 NETGEAR GS724Tv4 versions prior to 6.3.1.36 Description The issue affects certain NETGEAR devices, specifically due to a CSRF problem. Recommendations For NETGEAR GS716Tv3 versions prior to 6.3.1.36,...
Multiple Netgear products have vulnerabilities related to cross-site request forgery attacks.
The NETGEAR GS716Tv3 is a 16-port Gigabit Ethernet Smart Managed Professional Switch with 2 SFP ports.The NETGEAR GS724Tv4 is a 24-port Gigabit Smart Managed Professional Switch with 2 SFP ports. A cross-site request forgery vulnerability exists in the NETGEAR GS716Tv3 and GS724Tv4. No detailed...
NETGEAR DGNv devices command injection vulnerability
The NETGEAR DGN2200v1 is an N300 wireless ADSL2+ modem router. A command injection vulnerability exists in versions prior to NETGEAR DGN2200v1 v1.0.0.58. No details of the vulnerability are provided at this time...
Certain NETGEAR devices Information Disclosure Vulnerability
Netgear NETGEAR is a router from the American company Netgear. It is a hardware device that connects two or more networks and acts as a gateway between networks. Certain NETGEAR devices are vulnerable to an information disclosure vulnerability that affects the following products and versions: D62...
CVE-2020-35803: Undefined Security Weakness
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.46, R6080 before 1.0.0.46, R6120 before 1.0.0.72, R6220 before 1.1.0.100, R6230 before 1.1.0.100, R6260 before 1.1.0.76, R6700v2 before...
Certain NETGEAR devices Cross-Site Scripting Vulnerability
Netgear NETGEAR R8900 and others are products of Netgear, Inc.NETGEAR R8900 is a wireless router.NETGEAR R9000 is a wireless router.NETGEAR XR500 is a wireless router. A cross-site scripting vulnerability exists in Certain NETGEAR devices and affects the following products and versions: D7800...
CVE-2020-35835: Improper Neutralization of Input During Web Page Generation
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10...
CVE-2020-35811: Improper Neutralization of Input During Web Page Generation
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30,...
CVE-2020-35825: Improper Neutralization of Input During Web Page Generation
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, XR500 before 2.3.2.56,...
CVE-2020-35782: Undefined Security Weakness
Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. The TFTP firmware update mechanism does not properly implement firmware validations,...
CVE-2020-35786: Buffer Copy without Checking Size of Input
NETGEAR R7800 devices before 1.0.2.74 are affected by a buffer overflow by an authenticated user...
PT-2020-17438
Name of the Vulnerable Software and Affected Versions NETGEAR R6400v2 versions 1.0.4.84 and earlier NETGEAR R6700v3 versions 1.0.4.84 and earlier NETGEAR R6900P versions 1.3.2.124 and earlier NETGEAR R7000 versions 1.0.11.100 and earlier NETGEAR R7000P versions 1.3.2.124 and earlier NETGEAR R7800...
Cross-Site Scripting Vulnerability in Multiple Netgear Products
Netgear NETGEAR R8900 and others are products of Netgear, Inc.NETGEAR R8900 is a wireless router.NETGEAR R9000 is a wireless router.NETGEAR XR500 is a wireless router. A cross-site scripting vulnerability exists in Certain NETGEAR devices and affects the following products and versions: D7800...