CVE-2021-45523

NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user...

CVE-2021-45523

NETGEAR R7000 devices with firmware older than 1.0.9.42 are affected by a buffer overflow exploitable by an authenticated user (network-context). Affected component is the device firmware; root cause is a buffer overflow in pre-1.0.9.42 code paths. Impact in the sources is high for availability; ...

CVE-2021-45528

This CVE concerns NETGEAR devices affected by a buffer overflow exploitable by an authenticated user. Affected models and firmware ranges include R6300v2 before 1.0.4.52, R6400 before 1.0.1.52, R6900 before 1.0.2.8, R7000 before 1.0.9.88, R7900 before 1.0.3.18, R8000 before 1.0.4.46, R7900P befor...

CVE-2021-45529

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects CBR40 before 2.3.5.12, D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, R6400 before 1.0.1.70, R7000 before 1.0.11.126, R6900P before 1.3.2.124, R7000P before 1.3.2.124, R7900 before 1.0.4.30, R8000...

CVE-2021-45529

The CVE-2021-45529 entry concerns a buffer overflow in certain NETGEAR routers caused by an authenticated user. Affected devices and versions include CBR40 before 2.3.5.12, D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, R6400 before 1.0.1.70, R7000 before 1.0.11.126, R6900P before 1.3.2.124, R70...

CVE-2021-45540

CVE-2021-45540 affects certain NETGEAR routers; vulnerability is a command injection exploitable by an authenticated user. Affected devices and firmware versions include: R7000 < 1.0.11.126, R7900 < 1.0.4.46, R7900P < 1.4.2.84, R7960P < 1.4.2.84, R8000 < 1.0.4.74, R8000P < 1.4.2...

CVE-2021-45540

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7000 before 1.0.11.126, R7900 before 1.0.4.46, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.74, R8000P before 1.4.2.84, RAX200 before 1.0.3.106, MR60 before 1.0.6.110, RAX45...

CVE-2021-45553

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7000 before 1.0.11.126, R6900P before 1.3.2.126, and R7000P before 1.3.2.126...

CVE-2021-45554

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.74, R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R7000 before 1.0.11.126, R6900P before 1.3.3.140, R7000P before 1.3.3.140, and R8000 before 1.0.4.74...

CVE-2021-45605

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 before 1.0.1.68, R7000 before 1.0.11.116, R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7900 before 1.0.4.38, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, and XR300 before...

CVE-2021-45606

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126, R7900 before 1.0.4.46, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.74, R8000P before 1.4.2.84, RAX200 before 1.0.4.12...

CVE-2021-45607

CVE-2021-45607 affects several NETGEAR routers (R6400v2, R6700v3, R6900P, R7000, R7000P, RAX200, RAX75, RAX80) with a stack-based buffer overflow exploitable by an authenticated user. The provided records list affected versions as: R6400v2 < 1.0.4.118; R6700v3 < 1.0.4.118; R6900P < 1.3.3...

CVE-2021-45607

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140, RAX200 before 1.0.5.126, RAX75 before 1.0.5.126, and RAX80...

CVE-2021-45616

CVE-2021-45616 affects a wide range of NETGEAR devices (CBR750, LAX20, MK62, MR60, MS60, R6900P, R7000/R7000P, R7850, R7900/8000 series, RAX 15/20/200/35v2/40v2/43/45/50/75/80, RBK/RBR/RBS series, RS400, XR1000). The root cause is a pre-authenticated command-injection vulnerability allowing an un...

CVE-2021-45616

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 3.2.18.2, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140, R78...

CVE-2021-45638

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.102, D7000v2 before 1.0.0.74, D8500 before 1.0.3.60, DC112A before 1.0.0.56, R6300v2 before 1.0.4.50, R6400 before 1.0.1.68, R7000 before...

CVE-2021-45639

CVE-2021-45639 describes a reflected cross-site scripting (XSS) vulnerability affecting a wide range of NETGEAR devices. The issue impacts multiple models (e.g., CBR40, EAX20, EAX80, EX6120/6130/7000/7500, R7000/7900/7960P/8000/AX families, XR300, EX3700, MR60, R6900P, R7000P, R8000P, RAXxx, RBR/...

CVE-2021-45646

NETGEAR R7000 devices before 1.0.11.116 are affected by disclosure of sensitive information...

CVE-2021-45646

CVE-2021-45646 affects NETGEAR R7000 devices running versions prior to 1.0.11.116, where a vulnerability leads to disclosure of sensitive information. The available sources identify the affected product and the vulnerable version, but do not provide a detailed root cause in the linked documents. ...

CVE-2021-45647

CVE-2021-45647 affects NETGEAR devices, causing disclosure of sensitive information. Affected models include EAX80 (before 1.0.1.62), EX7000 (before 1.0.1.104), R6120 (before 1.0.0.76), R6220/R6230 (before 1.1.0.110), R6260/R6850/R6350/R6330 (before 1.1.0.78), R6800 (before 1.2.0.76), R6900v2 (be...