Authentication flaw

Certain NETGEAR devices are affected by authentication bypass. This affects JNR1010v2 before 1.1.0.48, JWNR2010v5 before 1.1.0.48, WNR1000v4 before 1.1.0.48, WNR2020 before 1.1.0.48, and WNR2050 before 1.1.0.48...

Code injection

Certain NETGEAR devices are affected by insecure renegotiation. This affects SRX5308 before 2017-02-10, FVS336Gv3 before 2017-02-10, FVS318N before 2017-02-10, and FVS318Gv2 before 2017-02-10...

Buffer overflow

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96,...

Command injection

Certain NETGEAR devices are affected by command execution. This affects M4200-10MG-POE+ 12.0.2.11 and earlier, M4300-28G 12.0.2.11 and earlier, M4300-52G 12.0.2.11 and earlier, M4300-28G-POE+ 12.0.2.11 and earlier, M4300-52G-POE+ 12.0.2.11 and earlier, M4300-8X8F 12.0.2.11 and earlier, M4300-12X1...

Buffer overflow

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96,...

Code injection

Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 before 2017-01-06, D1500 before 2017-01-06, D3600 before 2017-01-06, D6000 before 2017-01-06, D6100 before 2017-01-06, D6200 before 2017-01-06, D6200B before 2017-01-06,...

Design/Logic Flaw

The NETGEAR Insight application before 2.42 for Android and iOS is affected by password mismanagement...

Hardcoded credentials

The NETGEAR genie application before 2.4.34 for Android is affected by mishandling of hard-coded API keys and session IDs...

Buffer overflow

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, and R9000 before 1.0.2.52...

Code injection

Certain NETGEAR devices are affected by slowdown/stoppage. This affects C6300 before 2017-05-30, CM400 before 2017-05-30, CM700 before 2017-05-30, and CMD31T before 2017-05-30...

CVE-2017-18859

CVE-2017-18859 affects NETGEAR cable modems/gateways (C6300, CM400, CM700, CMD31T) with slowdown/stoppage of network access reported prior to 2017-05-30. The available data from the CVE entry notes the affected models and a timeline but does not provide root-cause details, exploit descriptions, o...

CVE-2017-18859

Certain NETGEAR devices are affected by slowdown/stoppage. This affects C6300 before 2017-05-30, CM400 before 2017-05-30, CM700 before 2017-05-30, and CMD31T before 2017-05-30...

CVE-2017-18858

Certain NETGEAR devices are affected by command execution. This affects M4200-10MG-POE+ 12.0.2.11 and earlier, M4300-28G 12.0.2.11 and earlier, M4300-52G 12.0.2.11 and earlier, M4300-28G-POE+ 12.0.2.11 and earlier, M4300-52G-POE+ 12.0.2.11 and earlier, M4300-8X8F 12.0.2.11 and earlier, M4300-12X1...

CVE-2017-18858

CVE-2017-18858 affects certain NETGEAR devices, specifically M4200-10MG-POE+ (12.0.2.11 and earlier), M4300-28G (12.0.2.11 and earlier), M4300-52G (12.0.2.11 and earlier), M4300-28G-POE+ (12.0.2.11 and earlier), M4300-52G-POE+ (12.0.2.11 and earlier), M4300-8X8F (12.0.2.11 and earlier), M4300-12X...

CVE-2017-18857

The CVE-2017-18857 issue affects the NETGEAR Insight mobile app for Android and iOS prior to version 2.42, caused by password mismanagement in the app. The vulnerability is documented with a high to critical impact (CVSS v3.1: 9.8, CRITICAL; CVSS v2: 7.5, HIGH). Affected product: NETGEAR Insight ...

CVE-2017-18857

The NETGEAR Insight application before 2.42 for Android and iOS is affected by password mismanagement...

CVE-2018-21226

CVE-2018-21226 affects certain NETGEAR devices (JNR1010v2, JWNR2010v5, WNR1000v4, WNR2020, WNR2050) with an authentication bypass vulnerability. Affected software versions are prior to 1.1.0.48. The CVSS context shows high impact (C/H/I/H/A/H) with adjacent access, low complexity, no privileges r...

CVE-2018-21226

Certain NETGEAR devices are affected by authentication bypass. This affects JNR1010v2 before 1.1.0.48, JWNR2010v5 before 1.1.0.48, WNR1000v4 before 1.1.0.48, WNR2020 before 1.1.0.48, and WNR2050 before 1.1.0.48...

CVE-2018-21225

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, R6700 before 1.0.1.30, R6700v2 before 1.2.0.16, R6800 before 1.2.0.16, R6900 before 1.0.1.30, R6900P before 1.2.0.22, R6900v2 befor...

CVE-2018-21225

CVE-2018-21225 affects a range of NETGEAR routers (D7000, D7800, D8500, R6700/R6700v2/R6800/R6900/R6900P/R6900v2/R7000/R7000P/R7500v2/R7800/R8300/R8500/R9000) with specific firmware versions listed in the public advisories. The vulnerability is a command injection that can be exploited by an auth...