Command injection

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user...

CVE-2018-21173

CVE-2018-21173 describes a stack-based buffer overflow in certain NETGEAR routers that can be triggered by an authenticated user. Affected models and affected firmware versions include R7500 < 1.0.0.122, R7800 < 1.0.2.40, R9000 < 1.0.2.52, WNDR3700v4 < 1.0.2.92, WNDR4300 < 1.0.2.94...

CVE-2018-21173

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7500 before 1.0.0.122, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and...

CVE-2018-21172

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62...

CVE-2018-21172

CVE-2018-21172 affects NETGEAR routers (R7800, R9000, WNDR3700v4, WNDR4300, WNDR4300v2, WNDR4500v3, WNR2000v5). A stack-based buffer overflow is triggered by an authenticated user. The vulnerability is present in versions prior to 1.0.2.40 (R7800), 1.0.2.52 (R9000), 1.0.2.92 (WNDR3700v4), 1.0.2.9...

CVE-2018-21171

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, R7800 before 1.0.2.40, R9000 before 1.0.3.6, WNDR3700v4 before 1.0.2.92, and WNDR4300 before 1.0.2.98...

CVE-2018-21171

CVE-2018-21171 affects NETGEAR devices (D6100 <1.0.0.57, R7800 <1.0.2.40, R9000 <1.0.3.6, WNDR3700v4 <1.0.2.92, WNDR4300

CVE-2018-21170

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects EX2700 before 1.0.1.28, R7800 before 1.0.2.40, WN2000RPTv3 before 1.0.1.20, WN3000RPv3 before 1.0.2.50, and WN3100RPv2 before 1.0.0.56...

CVE-2018-21170

CVE-2018-21170 affects multiple NETGEAR devices via a stack-based buffer overflow exploitable by an unauthenticated attacker. The connected sources specify affected models and minimum/affected firmware versions: EX2700 < 1.0.1.28, R7800 < 1.0.2.40, WN2000RPTv3 < 1.0.1.20, WN3000RPv3 <...

CVE-2018-21169

CVE-2018-21169 affects NETGEAR devices due to incorrect configuration of security settings. The vulnerability applies to multiple models (e.g., D7000, D7800, D8500, JNR1010v2, JR6150, JWNR2010v5, PR2000, R6050, R6220, R6400, R6700v2, R6800, R6900v2, R7300DST, R7500, R7500v2, R7800, R7900P, R8000P...

CVE-2018-21169

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7000 before 2018-03-01, D7800 before 1.0.1.31, D8500 before 1.0.3.36, JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.14, JWNR2010v5 before 1.1.0.46, PR2000 before 2018-03-01, R6050 before 1.0.1.14,...

CVE-2018-21168

CVE-2018-21168 affects a broad set of NETGEAR devices (D7000, D7800, D8500, JNR1010v2, JR6150, JWNR2010v5, PR2000, R6050, R6220, R6400, R6400v2, R6700v2, R6800, R6900v2, R7300DST, R7500, R7500v2, R7800, R7900P, R8000P, R8300, R8500, R9000, WNDR3700v4/v5, WNDR4300/v2, WNDR4500v3, WNR1000v4, WNR202...

CVE-2018-21168

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D7000 before 1.0.1.52, D7800 before 1.0.1.31, D8500 before 1.0.3.36, JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.14, JWNR2010v5 before 1.1.0.46, PR2000 before 1.0.0.20, R6050 before 1.0.1.14, R6220 before...

CVE-2018-21167

CVE-2018-21167 describes a stored XSS vulnerability affecting a range of NETGEAR devices (routers/gateways) where the web UI may process untrusted content. Affected models include D6100 (before 1.0.0.57), DM200 (before 1.0.0.50), EX2700 (before 1.0.1.32), EX6100v2 (before 1.0.1.70), EX6150v2 (bef...

CVE-2018-21167

Certain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.57, DM200 before 1.0.0.50, EX2700 before 1.0.1.32, EX6100v2 before 1.0.1.70, EX6150v2 before 1.0.1.70, EX6200v2 before 1.0.1.62, EX6400 before 1.0.1.78, EX7300 before 1.0.1.78, EX8000 before 1.0.0.114, R6100 befor...

CVE-2018-21159

NETGEAR ReadyNAS devices before 6.9.3 are affected by incorrect configuration of security settings...

CVE-2018-21159

CVE-2018-21159 affects NETGEAR ReadyNAS OS prior to 6.9.3, caused by a misconfiguration of security settings. The vulnerability is tied to ReadyNAS devices, with the fix available in version 6.9.3. Exploitation details are not provided in the sources; no publicly disclosed exploit information is ...

CVE-2018-21158

NETGEAR R7800 devices before 1.0.2.46 are affected by incorrect configuration of security settings...

CVE-2018-21158

The CVE-2018-21158 issue affects NETGEAR R7800 routers. Affected firmware includes versions prior to 1.0.2.46, with the vulnerability stemming from incorrect configuration of security settings. The core impact is high if exploited, as confidentiality, integrity, and availability could be compromi...

CVE-2018-21157

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.28, R6700 before 1.0.1.44, R6900 before 1.0.1.44, R7000 before 1.0.9.28, R7500v2 before 1.0.3.24, R7800 before 1.0.2.38, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.50, and...