Stack overflow

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42...

CVE-2017-18701

The CVE-2017-18701 issue affects NETGEAR R6700 (before 1.0.1.36) and R6900 (before 1.0.1.34) routers. A reflected XSS arises from insufficient input validation in the web application, enabling execution of client-side code via a crafted URL. Public details on exploitation are not provided in the ...

CVE-2017-18701

Certain NETGEAR devices are affected by reflected XSS. This affects R6700 before 1.0.1.36 and R6900 before 1.0.1.34...

CVE-2017-18702

NETGEAR R6220 devices before 1.1.0.60 are affected by incorrect configuration of security settings...

CVE-2017-18702

NETGEAR R6220 devices running firmware older than 1.1.0.60 are affected by incorrect configuration of security settings. Root cause: misconfigured security settings. Impact: partial confidentiality and partial integrity impact; availability unaffected. Remediation: update to firmware 1.1.0.60 or ...

CVE-2017-18703

CVE-2017-18703 describes a Cross-Site Request Forgery (CSRF) in a wide range of NETGEAR devices. The web application does not adequately validate request origins, enabling CSRF exploitation that could affect multiple models (examples: D1500, D500, D6100, D7000, D7800, EX6100v2, EX6150v2, JNR1010v...

CVE-2017-18703

Certain NETGEAR devices are affected by CSRF. This affects D1500 before 1.0.0.25, D500 before 1.0.0.25, D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800 before 1.0.1.28, EX6100v2 before 1.0.1.60, EX6150v2 before 1.0.1.60, JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.16, JWNR2010v5 before...

CVE-2017-18704

CVE-2017-18704 describes an information-disclosure vulnerability in various NETGEAR devices where an attacker can read arbitrary files. Affected models and firmware ranges include D6220 (< 1.0.0.32), D6400 (< 1.0.0.60), D8500 (< 1.0.3.29), R6250 (< 1.0.4.16), R6300v2 (< 1.0.4.18), ...

CVE-2017-18704

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.32, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.16, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 befo...

CVE-2017-18705

CVE-2017-18705 affects multiple NETGEAR devices (D7800, R6100, R7500, R7500v2, R7800, R9000, WNDR3700v4, WNDR4300, WNDR4300v2, WNDR4500v3, WNR2000v5) where a misconfiguration of security settings is present. The advisory lists affected firmware versions (e.g., D7800 < 1.0.1.28; R6100 < 1.0....

CVE-2017-18705

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.88, WNDR4300 before 1.0.2.90,...

CVE-2017-18706

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6100 before 1.0.1.20, R7500 before 1.0.0.118, WNDR3700v4 before 1.0.2.88, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.62...

CVE-2017-18706

CVE-2017-18706 affects several NETGEAR routers where security settings were incorrectly configured. Affected devices and firmware ranges include R6100 prior to 1.0.1.20, R7500 prior to 1.0.0.118, WNDR3700v4 prior to 1.0.2.88, WNDR4300 prior to 1.0.2.90, WNDR4300v2 prior to 1.0.0.48, WNDR4500v3 pr...

CVE-2017-18707

CVE-2017-18707 affects NETGEAR R8300 and R8500 routers with versions before 1.0.2.106, due to a buffer overflow that can be triggered by an authenticated user. Connected sources corroborate the affected models and versions; the root cause is described as a memory boundary issue leading to buffer/...

CVE-2017-18707

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R8300 before 1.0.2.106 and R8500 before 1.0.2.106...

CVE-2017-18708

The CVE-2017-18708 entry concerns NETGEAR R8300 and R8500 wireless routers. Affected products are: NETGEAR R8300 and NETGEAR R8500 running firmware prior to 1.0.2.94. Root cause: a Cross‑Site Request Forgery (CSRF) vulnerability in the device’s web application that does not adequately validate re...

CVE-2017-18708

Certain NETGEAR devices are affected by CSRF. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94...

CVE-2017-18709

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94...

CVE-2017-18709

CVE-2017-18709 affects NETGEAR R8300 and R8500 routers prior to firmware version 1.0.2.94. Root cause is incorrect configuration of security settings. Impact per CVSS indicates confidentiality, integrity, and availability can be HIGH (CVSS3.1) with local access, low exploit complexity, and no use...

CVE-2017-18710

CVE-2017-18710 affects certain NETGEAR routers, specifically R8300 and R8500, with firmware versions before 1.0.2.106. The disclosed issue is sensitive information disclosure, with an impact on confidentiality (PARTIAL to LOW per CVSS in provided metrics). The available documents describe the aff...