Command injection

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.44, EX6150v2 before 1.0.1.70, EX6100v2 before 1.0.1.70, EX6200v2 before 1.0.1.64, EX7300 before 1.0.2.136, EX6400 before 1.0.2.136, R6100 before 1.0.1.16, R7500 before 1.0.0.110,...

Authentication flaw

Certain NETGEAR devices are affected by authentication bypass. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6120 before 1.0.0.32, EX6130 before 1.0.0.16, R6300v2 before 1.0.4.12, R6700 before 1.0.1.26, R6900 before 1.0.1.22, R7000 before 1.0.9.6, R7300DST before 1.0.0.52, R7900...

Command injection

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.44, R7500v2 before 1.0.3.38, R7800 before 1.0.2.52, R8900 before 1.0.4.12, and R9000 before 1.0.4.12...

Code injection

Certain NETGEAR devices are affected by denial of service. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.20, R6020 before 1.0.0.26, R6050 before 1.0.1.12, R6080 before 1.0.0.26, R6120...

Command injection

Certain NETGEAR devices are affected by command injection. This affects D6200 before 1.1.00.24, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.20, R6050 before 1.0.1.12, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before...

Command injection

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6100 before V1.0.0.55, D7800 before V1.0.1.24, EX6150v2 before 1.0.0.48, R6100 before 1.0.1.14, R7500 before 1.0.0.110, R7500v2 before V1.0.3.16, R7800 before V1.0.2.36, WNDR4300v1 before 1.0.2.90,...

Buffer overflow

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7800 before 1.0.2.36, PLW1000v2 before 1.0.0.14, and PLW1010v2 before 1.0.0.14...

Stack overflow

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D6100 before 1.0.0.60, R7800 before 1.0.2.52, R8900 before 1.0.4.2, R9000 before 1.0.4.2, WNDR3700v4 before 1.0.2.102, WNDR4300 before...

CVE-2018-21120

Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1....

CVE-2018-21120

CVE-2018-21120 is a Cross-Site Request Forgery (CSRF) vulnerability in several NETGEAR wireless products. Affected devices include WAC120 (<2.1.7), WAC505 (<5.0.5.4), WAC510 (<5.0.5.4), WNAP320 (<3.7.11.4), WNAP210v2 (<3.7.11.4), WNDAP350 (<3.7.11.4), WNDAP360 (<3.7.11.4), WN...

CVE-2018-21119

Affected products: NETGEAR WAC505 and WAC510 with versions before 5.0.5.4. Root cause: command injection by an authenticated user. Impact: the issue enables command injection, with partial/ HIGH impact on confidentiality, integrity, and availability per CVSS data in the entry. Remediation: upgrad...

CVE-2018-21119

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WAC505 before 5.0.5.4 and WAC510 before 5.0.5.4...

CVE-2018-21118

Netgear XR500 routers are affected by CVE-2018-21118. Affected product: XR500 firmware prior to 2.3.2.32; vulnerability is an authentication bypass. Root cause details beyond that are not provided in the documents. Impact is high for confidentiality, integrity, and availability per CVSS 3.1 vecto...

CVE-2018-21118

NETGEAR XR500 devices before 2.3.2.32 are affected by authentication bypass...

CVE-2018-21117

NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler...

CVE-2018-21117

The CVE-2018-21117 issue affects NETGEAR XR500 routers (firmware versions before 2.3.2.32). The vulnerability allows remote code execution via the traceroute handler by unauthenticated attackers, with impact on confidentiality, integrity, and availability. Affected entries consistently state pre-...

CVE-2017-18769

CVE-2017-18769 affects a broad set of NETGEAR devices where an attacker can read arbitrary files. The public descriptions enumerate affected models and firmware ranges (e.g., D6220 < 1.0.0.40, D6400 < 1.0.0.74, D7000 < 1.0.1.60, D7800 < 1.0.1.34, D8500

CVE-2017-18769

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.94, DGN2200Bv4 before 1.0.0.94, EX6200v2 before 1.0.1.50,...

CVE-2017-18770

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7800 before 1.0.2.36, PLW1000v2 before 1.0.0.14, and PLW1010v2 before 1.0.0.14...

CVE-2017-18770

The CVE-2017-18770 entry affects NETGEAR devices: R7800 is vulnerable before version 1.0.2.36, and PLW1000v2/PLW1010v2 are vulnerable before version 1.0.0.14. The flaw is described as a buffer overflow caused by an operation in memory without proper data-boundary validation, introduced in an auth...