CVE-2020-26926

Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11...

CVE-2020-26926

The CVE-2020-26926 issue is an authentication bypass affecting specific NETGEAR UniFi-like consumer/enterprise devices: CBR40 prior to 2.5.0.10; RBK752, RBR750, RBS750 prior to 3.2.15.25; RBK852 prior to 3.2.10.11; RBR850 prior to 3.2.10.11; RBS850 prior to 3.2.10.11. The root cause is not detail...

CVE-2020-26927

CVE-2020-26927 concerns an authentication bypass in several NETGEAR devices. Red Hat and other sources corroborate affected models and firmware ranges, including D6200 (< 1.1.00.40), D7000 (< 1.0.1.78), R6020 (< 1.0.0.42), R6080 (< 1.0.0.42), R6050 (< 1.0.1.26), JR6150 (< 1.0.1....

CVE-2020-26927

Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.42, R6080 before 1.0.0.42, R6050 before 1.0.1.26, JR6150 before 1.0.1.26, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6260 before 1.1.0.66, R6700v2...

CVE-2020-26928

CVE-2020-26928 affects several NETGEAR devices via an authentication bypass vulnerability. Affected models and firmware ranges include CBR40 < 2.5.0.10, RBK752 < 3.2.15.25, RBR750 < 3.2.15.25, RBS750 < 3.2.15.25, RBK852 < 3.2.10.11, RBR850 < 3.2.10.11, and RBS850

CVE-2020-26928

Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11...

CVE-2020-26929

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.100 and R6230 before 1.1.0.100...

CVE-2020-26929

CVE-2020-26929 affects certain NETGEAR routers (R6220 and R6230) with firmware older than 1.1.0.100, where an authenticated user can trigger a command injection. The root cause is not explicitly detailed beyond “command injection,” but the vulnerability is documented in Netgear’s advisory PSV-201...

CVE-2020-26930

NETGEAR EX7700 devices before 1.0.0.210 are affected by incorrect configuration of security settings...

CVE-2020-26930

NETGEAR EX7700 devices before firmware 1.0.0.210 are affected by an incorrect configuration of security settings. The connected documents do not provide further technical details (root cause, exploitability, or concrete fixes). No explicit remediation or exploitation status is described in the su...

CVE-2020-26931

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24...

CVE-2020-26931

CVE-2020-26931 affects certain NETGEAR wireless controllers (WC7500, WC7600, WC7600v2, WC9500) where sensitive information disclosure is possible. The issue is described as disclosure of sensitive information on these devices prior to version 6.5.5.24; mitigation is to upgrade to 6.5.5.24 or late...

CVE-2020-26901: Undefined Security Weakness

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25...

CVE-2020-26907: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, and RBS850 before 3.2.16.6...

CVE-2020-26912: Cross-Site Request Forgery (CSRF)

Certain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150 before 1.0.1.24, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6260 before 1.1.0.64, R6700v2 before 1.2.0.62, R68...

CVE-2020-26915: Improper Neutralization of Input During Web Page Generation

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, XR500 before 2.3.2.56,...

CVE-2020-26917: Improper Neutralization of Input During Web Page Generation

Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 before 1.0.1.46, R6400v2 before 1.0.2.66, R7100LG before 1.0.0.50, R7300DST before 1.0.0.70, R7900 before 1.0.3.8, R8300 before 1.0.2.128, and R8500 before 1.0.2.128...

CVE-2020-26921: Improper Authentication

Certain NETGEAR devices are affected by authentication bypass. This affects GS110EMX before 1.0.1.7, GS810EMX before 1.7.1.3, XS512EM before 1.0.1.3, and XS724EM before 1.0.1.3...

CVE-2020-26930: Initialization of a Resource with an Insecure Default

NETGEAR EX7700 devices before 1.0.0.210 are affected by incorrect configuration of security settings...

PT-2020-16554

Name of the Vulnerable Software and Affected Versions NETGEAR D6200 versions 1.1.00.37 and earlier NETGEAR D7000 versions 1.0.1.77 and earlier NETGEAR JR6150 versions 1.0.1.23 and earlier NETGEAR R6020 versions 1.0.0.41 and earlier NETGEAR R6050 versions 1.0.1.23 and earlier NETGEAR R6080 version...