CVE-2018-21116

NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers...

CVE-2018-21116

CVE-2018-21116 affects NETGEAR XR500 wireless routers, with versions prior to 2.3.2.32 vulnerable to remote code execution by unauthenticated attackers. Several connected sources (NVD, CNVD‑2020‑31333, CNVD, CNVD‑based records) confirm the affected product and fix version. Remediation: update XR5...

CVE-2017-18772

Certain NETGEAR devices are affected by authentication bypass. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6120 before 1.0.0.32, EX6130 before 1.0.0.16, R6300v2 before 1.0.4.12, R6700 before 1.0.1.26, R6900 before 1.0.1.22, R7000 before 1.0.9.6, R7300DST before 1.0.0.52, R7900...

CVE-2017-18772

The CVE-2017-18772 entry concerns authentication bypass affecting multiple NETGEAR devices. Affected models and minimum versions are: EX3700 < 1.0.0.64, EX3800 < 1.0.0.64, EX6120 < 1.0.0.32, EX6130 < 1.0.0.16, R6300v2 < 1.0.4.12, R6700 < 1.0.1.26, R6900 < 1.0.1.22, R7000 <...

CVE-2017-18773

CVE-2017-18773 describes a command-injection vulnerability in certain NETGEAR devices that can be exploited by an authenticated user. Affected products and versions (per sources): D6100 prior to v1.0.0.55; D7800 prior to v1.0.1.24; EX6150v2 prior to 1.0.0.48; R6100 prior to 1.0.1.14; R7500 prior ...

CVE-2017-18773

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6100 before V1.0.0.55, D7800 before V1.0.1.24, EX6150v2 before 1.0.0.48, R6100 before 1.0.1.14, R7500 before 1.0.0.110, R7500v2 before V1.0.3.16, R7800 before V1.0.2.36, WNDR4300v1 before 1.0.2.90,...

CVE-2018-21115

NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers...

CVE-2018-21115

NETGEAR XR500 devices before 2.3.2.32 are vulnerable to remote code execution due to an input validation error. The issue allows unauthenticated attackers to execute code on the device. Affected product: XR500 router. Remediation: upgrade to firmware version 2.3.2.32 or later as specified by CNVD...

CVE-2017-18775

The CVE-2017-18775 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in several NETGEAR routers. Affected devices and minimum vulnerable versions include: R6100 prior to 1.0.1.12, R7500 prior to 1.0.0.108, WNDR3700v4 prior to 1.0.2.86, WNDR4300v1 prior to 1.0.2.88, WNDR4300v2 prio...

CVE-2017-18775

Certain NETGEAR devices are affected by CSRF. This affects R6100 before 1.0.1.12, R7500 before 1.0.0.108, WNDR3700v4 before 1.0.2.86, WNDR4300v1 before 1.0.2.88, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.42...

CVE-2018-21114

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.44, EX6150v2 before 1.0.1.70, EX6100v2 before 1.0.1.70, EX6200v2 before 1.0.1.64, EX7300 before 1.0.2.136, EX6400 before 1.0.2.136, R6100 before 1.0.1.16, R7500 before 1.0.0.110,...

CVE-2018-21114

The CVE-2018-21114 entry concerns an authenticated-command-injection vulnerability in multiple NETGEAR devices (D7800, EX-series, R-series, WN-series, etc.) with affected firmware versions listed in the vulnerability notes. The connected CNVD-2020-31331 entry corroborates an injection vulnerabili...

CVE-2017-18776

Certain NETGEAR devices are affected by authentication bypass. This affects D6100 before V1.0.0.55, D7000 before V1.0.1.50, D7800 before V1.0.1.24, JNR1010v2 before 1.1.0.40, JWNR2010v5 before 1.1.0.40, R6100 before 1.0.1.12, R6220 before 1.1.0.50, R7500 before 1.0.0.108, R7500v2 before 1.0.3.10,...

CVE-2017-18776

The CVE-2017-18776 entry documents an authentication-bypass vulnerability affecting multiple NETGEAR devices, including D6100 (pre V1.0.0.55), D7000 (pre V1.0.1.50), D7800 (pre V1.0.1.24), JNR1010v2 (pre 1.1.0.40), JWNR2010v5 (pre 1.1.0.40), R6100 (pre 1.0.1.12), R6220 (pre 1.1.0.50), R7500 (pre ...

CVE-2017-18777

Certain NETGEAR devices are affected by administrative password disclosure. This affects D6220 before V1.0.0.28, D6400 before V1.0.0.60, D8500 before V1.0.3.29, DGN2200v4 before 1.0.0.82, DGN2200Bv4 before 1.0.0.82, R6300v2 before 1.0.4.8, R6400 before 1.0.1.20, R6700 before 1.0.1.20, R6900 befor...

CVE-2017-18777

CVE-2017-18777 affects multiple NETGEAR devices, causing administrative password disclosure. Affected models include D6220 (pre V1.0.0.28), D6400 (pre V1.0.0.60), D8500 (pre V1.0.3.29), DGN2200v4/Bv4 (pre 1.0.0.82), R6300v2 (pre 1.0.4.8), R6400 (pre 1.0.1.20), R6700 (pre 1.0.1.20), R6900 (pre 1.0...

CVE-2017-18778

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6220 before 1.0.0.28, D6400 before 1.0.0.60, D7000 before 1.0.1.52, D7000v2 before 1.0.0.38, D7800 before 1.0.1.24, D8500 before 1.0.3.29, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.14,...

CVE-2017-18778

Summary (CVE-2017-18778) : Several NETGEAR devices are affected by an incorrect configuration of security settings. Affected models include D6220, D6400, D7000, D7000v2, D7800, D8500, JNR1010v2, JR6150, JWNR2010v5, PR2000, R6050, R6220, R6400, R6400v2, R6700v2, R6800, R6900v2, R7100LG, R7300DST, ...

CVE-2018-21113

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6100 before 1.0.0.58, D7800 before 1.0.1.42, R6100 before 1.0.1.28, R7500 before 1.0.0.130, R7500v2 before 1.0.3.36, R7800 before 1.0.2.52, R8900 before 1.0.4.12, R9000 before 1.0.4.12,...

CVE-2018-21113

This CVE affects NETGEAR devices: D6100 (before firmware 1.0.0.58), D7800 (before 1.0.1.42), R6100 (before 1.0.1.28), R7500 (before 1.0.0.130), R7500v2 (before 1.0.3.36), R7800 (before 1.0.2.52), R8900 (before 1.0.4.12), R9000 (before 1.0.4.12), WNDR3700v4 (before 1.0.2.102), WNDR4300 (before 1.0...