CVE-2020-26928

Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11...

CVE-2020-26929

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.100 and R6230 before 1.1.0.100...

CVE-2020-26929

CVE-2020-26929 affects certain NETGEAR routers (R6220 and R6230) with firmware older than 1.1.0.100, where an authenticated user can trigger a command injection. The root cause is not explicitly detailed beyond “command injection,” but the vulnerability is documented in Netgear’s advisory PSV-201...

CVE-2020-26930

NETGEAR EX7700 devices before 1.0.0.210 are affected by incorrect configuration of security settings...

CVE-2020-26930

NETGEAR EX7700 devices before firmware 1.0.0.210 are affected by an incorrect configuration of security settings. The connected documents do not provide further technical details (root cause, exploitability, or concrete fixes). No explicit remediation or exploitation status is described in the su...

CVE-2020-26931

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24...

CVE-2020-26931

CVE-2020-26931 affects certain NETGEAR wireless controllers (WC7500, WC7600, WC7600v2, WC9500) where sensitive information disclosure is possible. The issue is described as disclosure of sensitive information on these devices prior to version 6.5.5.24; mitigation is to upgrade to 6.5.5.24 or late...

CVE-2020-26919

NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

PT-2020-5878

Name of the Vulnerable Software and Affected Versions: NETGEAR JGS516PE versions prior to 2.6.0.43 Description: The issue is related to the lack of access control at the function level in NETGEAR JGS516PE devices. This can be exploited by a remote attacker to cause a denial of service. There is n...

NETGEAR Multiple Routers mini_httpd Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the minihttpd...

NETGEAR R8300 Command Injection Vulnerability

The NETGEAR R8300 is a wireless router from NETGEAR. A command injection vulnerability exists in the NETGEAR R8300 device versions prior to 1.0.2.134. The vulnerability arises from a failure of the network system or product to properly filter special characters, commands, etc. during user input t...

CVE-2020-25067

NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker...

CVE-2020-25067

NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker...

Command injection

NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker...

CVE-2020-25067

NETGEAR R8300 devices prior to firmware version 1.0.2.134 are affected by a command injection vulnerability (CVE-2020-25067) that can be exploited by an unauthenticated attacker. The issue arises from inadequate input filtering during user input, allowing an attacker to construct and execute comm...

CVE-2020-25067

NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker...

Multiple NETGEAR switching hubs vulnerable to cross-site request forgery

Overview GS716Tv2 and GS724Tv3 switching hubs provided by NETGEAR contain a cross-site request forgery vulnerability. Rei Yano reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact If a user views a malicious page...

CVE-2020-5621

Cross-site request forgery CSRF vulnerability in NETGEAR switching hubs GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified...

CVE-2020-5621

Cross-site request forgery CSRF vulnerability in NETGEAR switching hubs GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in NETGEAR switching hubs GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified...