Stack overflow

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.44, D6400 before 1.0.0.78, D7000v2 before 1.0.0.51, D8500 before 1.0.3.42, DGN2200v4 before 1.0.0.110, DGND2200Bv4 before 1.0.0.109, EX3700 before 1.0.0.70, EX3800...

CVE-2019-20729

CVE-2019-20729 affects several NETGEAR router models (e.g., JNDR3000, R6250, R6300v2, R6400/r6400v2, R6700, R6900, R7000, R6900P/R7000P, R7300DST, R7900/R8000, R7900P/R8000P, R8300, R8500, WNDR3400v3, WNDR4500v2, WNR3500Lv2 and others) with an issue described as incorrect configuration of securit...

CVE-2019-20729

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JNDR3000 before 1.0.0.22, R6250 before 1.0.4.26, R6300v2 before 1.0.4.22, R6400 before 1.0.1.36, R6400v2 before 1.0.2.52, R6700 before 1.0.1.44, R6900 before 1.0.1.44, R7000 before 1.0.9.28, R6900P...

Injection Vulnerability in Multiple NETGEAR Products (CNVD-2020-27210)

The NETGEAR R6400, among others, is a wireless router from NETGEAR. An injection vulnerability exists in multiple NETGEAR products and can be exploited by an attacker to cause the system or product to be parsed or interpreted in an incorrect manner...

Command Injection Vulnerability in Multiple NETGEAR Products (CNVD-2020-26954)

The NETGEAR R6400, among others, is a wireless router from NETGEAR. A command injection vulnerability exists in multiple NETGEAR products. The vulnerability arises when a network system or product lacks proper validation of user input data during the process of entering constructed commands, data...

CVE-2019-20762: Buffer Copy without Checking Size of Input

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D8500 before 1.0.3.43, R8500 before 1.0.2.128, R8300 before 1.0.2.128, R8000 before 1.0.4.28, R7300DST before 1.0.0.68, R7100LG before 1.0.0.48, R6900P before 1.3.1.44, R7900P before 1.4.1.30, R8000P...

PT-2020-10693

Name of the Vulnerable Software and Affected Versions NETGEAR D6220 versions prior to 1.0.0.48 NETGEAR D6400 versions prior to 1.0.0.82 NETGEAR D7000v2 versions prior to 1.0.0.52 NETGEAR D8500 versions prior to 1.0.3.43 NETGEAR R6250 versions prior to 1.0.4.34 NETGEAR R6400 versions prior to...

PT-2020-10694

Name of the Vulnerable Software and Affected Versions NETGEAR D6220 versions 1.0.0.0 through 1.0.0.47 NETGEAR D6400 versions 1.0.0.0 through 1.0.0.81 NETGEAR D7000v2 versions 1.0.0.0 through 1.0.0.51 NETGEAR D8500 versions 1.0.0.0 through 1.0.3.42 NETGEAR R6250 versions 1.0.0.0 through 1.0.4.33...

PT-2020-10731

Name of the Vulnerable Software and Affected Versions NETGEAR EX7000 versions prior to 1.0.0.64 NETGEAR EX6200 versions prior to 1.0.3.86 NETGEAR EX6150 versions prior to 1.0.0.38 NETGEAR EX6130 versions prior to 1.0.0.22 NETGEAR EX6120 versions prior to 1.0.0.40 NETGEAR EX6100 versions prior to...

CVE-2019-20732: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6220 before 1.0.0.40, D7000v2 before 1.0.0.74, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.102, DGND2200Bv4 before 1.0.0.102, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, EX6000 before 1.0.0.30,...

CVE-2019-20719: Buffer Copy without Checking Size of Input

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D7000v2 before 1.0.0.52, D8500 before 1.0.3.43, R6250 before 1.0.4.34, R6400 before 1.0.1.44, R6400v2 before 1.0.2.62, R7000P before 1.4.1.30, R7100LG...

CVE-2019-20713: Out-of-bounds Write

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D8500 before 1.0.3.44, R6250 before 1.0.4.34, R6300v2 before 1.0.4.32, R6400 before 1.0.1.46, R6700 before 1.0.2.6, R6900 before 1.0.2.4, R6900P before 1.3.1.64, R7000 before 1.0.9.42,...

CVE-2019-20734: Buffer Copy without Checking Size of Input

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.40, D8500 before 1.0.3.39, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, EX6000 before 1.0.0.30, EX6100 before 1.0.2.22, EX6120 before 1.0.0.40, EX6130 before 1.0.0.22,...

CVE-2019-20718: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D7000v2 before 1.0.0.52, D8500 before 1.0.3.43, R6250 before 1.0.4.34, R6400 before 1.0.1.44, R6400v2 before 1.0.2.62, R7100LG before 1.0.0.48, R7300DST...

CVE-2019-20729: Undefined Security Weakness

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JNDR3000 before 1.0.0.22, R6250 before 1.0.4.26, R6300v2 before 1.0.4.22, R6400 before 1.0.1.36, R6400v2 before 1.0.2.52, R6700 before 1.0.1.44, R6900 before 1.0.1.44, R7000 before 1.0.9.28, R6900P...

CVE-2019-20737: Out-of-bounds Write

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.44, D6400 before 1.0.0.78, D7000v2 before 1.0.0.51, D8500 before 1.0.3.42, DGN2200v4 before 1.0.0.106, DGND2200Bv4 before 1.0.0.106, EX3700 before 1.0.0.70, EX3800...

CVE-2019-20753: Out-of-bounds Write

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects DGN2200v1 before 1.0.0.58, D8500 before 1.0.3.42, D7000v2 before 1.0.0.51, D6400 before 1.0.0.78, D6220 before 1.0.0.44, JNDR3000 before 1.0.0.24, R8000 before 1.0.4.18, R8500 before...

Netgear R6400 upnp stack overflow vulnerability

The Netgear R6400 is Netgear's AC1750 wireless router. A stack overflow vulnerability exists in the Netgear R6400 upnp, which can be exploited by an attacker to execute arbitrary code or cause a denial of service...

Netgear R6400 - Remote Code Execution

Exploit Title: Netgear R6400 - Remote Code Execution Date: 2019-12-14 Exploit Author: Kevin Randall CVE: CVE-2016-6277 Vendor Homepage: https://www.netgear.com/ Category: Hardware Version: V1.0.7.21.1.93 PoC !/usr/bin/python import urllib2 IPADDR = "192.168.1.1" PROTOCOL = "http://" DIRECTORY =...

Netgear R6400 Remote Code Execution

Exploit Title: Netgear R6400 - Remote Code Execution Date: 2019-12-14 Exploit Author: Kevin Randall CVE: CVE-2016-6277 Vendor Homepage: https://www.netgear.com/ Category: Hardware Version: V1.0.7.21.1.93 PoC !/usr/bin/python import urllib2 IPADDR = "192.168.1.1" PROTOCOL = "http://" DIRECTORY =...