Stack overflow

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 before 1.0.2.40 and R9000 before 1.0.3.6...

Stack overflow

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.30, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, and WNDR4300 before 1.0.2.98...

Stack overflow

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96, WNDR4300 befo...

Code injection

Certain NETGEAR devices are affected by anonymous root access. This affects ReadyNAS Surveillance 1.1.1-3-armel and earlier and ReadyNAS Surveillance 1.4.1-3-amd64 and earlier...

CVE-2016-11060

The provided data confirms CVE-2016-11060 involves NETGEAR devices affected by insecure TLS renegotiation. Affected products listed are SRX5308, FVS336Gv3, FVS318N, and FVS318Gv2 with vulnerable dates before 2017-02-10. The CNVD entry explicitly describes a Denial of Service impact resulting from...

CVE-2016-11060

Certain NETGEAR devices are affected by insecure renegotiation. This affects SRX5308 before 2017-02-10, FVS336Gv3 before 2017-02-10, FVS318N before 2017-02-10, and FVS318Gv2 before 2017-02-10...

CVE-2016-11058

The CVE-2016-11058 entry concerns the NETGEAR genie Android app prior to version 2.4.34, which mishandles hard-coded API keys and session IDs. This could enable unauthorized access or session hijacking due to exposed credentials, as reflected by the CVSS scores (2.0/3.1) indicating network-exposu...

CVE-2016-11058

The NETGEAR genie application before 2.4.34 for Android is affected by mishandling of hard-coded API keys and session IDs...

CVE-2016-11057

Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618 before 2017-01-06, JWNR2000v5 before 2017-01-06, WNR2020 before 2017-01-06, JWNR2010v5 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2020v2...

CVE-2016-11057

Technical details about CVE-2016-11057 are not publicly available in the provided documents; monitor for updates.

CVE-2016-11056

CVE-2016-11056 affects NETGEAR ReadyNAS Surveillance (ReadyNAS Surveillance 1.1.1-3-armel and earlier; 1.4.1-3-amd64 and earlier). The connected documents describe an anonymous root access vulnerability, implying full compromise of affected devices. No technical root-cause details, affected compo...

CVE-2016-11056

Certain NETGEAR devices are affected by anonymous root access. This affects ReadyNAS Surveillance 1.1.1-3-armel and earlier and ReadyNAS Surveillance 1.4.1-3-amd64 and earlier...

CVE-2016-11055

CVE-2016-11055 is a CSRF vulnerability in multiple NETGEAR devices (e.g., CM400/CM600/D1500/D500/DST6501/JNR1010v1/JWNR2000Tv3/JWNR2010v3/PLW1000/PLW1010/WNR500/WNR612v3/N450/CG3000Dv2). Root cause: cross-site request forgery that enables an attacker with a crafted script to log in to the victim’...

CVE-2016-11055

Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1 before 2017-01-11, JWNR2000Tv3 before 2017-01-11, JWNR2010v3 before 2017-01-11, PLW1000 before...

CVE-2016-11054

NETGEAR DGN2200v4 devices before 2017-01-06 are affected by a command execution vulnerability and an FTP insecure root directory issue (CVE-2016-11054). Connected sources describe an attacker exploiting the vulnerability to install a backdoor, modify Internet traffic, and access files in the root...

CVE-2016-11054

NETGEAR DGN2200v4 devices before 2017-01-06 are affected by command execution and an FTP insecure root directory...

CVE-2017-18863

CVE-2017-18863 affects several NETGEAR devices (WN604; WNAP210v2; WNAP320; WNDAP350; WNDAP360; WNDAP620; WNDAP660; WND930; WAC120) where a PHP form enables command execution. Root cause: input handling in the web interface allows arbitrary commands to be executed due to a PHP form vulnerability. ...

CVE-2017-18863

Certain NETGEAR devices are affected by command execution via a PHP form. This affects WN604 3.3.3 and earlier, WNAP210v2 3.5.20.0 and earlier, WNAP320 3.5.20.0 and earlier, WNDAP350 3.5.20.0 and earlier, WNDAP360 3.5.20.0 and earlier, WNDAP620 2.0.11 and earlier, WNDAP660 3.5.20.0 and earlier,...

CVE-2017-18862

CVE-2017-18862 affects several NETGEAR switch models (JGS516PE, JGS524Ev2/PE, GS105Ev2/PE, GS108Ev3/PE, GS116Ev2, GSS108E, GSS116E, XS708Ev2, XS716E) with an authentication bypass vulnerability prior to 2017-05-11. The issue is a direct authentication bypass on affected devices; no exploitation d...

CVE-2017-18862

Certain NETGEAR devices are affected by authentication bypass. This affects JGS516PE before 2017-05-11, JGS524Ev2 before 2017-05-11, JGS524PE before 2017-05-11, GS105Ev2 before 2017-05-11, GS105PE before 2017-05-11, GS108Ev3 before 2017-05-11, GS108PEv3 before 2017-05-11, GS116Ev2 before...