14729 matches found
PT-2020-5872
Name of the Vulnerable Software and Affected Versions: NETGEAR D6200 versions prior to 1.1.00.40 NETGEAR D7000 versions prior to 1.0.1.78 NETGEAR R6020 versions prior to 1.0.0.42 NETGEAR R6080 versions prior to 1.0.0.42 NETGEAR R6050 versions prior to 1.0.1.26 NETGEAR JR6150 versions prior to...
PT-2020-5893
Name of the Vulnerable Software and Affected Versions: NETGEAR WAC720 versions prior to 3.9.1.13 NETGEAR WAC730 versions prior to 3.9.1.13 Description: The issue is related to the lack of protection for service data in the firmware of NETGEAR WAC720 and WAC730 wireless access points. Exploitation...
PT-2020-5894
Name of the Vulnerable Software and Affected Versions: NETGEAR GS808E versions prior to 1.7.1.0 Description: The issue is related to a lack of protection for service data in the firmware of NETGEAR GS808E switches, which can be exploited to cause a denial of service. Recommendations: For versions...
PT-2020-5882
Name of the Vulnerable Software and Affected Versions: NETGEAR WC7500 versions prior to 6.5.5.24 NETGEAR WC7600 versions prior to 6.5.5.24 NETGEAR WC7600v2 versions prior to 6.5.5.24 NETGEAR WC9500 versions prior to 6.5.5.24 Description: The issue is related to insufficient input data validation,...
NETGEAR Multiple Routers mini_httpd Authentication Bypass Vulnerability
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the minihttpd...
PT-2020-14959
Name of the Vulnerable Software and Affected Versions NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers with firmware 1.0.66 Description This issue allows network-adjacent attackers to disclose sensitive information on affected installations. Authentication is not required t...
NETGEAR R8300 Command Injection Vulnerability
The NETGEAR R8300 is a wireless router from NETGEAR. A command injection vulnerability exists in the NETGEAR R8300 device versions prior to 1.0.2.134. The vulnerability arises from a failure of the network system or product to properly filter special characters, commands, etc. during user input t...
CVE-2020-25067
NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker...
CVE-2020-25067
NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker...
Command injection
NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker...
CVE-2020-25067
NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker...
CVE-2020-25067
NETGEAR R8300 devices prior to firmware version 1.0.2.134 are affected by a command injection vulnerability (CVE-2020-25067) that can be exploited by an unauthenticated attacker. The issue arises from inadequate input filtering during user input, allowing an attacker to construct and execute comm...
CVE-2020-25067: Improper Neutralization of Special Elements used in a Command
NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker...
PT-2020-15926
Name of the Vulnerable Software and Affected Versions NETGEAR R8300 versions prior to 1.0.2.134 Description The issue allows for command injection by an unauthenticated attacker. Recommendations For versions prior to 1.0.2.134, update to version 1.0.2.134 or later to resolve the issue...
Multiple NETGEAR switching hubs vulnerable to cross-site request forgery
Overview GS716Tv2 and GS724Tv3 switching hubs provided by NETGEAR contain a cross-site request forgery vulnerability. Rei Yano reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact If a user views a malicious page...
CVE-2020-5621
Cross-site request forgery CSRF vulnerability in NETGEAR switching hubs GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified...
CVE-2020-5621
Cross-site request forgery CSRF vulnerability in NETGEAR switching hubs GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in NETGEAR switching hubs GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified...
CVE-2020-5621
Cross-site request forgery CSRF vulnerability in NETGEAR switching hubs GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified...