CVE-2017-18864: Buffer Copy without Checking Size of Input

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R6900P before 1.0.0.56, R7100LG before 1.0.0.32, R7300...

PT-2020-8411

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400 versions prior to 1.0.1.24 NETGEAR R6400v2 versions prior to 1.0.2.32 NETGEAR R6700 versions prior to 1.0.1.22 NETGEAR R6900 versions prior to 1.0.1.22 NETGEAR R7000 versions prior to 1.0.9.4 NETGEAR R7000P versions prior to...

Design/Logic Flaw

Certain NETGEAR devices are affected by password recovery and file access. This affects D8500 1.0.3.27 and earlier, DGN2200v4 1.0.0.82 and earlier, R6300v2 1.0.4.06 and earlier, R6400 1.0.1.20 and earlier, R6400v2 1.0.2.18 and earlier, R6700 1.0.1.22 and earlier, R6900 1.0.1.20 and earlier, R7000...

CVE-2017-18853: Exposure of Sensitive Information to an Unauthorized Actor

Certain NETGEAR devices are affected by password recovery and file access. This affects D8500 1.0.3.27 and earlier, DGN2200v4 1.0.0.82 and earlier, R6300v2 1.0.4.06 and earlier, R6400 1.0.1.20 and earlier, R6400v2 1.0.2.18 and earlier, R6700 1.0.1.22 and earlier, R6900 1.0.1.20 and earlier, R7000...

CVE-2018-21225

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, R6700 before 1.0.1.30, R6700v2 before 1.2.0.16, R6800 before 1.2.0.16, R6900 before 1.0.1.30, R6900P before 1.2.0.22, R6900v2 befor...

PT-2020-8869

Name of the Vulnerable Software and Affected Versions NETGEAR D7000 versions prior to 1.0.1.60 NETGEAR D7800 versions prior to 1.0.1.34 NETGEAR D8500 versions prior to 1.0.3.39 NETGEAR R6700 versions prior to 1.0.1.30 NETGEAR R6700v2 versions prior to 1.2.0.16 NETGEAR R6800 versions prior to...

CVE-2018-21225: Improper Neutralization of Special Elements used in an OS Command

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, R6700 before 1.0.1.30, R6700v2 before 1.2.0.16, R6800 before 1.2.0.16, R6900 before 1.0.1.30, R6900P before 1.2.0.22, R6900v2 befor...

CVE-2018-21156

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.38, D6400 before 1.0.0.74, D7000v2 before 1.0.0.74, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.102, DGN2200Bv4 before 1.0.0.102, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70,...

PT-2020-8737

Name of the Vulnerable Software and Affected Versions D8500 versions 1.0.3.42 and earlier EX3700 versions 1.0.0.70 and earlier EX3800 versions 1.0.0.70 and earlier EX6000 versions 1.0.0.30 and earlier EX6100 versions 1.0.2.24 and earlier EX6120 versions 1.0.0.40 and earlier EX6130 versions 1.0.0....

CVE-2018-21227

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, R6400v2 before 1.0.2.34, R6700 before 1.0.1.30, R6900 before 1.0.1.30, R6900P before 1.0.0.62, R7000 before 1.0.9.12, R7000P before 1.0.0.62, R7500v2 before 1.0.3.26, R7800 befo...

CVE-2017-18704

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.32, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.16, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 befo...

CVE-2018-21227

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, R6400v2 before 1.0.2.34, R6700 before 1.0.1.30, R6900 before 1.0.1.30, R6900P before 1.0.0.62, R7000 before 1.0.9.12, R7000P before 1.0.0.62, R7500v2 before 1.0.3.26, R7800 befo...

CVE-2018-21227

CVE-2018-21227 affects multiple NETGEAR routers: D7800 <1.0.1.34, R6400v2 <1.0.2.34, R6700 <1.0.1.30, R6900 <1.0.1.30, R6900P <1.0.0.62, R7000 <1.0.9.12, R7000P <1.0.0.62, R7500v2 <1.0.3.26, R7800 <1.0.2.42, R9000 <1.0.3.10, WNDR4300v2 <1.0.0.50, and WNDR4500v3

PT-2020-8260

Name of the Vulnerable Software and Affected Versions: NETGEAR D7800 versions prior to 1.0.1.28 NETGEAR R6400 versions prior to 1.01.32 NETGEAR R6400v2 versions prior to 1.0.2.44 NETGEAR R6700 versions prior to 1.0.1.36 NETGEAR R6900 versions prior to 1.0.1.34 NETGEAR R6900P versions prior to...

PT-2020-8871

Name of the Vulnerable Software and Affected Versions NETGEAR D7800 versions prior to 1.0.1.34 NETGEAR R6400v2 versions prior to 1.0.2.34 NETGEAR R6700 versions prior to 1.0.1.30 NETGEAR R6900 versions prior to 1.0.1.30 NETGEAR R6900P versions prior to 1.0.0.62 NETGEAR R7000 versions prior to...

CVE-2017-18700: Improper Neutralization of Input During Web Page Generation

Certain NETGEAR devices are affected by stored XSS. This affects D6400 before 1.0.0.60, D7000 before 1.0.1.50, D8500 before 1.0.3.29, EX6200 before 1.0.3.84, EX7000 before 1.0.0.60, R6250 before 1.0.4.16, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.3...

CVE-2018-21227: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, R6400v2 before 1.0.2.34, R6700 before 1.0.1.30, R6900 before 1.0.1.30, R6900P before 1.0.0.62, R7000 before 1.0.9.12, R7000P before 1.0.0.62, R7500v2 before 1.0.3.26, R7800 befo...

Stack overflow

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects DGN2200Bv4 before 1.0.0.102, DGN2200v4 before 1.0.0.102, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, EX6000 before 1.0.0.30, EX6100 before 1.0.2.22, EX6120 before 1.0.0.40, EX6130 befo...

CVE-2018-21163

CVE-2018-21163 affects several NETGEAR devices (e.g., DGN2200Bv4, DGN2200v4, EX-series, R-series, WN-series, etc.) through specific firmware versions up to listed floors. Description: an authenticated user can trigger a stack-based buffer overflow in affected devices. The affected component is a ...

CVE-2018-21134

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6700 before 1.0.1.48, R7900 before 1.0.2.16, R6900 before 1.0.1.48, R7000P before 1.3.1.44, R6900P before 1.3.1.44, R6250 before 1.0.4.30, R6300v2 before 1.0.4.32, R6400 before...