Buffer overflow

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6250 before 1.0.4.12, R6300v2 before 1.0.4.12, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7900 before 1.0.1.12, R8000 before 1.0.3.24, and R8500 before 1.0.2.74...

Authentication flaw

Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, R6400 before 1.0.1.20, R6700 before 1.0.1.20, R6900 before 1.0.1.20, R7000 before 1.0.7.10, R7100LG before V1.0.0.32, R7300DST before 1.0.0.52, R7900 before 1.0.1.16, R8000 before 1.0.3.36, R8300...

Design/Logic Flaw

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.61, D6000 before 1.0.0.61, D6100 before 1.0.0.55, D7800 before 1.0.1.28, R6100 before 1.0.1.16, R7500 before 1.0.0.112, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R9000 befor...

CVE-2017-18735

CVE-2017-18735 affects multiple NETGEAR routers with unauthenticated command injection. Affected devices and vulnerable versions include: JR6150 before 1.0.1.10, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, and R6700v2/R6800/R6900v2 before 1.2.0.4. Root cause is a pre-authentication command inj...

CVE-2017-18735

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JR6150 before 1.0.1.10, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, and R6900v2 before 1.2.0.4...

CVE-2017-18736

CVE-2017-18736 affects multiple NETGEAR routers (JR6150, R6050, R6220, R6700v2, R6800, R6900v2, WNDR3700v5) due to a command-injection vulnerability that can be exploited by an unauthenticated attacker. Affected versions are listed as JR6150 before 1.0.1.10; R6050 before 1.0.1.10; R6220 before 1....

CVE-2017-18736

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JR6150 before 1.0.1.10, R6050 before 1.0.1.10, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, R6900v2 before 1.2.0.4, and WNDR3700v5 before 1.1.0.48...

CVE-2017-18737

CVE-2017-18737 affects several NETGEAR routers (JNR1010v2, JR6150, JWNR2010v5, PR2000, R6050, R6220, R6700v2, R6800, R6900v2, WNDR3700v5, WNR1000v4, WNR2020, WNR2050) with specific firmware before the listed versions. It is a command-injection vulnerability reachable by an unauthenticated attacke...

CVE-2017-18737

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4,...

CVE-2017-18738

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects EX6150v2 before 1.0.1.54, R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.10, R7000P before 1.2.0.22, R6900P before...

CVE-2017-18738

CVE-2017-18738 affects multiple NETGEAR devices (e.g., EX6150v2, R6400/R6400v2, R6700, R6900, R7000/R7000P, R7100LG, R7300DST, R7900/R8000, R8300/R8500, R6100, WNDR4300v2, WNDR4500v3, WNR2000v5) with a stack-based buffer overflow via unauthenticated access. The issue targets various firmware vers...

CVE-2017-18739

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6220 before V1.1.0.50, R7800 before V1.0.2.36, WNDR3400v3 before 1.0.1.14, and WNDR3700v5 before V1.1.0.48...

CVE-2017-18739

CVE-2017-18739 affects several NETGEAR routers via a pre-auth buffer overflow caused by improper handling of memory boundaries in the device’s network processing. Affected models and unreleased-to-date revisions include: R6220 (before v1.1.0.50), R7800 (before v1.0.2.36), WNDR3400v3 (before v1.0....

CVE-2017-18740

The CVE-2017-18740 entry affects a range of NETGEAR devices with incorrect configuration of security settings, including D3600 (before 1.0.0.61), D6000 (before 1.0.0.61), D6100 (before 1.0.0.55), D7800 (before 1.0.1.28), R6100 (before 1.0.1.16), R7500 (before 1.0.0.112), R7500v2 (before 1.0.3.20)...

CVE-2017-18740

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.61, D6000 before 1.0.0.61, D6100 before 1.0.0.55, D7800 before 1.0.1.28, R6100 before 1.0.1.16, R7500 before 1.0.0.112, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R9000 befor...

CVE-2017-18741

CVE-2017-18741 affects multiple NETGEAR routers due to an incorrect configuration of security settings. Affected models and fixed versions per sources: R6250 ≤ 1.0.4.8, R6300v2 ≤ 1.0.4.8, R6700 ≤ 1.0.1.20, R7000 ≤ 1.0.7.10, R7000P ≤ 1.0.0.58, R6900P ≤ 1.0.0.58, R7100LG ≤ 1.0.0.32, R7900 ≤ 1.0.1.1...

CVE-2017-18741

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6250 before 1.0.4.8, R6300v2 before 1.0.4.8, R6700 before 1.0.1.20, R7000 before 1.0.7.10, R7000P before 1.0.0.58, R6900P before 1.0.0.58, R7100LG before 1.0.0.32, R7900 before 1.0.1.14, R8000 befo...

CVE-2017-18742

Certain NETGEAR devices are affected by CSRF. This affects JR6150 before 1.0.1.10, R6050 before 1.0.1.10, R6250 before 1.0.4.12, R6300v2 before 1.0.4.8, R6700 before 1.0.1.16, R6900 before 1.0.1.16, R7300DST before 1.0.0.54, R7900 before 1.0.1.12, R8000 before 1.0.3.32, and R8500 before 1.0.2.74...

CVE-2017-18742

CVE-2017-18742 concerns CSRF on multiple NETGEAR routers. Affected devices and versions include JR6150 (<1.0.1.10), R6050 (<1.0.1.10), R6250 (<1.0.4.12), R6300v2 (<1.0.4.8), R6700 (<1.0.1.16), R6900 (<1.0.1.16), R7300DST (<1.0.0.54), R7900 (<1.0.1.12), R8000 (<1.0.3.32)...

CVE-2017-18743

CVE-2017-18743 is an authentication bypass affecting multiple NETGEAR routers (e.g., R6300v2 < 1.0.4.8, R6400 < 1.0.1.20, R6700 < 1.0.1.20, R6900 < 1.0.1.20, R7000 < 1.0.7.10, R7100LG < V1.0.0.32, R7300DST < 1.0.0.52, R7900 < 1.0.1.16, R8000 < 1.0.3.36, R8300 < 1.0.2...