Cross site scripting

Certain NETGEAR devices are affected by stored XSS. This affects R9000 before 1.0.2.40, R6100 before 1.0.1.1, 6R7500 before 1.0.0.110, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, WNDR4300v2 before 1.0.0.48, and WNR2000v5 before 1.0.0.58...

CVE-2017-18864

CVE-2017-18864 and related entries describe a pre-authentication buffer overflow affecting NETGEAR routers. Affected models and versions include R6400 (before 1.0.1.24), R6400v2 (before 1.0.2.32), R6700 (before 1.0.1.22), R6900 (before 1.0.1.22), R7000 (before 1.0.9.4), R7000P (before 1.0.0.56), ...

CVE-2017-18864

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R6900P before 1.0.0.56, R7100LG before 1.0.0.32, R7300...

CVE-2017-18865

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104...

CVE-2017-18865

CVE-2017-18865 affects NETGEAR R8300 and R8500 routers with firmware versions before 1.0.2.104. The issue is a stack-based buffer overflow caused by an authenticated user, with potential for memory corruption. Public documents consistently describe the affected devices and the firmware boundary; ...

CVE-2017-18866

CVE-2017-18866 is a stored XSS vulnerability in NETGEAR consumer routers. Affected devices and firmware ranges (as listed) include R9000 (<1.0.2.40), R6100 (<1.0.1.1), 6R7500 (<1.0.0.110), R7500v2 (<1.0.3.20), R7800 (<1.0.2.36), WNDR4300v2 (<1.0.0.48), and WNR2000v5 (

CVE-2017-18866

Certain NETGEAR devices are affected by stored XSS. This affects R9000 before 1.0.2.40, R6100 before 1.0.1.1, 6R7500 before 1.0.0.110, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, WNDR4300v2 before 1.0.0.48, and WNR2000v5 before 1.0.0.58...

CVE-2017-18867

CVE-2017-18867 concerns NETGEAR devices with incorrect configuration of security settings. Affected products and versions: D6100 before 1.0.0.55, D7800 before 1.0.1.24, R7100LG before 1.0.0.32, WNDR4300v1 before 1.0.2.90, WNDR4500v3 before 1.0.0.48. Root cause is misconfiguration of security sett...

CVE-2017-18867

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6100 before 1.0.0.55, D7800 before V1.0.1.24, R7100LG before V1.0.0.32, WNDR4300v1 before 1.0.2.90, and WNDR4500v3 before 1.0.0.48...

CVE-2017-18866: Improper Neutralization of Input During Web Page Generation

Certain NETGEAR devices are affected by stored XSS. This affects R9000 before 1.0.2.40, R6100 before 1.0.1.1, 6R7500 before 1.0.0.110, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, WNDR4300v2 before 1.0.0.48, and WNR2000v5 before 1.0.0.58...

PT-2020-8413

Name of the Vulnerable Software and Affected Versions: NETGEAR R9000 versions prior to 1.0.2.40 NETGEAR R6100 versions prior to 1.0.1.1 NETGEAR R7500 versions prior to 1.0.0.110 NETGEAR R7500v2 versions prior to 1.0.3.20 NETGEAR R7800 versions prior to 1.0.2.36 NETGEAR WNDR4300v2 versions prior t...

PT-2020-8414

Name of the Vulnerable Software and Affected Versions: NETGEAR D6100 versions prior to 1.0.0.55 NETGEAR D7800 versions prior to V1.0.1.24 NETGEAR R7100LG versions prior to V1.0.0.32 NETGEAR WNDR4300v1 versions prior to 1.0.2.90 NETGEAR WNDR4500v3 versions prior to 1.0.0.48 Description: The issue ...

PT-2020-8412

Name of the Vulnerable Software and Affected Versions: NETGEAR R8300 versions prior to 1.0.2.104 NETGEAR R8500 versions prior to 1.0.2.104 Description: The issue is a stack-based buffer overflow that can be exploited by an authenticated user. This allows for potential unauthorized access or...

PT-2020-8411

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400 versions prior to 1.0.1.24 NETGEAR R6400v2 versions prior to 1.0.2.32 NETGEAR R6700 versions prior to 1.0.1.22 NETGEAR R6900 versions prior to 1.0.1.22 NETGEAR R7000 versions prior to 1.0.9.4 NETGEAR R7000P versions prior to...

CVE-2017-18865: Out-of-bounds Write

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104...

CVE-2017-18867: Improper Input Validation

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6100 before 1.0.0.55, D7800 before V1.0.1.24, R7100LG before V1.0.0.32, WNDR4300v1 before 1.0.2.90, and WNDR4500v3 before 1.0.0.48...

CVE-2017-18864: Buffer Copy without Checking Size of Input

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R6900P before 1.0.0.56, R7100LG before 1.0.0.32, R7300...

PT-2020-8309

Name of the Vulnerable Software and Affected Versions: NETGEAR R8300 versions prior to 1.0.2.104 NETGEAR R8500 versions prior to 1.0.2.104 Description: The issue is a stack-based buffer overflow that can be exploited by an authenticated user. Recommendations: For NETGEAR R8300 versions prior to...

PT-2020-8302

Name of the Vulnerable Software and Affected Versions: D6220 versions prior to 1.0.0.40 D8500 versions prior to 1.0.3.39 EX3700 versions prior to 1.0.0.70 EX3800 versions prior to 1.0.0.70 EX6000 versions prior to 1.0.0.30 EX6100 versions prior to 1.0.2.22 EX6120 versions prior to 1.0.0.40 EX6130...

PT-2020-8323

Name of the Vulnerable Software and Affected Versions: NETGEAR D6100 versions prior to 1.0.0.55 NETGEAR D7800 versions prior to V1.0.1.24 NETGEAR R7100LG versions prior to V1.0.0.32 NETGEAR WNDR4300v1 versions prior to 1.0.2.90 NETGEAR WNDR4500v3 versions prior to 1.0.0.48 Description: The issue ...