CVE-2020-15416

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by...

CVE-2020-15417

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. A crafted...

CVE-2020-15417

The CVE-2020-15417 issue affects NETGEAR R6700 devices (V1.0.4.84_10.0.58). A vulnerability in the handling of string table file uploads can overflow a fixed-length stack-based buffer in the web server, allowing network-adjacent attackers to execute arbitrary code without authentication. The root...

CVE-2020-10930

CVE-2020-10930 affects NETGEAR R6700 routers (V1.0.4.84_10.0.58). The flaw is in URL handling due to improper routing, enabling network-adjacent attackers to disclose stored credentials. Multiple sources (NVD, Red Hat, CNVD, CVE records) reference ZDI-CAN-9618; exploitation details are not provid...

CVE-2020-10930

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of URLs. The issue results from th...

CVE-2020-10929

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. The issue...

CVE-2020-10929

The CVE-2020-10929 entry concerns NETGEAR R6700 devices running V1.0.4.84_10.0.58. Affected component: string table file upload handling. Root cause: improper validation of user-supplied data leading to an integer overflow during buffer allocation. Impact: remote code execution possible with no a...

CVE-2020-10928

The CVE-2020-10928 entry concerns NETGEAR R6700 routers (V1.0.4.84_10.0.58). Root cause: improper validation of the length of user-supplied data during string table file uploads, causing a heap-based buffer overflow. Impact: network-adjacent attackers can execute arbitrary code in the web server ...

CVE-2020-10927

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the encryption of firmware update images. The issue...

CVE-2020-10928

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. The issue...

CVE-2020-10927

The CVE-2020-10927 entry concerns NETGEAR R6700 routers (variant V1.0.4.84_10.0.58). A flaw in the encryption of firmware update images stems from an inappropriate encryption algorithm, enabling network-adjacent attackers to trigger code execution with root privileges. Authentication is not requi...

CVE-2020-10925

The CVE-2020-10925 issue affects NETGEAR R6700 devices (V1.0.4.84_10.0.58). The root cause is improper validation of the server certificate during HTTPS file downloads, enabling network-adjacent attackers to compromise integrity of downloaded information without authentication. The vulnerability ...

CVE-2020-10925

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files vi...

CVE-2020-10924

CVE-2020-10924 affects NETGEAR R6700 routers (e.g., V1.0.4.84_10.0.58) where the UPnP daemon (/usr/sbin/upnpd) mishandles length validation of user-supplied data, leading to a stack-based buffer overflow and potential code execution as root. The vulnerability is exploitable by network-adjacent at...

CVE-2020-10926

The CVE-2020-10926 issue affects NETGEAR R6700 routers running firmware version 1.0.4.84_10.0.58. The root cause is improper validation of the firmware image before performing an update, enabling a network-adjacent attacker (no authentication required) to execute arbitrary code in the router cont...

CVE-2020-10926

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of firmware updates. The issue results fro...

CVE-2020-10923

The CVE-2020-10923 vulnerability affects NETGEAR R6700 routers (e.g., firmware around V1.0.4.84_10.0.58). A flaw in the UPnP daemon (LISTENING on TCP 5000) allows network-adjacent attackers to bypass authentication via crafted UPnP messages, potentially enabling root code execution when combined ...

CVE-2020-10923

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPnP service, which listens on TCP port 5000. A...

CVE-2020-10924

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

Report: Most Popular Home Routers Have ‘Critical’ Flaws

A security review of 127 popular home routers found most contained at least one critical security flaw, according to researchers. The “Home Router Security Report” PDF by Peter Weidenbach and Johannes vom Dorp—both from the German think tank Fraunhofer Institute–found that not only did all of the...