CVE-2020-35782

The CVE-2020-35782 entry affects NETGEAR Smart Managed Plus switches: JGS516PE, JGS524Ev2, JGS524PE, and GS116Ev2, all prior to firmware version 2.6.0.48. The underlying issue is lack of function-level access control, combined with a TFTP firmware update mechanism that does not properly validate ...

CVE-2020-35783

CVE-2020-35783 affects Netgear ProSafe/Smart+ switches JGS516PE, GS116Ev2, JGS524Ev2, and JGS524PE (pre-2.6.0.48). A lack of function-level access control and NSDP protocol behavior allow unauthenticated remote attackers to read all switch configuration parameters via read requests. Affected vers...

CVE-2020-35783

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and JGS524PE before 2.6.0.48. The NSDP protocol version allows unauthenticated remote attackers to obtain all the switc...

CVE-2020-35784

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and GS116Ev2 before 2.6.0.48...

CVE-2020-35784

CVE-2020-35784 affects NETGEAR Smart-Managed Plus switches: JGS516PE, JGS524PE, JGS524Ev2, and GS116Ev2, all before version 2.6.0.48. The root cause is lack of function-level access control, enabling partial disclosure/modification of resources. CVSS basis provided: high to medium impact dependin...

CVE-2020-35785

NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication aka PSV-2020-0363, PSV-2020-0364, and PSV-2020-0365...

CVE-2020-35785

NETGEAR DGN2200v1 devices with firmware versions prior to 1.0.0.60 are affected by an HTTPd authentication mishandling vulnerability (CVE-2020-35785). The issue enables unauthenticated or weakly authenticated access that could allow a remote attacker to exploit the HTTPd service. Public sources i...

CVE-2020-35786

The CVE-2020-35786 issue affects NETGEAR R7800 devices running versions prior to 1.0.2.74, where a buffer overflow can be triggered by an authenticated user. The vulnerability is described as a buffer overflow in these devices, indicating potential impact on availability (per NVD metrics) and the...

CVE-2020-35786

NETGEAR R7800 devices before 1.0.2.74 are affected by a buffer overflow by an authenticated user...

CVE-2020-35787

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.36, D7000 before 1.0.1.70, EX6200v2 before 1.0.1.78, EX7000 before 1.0.1.78, EX8000 before 1.0.1.186, JR6150 before 1.0.1.18, PR2000...

CVE-2020-35787

CVE-2020-35787 is a buffer overflow in a range of NETGEAR devices that can be triggered by an authenticated user. Affected products and firmware ranges include: D3600 < 1.0.0.76, D6000 < 1.0.0.76, D6200 < 1.1.00.36, D7000 < 1.0.1.70, EX6200v2 < 1.0.1.78, EX7000 < 1.0.1.78, EX800...

CVE-2020-35788

CVE-2020-35788 concerns NETGEAR WAC104 wireless access points. The vulnerability is described as a buffer overflow exploitable by an authenticated user, affecting devices prior to version 1.0.4.13. The primary public source describes the issue/cvss metrics and references a Netgear security adviso...

CVE-2020-35788

NETGEAR WAC104 devices before 1.0.4.13 are affected by a buffer overflow by an authenticated user...

CVE-2020-35789

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user...

CVE-2020-35789

CVE-2020-35789 affects NETGEAR NMS300 devices prior to 1.6.0.27. An authenticated user can perform command injection, per multiple connected documents. The vulnerability is described as a command injection issue with authenticated access; there are no details on exploit vectors beyond authenticat...

CVE-2020-35790

CVE-2020-35790 affects certain NETGEAR routers: D7800 (≤1.0.1.56), R7800 (≤1.0.2.68), R8900 (≤1.0.4.26), and R9000 (≤1.0.4.26). The issue is a command injection by an authenticated user. CVSS details are provided (v3.1: AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H; base score 6.8; CVSS2 base 5.2). No expl...

CVE-2020-35790

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 before 1.0.4.26, and R9000 before 1.0.4.26...

CVE-2020-35791

CVE-2020-35791 affects certain NETGEAR routers (R7800 < 1.0.2.68, R8900 < 1.0.5.2, R9000

CVE-2020-35791

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.68, R8900 before 1.0.5.2, and R9000 before 1.0.5.2...

CVE-2020-35792

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7500v2 before 1.0.3.48, R8900 before 1.0.5.2, R9000 before 1.0.5.2, and R7800 before 1.0.2.68...