CVE-2018-21157

CVE-2018-21157 affects several NETGEAR devices via command injection by an authenticated user. Affected models and firmware ranges include D7800 prior to 1.0.1.28; R6700 prior to 1.0.1.44; R6900 prior to 1.0.1.44; R7000 prior to 1.0.9.28; R7500v2 prior to 1.0.3.24; R7800 prior to 1.0.2.38; R9000 ...

CVE-2018-21156

CVE-2018-21156 is a buffer overflow vulnerability in multiple NETGEAR devices that can be triggered by an authenticated user. The description applies to a long list of models (e.g., D6220, D6400, D7000v2, D8500, DGN2200v4/Bv4, EX-series like EX3700/3800/6000/6100/6120/6130/6150/6200, R-series inc...

CVE-2018-21156

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.38, D6400 before 1.0.0.74, D7000v2 before 1.0.0.74, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.102, DGN2200Bv4 before 1.0.0.102, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70,...

CVE-2018-21155

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.52, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7500v2 before 1.0.3.26, R7800 before 1.0.2.42, R8900 before 1.0.4.2, R9000 before 1.0.3.16, WNDR4300 before 1.0.2.98, WNDR4300v2 before...

CVE-2018-21155

Consolidated sources confirm CVE-2018-21155 is a stored XSS in NETGEAR devices. Affected models and before-version cutoffs include D7800 < 1.0.1.34, DM200 < 1.0.0.52, R6100 < 1.0.1.22, R7500 < 1.0.0.122, R7500v2 < 1.0.3.26, R7800 < 1.0.2.42, R8900 < 1.0.4.2, R9000 < 1.0.3....

CVE-2018-21154

CVE-2018-21154 affects several NETGEAR devices. An authenticated user can perform command injection via components handling OS command construction, with affected models/versions including D7800 < 1.0.1.34, DM200 < 1.0.0.50, R6100 < 1.0.1.22, R7500 < 1.0.0.122, R7500v2 < 1.0.3.26, ...

CVE-2018-21154

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.50, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7500v2 before 1.0.3.26, and R7800 before 1.0.2.42...

CVE-2018-21153

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.50, EX2700 before 1.0.1.32, EX6100v2 before 1.0.1.70, EX6150v2 before 1.0.1.70, EX6200v2 before 1.0.1.62, EX6400 before 1.0.1.78, EX7300 before 1.0.1.62...

CVE-2018-21153

The CVE-2018-21153 entry describes a pre-auth buffer overflow affecting multiple NETGEAR devices. Affected products include D7800 (pre-1.0.1.34), DM200 (pre-1.0.0.50), EX-series (EX2700, EX6100v2, EX6150v2, EX6200v2, EX6400, EX7300, EX8000) with various pre-patch version thresholds, plus R6100, R...

CVE-2018-21152

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, R7500v2 before 1.0.3.26, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR4300v2 before 1.0.0.54, and WNDR4500v3 before 1.0.0.54...

CVE-2018-21152

CVE-2018-21152 affects multiple NETGEAR devices via an authenticated-command-injection flaw. The initial and connected records specify affected models and firmware versions: D7800 prior to 1.0.1.34; R7500v2 prior to 1.0.3.26; R7800 prior to 1.0.2.42; R8900 prior to 1.0.3.10; R9000 prior to 1.0.3....

CVE-2018-21149

CVE-2018-21149 affects NETGEAR devices (various gateways/routers) via a stack-based buffer overflow exploitable by an authenticated user. Affected products/versions include D7800 <1.0.1.34, DM200 <1.0.0.50, R6100 <1.0.1.22, R7500 <1.0.0.122, R7800 <1.0.2.42, R8900 <1.0.3.10, R90...

CVE-2018-21149

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.50, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR3700v4 before 1.0.2.96...

CVE-2018-21100

CVE-2018-21100 concerns NETGEAR R7800 routers pre-1.0.2.60, vulnerable to a command injection by an authenticated user. The NVD entry lists CVSS-3.1/8.0 (Adjacent network, Low complexity, Privileges Required: Low, No user interaction) with high impacts on confidentiality, integrity, and availabil...

CVE-2018-21100

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user...

CVE-2018-21099

CVE-2018-21099 affects NETGEAR R7800 routers, with the vulnerability stemming from a command injection flaw that can be exploited by an authenticated user. Affected condition: devices running firmware prior to 1.0.2.60 . Reported impacts cover confidentiality, integrity, and availability when exp...

CVE-2018-21099

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user...

CVE-2018-21098

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user...

CVE-2018-21098

CVE-2018-21098: NETGEAR R7800 devices with firmware older than 1.0.2.60 are vulnerable to command injection by an authenticated user. The issue affects the router’s ability to execute commands in contexts controlled by the attacker, impacting confidentiality, integrity and availability as indicat...

CVE-2018-21096

Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1....