Lucene search
+L

396 matches found

CVE
CVE
•added 2020/04/21 6:41 p.m.•79 views

CVE-2017-18794

CVE-2017-18794 applies to NETGEAR devices with command-injection risk. Affected models and firmware ranges include R6300v2 prior to 1.0.4.8_10.0.77, R6400 prior to 1.0.1.24, R6700 prior to 1.0.1.26, R7000 prior to 1.0.9.10, R7100LG prior to 1.0.0.32, R7900 prior to 1.0.1.18, R8000 prior to 1.0.3....

8.4CVSS8.6AI score0.00777EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/04/21 6:38 p.m.•43 views

CVE-2017-18796

Certain NETGEAR devices are affected by command injection. This affects R6400 before 1.0.1.24, R6700 before 1.0.1.26, R6900 before 1.0.1.28, R7000 before 1.0.9.10, R7000P before 1.0.1.16, R6900P before 1.0.1.16, and R7800 before 1.0.2.36...

6.7CVSS7AI score0.00555EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/04/21 6:37 p.m.•38 views

CVE-2017-18797

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400 before 1.0.1.24, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100...

6.2CVSS6.3AI score0.00335EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/04/21 12:00 a.m.•17 views

Multiple NETGEAR Product License Issue Vulnerabilities (CNVD-2020-42252)

NETGEAR R6400 and others are products of NETGEAR USA.NETGEAR R6400 is a wireless router.NETGEAR D6400 is a wireless modem.NETGEAR D6220 is a wireless modem. A security vulnerability exists in multiple NETGEAR products. An attacker could exploit the vulnerability to bypass authentication...

8.4CVSS6.9AI score0.00355EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/21 12:00 a.m.•10 views

CVE-2017-18794: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Certain NETGEAR devices are affected by command injection. This affects R6300v2 before 1.0.4.810.0.77, R6400 before 1.0.1.24, R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, R8500 before 1.0.2.100, and D6100 before 1.0.0.500.0.5...

8.4CVSS7.8AI score0.00777EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/04/21 12:00 a.m.•3 views

PT-2020-8345

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400 versions prior to 1.0.1.24 NETGEAR R6700 versions prior to 1.0.1.26 NETGEAR R6900 versions prior to 1.0.1.28 NETGEAR R7000 versions prior to 1.0.9.10 NETGEAR R7000P versions prior to 1.0.1.16 NETGEAR R6900P versions prior to...

6.7CVSS0.00555EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2020/04/21 12:00 a.m.•2 views

PT-2020-8343

Name of the Vulnerable Software and Affected Versions: NETGEAR R6300v2 versions prior to 1.0.4.8 10.0.77 NETGEAR R6400 versions prior to 1.0.1.24 NETGEAR R6700 versions prior to 1.0.1.26 NETGEAR R7000 versions prior to 1.0.9.10 NETGEAR R7100LG versions prior to 1.0.0.32 NETGEAR R7900 versions pri...

8.4CVSS0.00777EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/21 12:00 a.m.•7 views

CVE-2017-18796: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Certain NETGEAR devices are affected by command injection. This affects R6400 before 1.0.1.24, R6700 before 1.0.1.26, R6900 before 1.0.1.28, R7000 before 1.0.9.10, R7000P before 1.0.1.16, R6900P before 1.0.1.16, and R7800 before 1.0.2.36...

6.7CVSS6.8AI score0.00555EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/21 12:00 a.m.•9 views

CVE-2017-18797: Exposure of Sensitive Information to an Unauthorized Actor

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400 before 1.0.1.24, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100...

6.2CVSS6.6AI score0.00335EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/04/21 12:00 a.m.•6 views

PT-2020-8346

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400 versions prior to 1.0.1.24 NETGEAR R7900 versions prior to 1.0.1.18 NETGEAR R8000 versions prior to 1.0.3.54 NETGEAR R8500 versions prior to 1.0.2.100 Description: The issue allows an attacker to read arbitrary files on certain...

6.2CVSS0.00335EPSS
SaveExploits0References5
OSV
OSV
•added 2020/04/20 4:15 p.m.•16 views

CVE-2017-18846

Certain NETGEAR devices are affected by a stack-based buffer overflow. This affects R6250 before 1.0.4.12, R6400v2 before 1.0.2.32, R7000P/R6900P before 1.0.0.56, R7900 before 1.0.1.18, R8300 before 1.0.2.1001.0.82, R8500 before 1.0.2.1001.0.82, and D8500 before 1.0.3.29...

6.7CVSS6.2AI score0.00314EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/20 4:15 p.m.•31 views

Command injection

Certain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.26, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.12, R6400 before 1.01.24, R6400v2 before 1.0.2.30, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R6900P before 1.0.0.56, R7000 before...

4.6CVSS7.9AI score0.00887EPSS
SaveExploits0References1Affected Software16
CVE
CVE
•added 2020/04/20 3:23 p.m.•73 views

CVE-2017-18849

CVE-2017-18849 (NETGEAR) is a command-injection flaw affecting multiple router/modem models (D6220, D6400, D8500, R6250, R6400, R6400v2, R6700, R6900, R6900P, R7000, R7000P, R7100LG, R7300DST, R7900, R8000, R8300, R8500) with specific firmware targets listed in the description (e.g., D6220 < 1...

8.4CVSS7.9AI score0.00887EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2020/04/20 2:15 p.m.•18 views

CVE-2017-18850

Certain NETGEAR devices are affected by authentication bypass. This affects D6220 before 1.0.0.26, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.12, R6400 before 1.01.24, R6400v2 before 1.0.2.30, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R6900P before 1.0.0.56, R7000 before...

8.4CVSS5.8AI score0.00355EPSS
SaveExploits0References1
NVD
NVD
•added 2020/04/20 1:15 p.m.•30 views

CVE-2017-18851

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D8500 through 1.0.3.28, R6400 through 1.0.1.22, R6400v2 through 1.0.2.18, R8300 through 1.0.2.94, R8500 through 1.0.2.94, and R6100 through 1.0.1.12...

6.7CVSS6.8AI score0.0064EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/20 1:15 p.m.•28 views

Command injection

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D8500 through 1.0.3.28, R6400 through 1.0.1.22, R6400v2 through 1.0.2.18, R8300 through 1.0.2.94, R8500 through 1.0.2.94, and R6100 through 1.0.1.12...

4.6CVSS6.8AI score0.0064EPSS
SaveExploits0References1Affected Software5
Cvelist
Cvelist
•added 2020/04/20 12:50 p.m.•39 views

CVE-2017-18851

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D8500 through 1.0.3.28, R6400 through 1.0.1.22, R6400v2 through 1.0.2.18, R8300 through 1.0.2.94, R8500 through 1.0.2.94, and R6100 through 1.0.1.12...

6.7CVSS6.8AI score0.0064EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/20 12:00 a.m.•7 views

CVE-2017-18849: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Certain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.26, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.12, R6400 before 1.01.24, R6400v2 before 1.0.2.30, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R6900P before 1.0.0.56, R7000 before...

8.4CVSS7.6AI score0.00887EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/04/20 12:00 a.m.•3 views

PT-2020-8398

Name of the Vulnerable Software and Affected Versions: D8500 versions 1.0.3.28 and earlier R6400 versions 1.0.1.22 and earlier R6400v2 versions 1.0.2.18 and earlier R8300 versions 1.0.2.94 and earlier R8500 versions 1.0.2.94 and earlier R6100 versions 1.0.1.12 and earlier Description: The issue...

6.7CVSS0.0064EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/20 12:00 a.m.•7 views

CVE-2017-18851: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D8500 through 1.0.3.28, R6400 through 1.0.1.22, R6400v2 through 1.0.2.18, R8300 through 1.0.2.94, R8500 through 1.0.2.94, and R6100 through 1.0.1.12...

6.7CVSS6.8AI score0.0064EPSS
SaveExploits0References2
Rows per page
Query Builder