CVE-2021-45541

CVE-2021-45541 affects several NETGEAR devices via a command injection vulnerability that can be triggered by an authenticated user. The advisory lists affected models and firmware ranges, including R7900 (before 1.0.4.38), R7900P (before 1.4.2.84), R8000 (before 1.0.4.68), R8000P (before 1.4.2.8...

CVE-2021-45605

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 before 1.0.1.68, R7000 before 1.0.11.116, R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7900 before 1.0.4.38, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, and XR300 before...

CVE-2021-45606

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126, R7900 before 1.0.4.46, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.74, R8000P before 1.4.2.84, RAX200 before 1.0.4.12...

CVE-2021-45616

CVE-2021-45616 affects a wide range of NETGEAR devices (CBR750, LAX20, MK62, MR60, MS60, R6900P, R7000/R7000P, R7850, R7900/8000 series, RAX 15/20/200/35v2/40v2/43/45/50/75/80, RBK/RBR/RBS series, RS400, XR1000). The root cause is a pre-authenticated command-injection vulnerability allowing an un...

CVE-2021-45616

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 3.2.18.2, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140, R78...

CVE-2021-45647

CVE-2021-45647 affects NETGEAR devices, causing disclosure of sensitive information. Affected models include EAX80 (before 1.0.1.62), EX7000 (before 1.0.1.104), R6120 (before 1.0.0.76), R6220/R6230 (before 1.1.0.110), R6260/R6850/R6350/R6330 (before 1.1.0.78), R6800 (before 1.2.0.76), R6900v2 (be...

CVE-2021-45650

CVE-2021-45650 affects several NETGEAR routers, including R7000 (before 1.0.11.110), R7900 (before 1.0.4.30), R8000 (before 1.0.4.62), RS400 (before 1.5.1.80), R6400v2 (before 1.0.4.102), R7000P (before 1.3.2.126), R6700v3 (before 1.0.4.102), and R6900P (before 1.3.2.126). The vulnerability leads...

CVE-2021-45650

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before 1.0.4.62, RS400 before 1.5.1.80, R6400v2 before 1.0.4.102, R7000P before 1.3.2.126, R6700v3 before 1.0.4.102, and R6900P before 1.3.2.126...

CVE-2021-45671

CVE-2021-45671 affects a range of NETGEAR devices (e.g., CBR40 < 2.5.0.10, EAX80 < 1.0.1.62, EX7500 < 1.0.0.72, R7900 < 1.0.4.38, R8000 < 1.0.4.68, RAX200 < 1.0.4.120, RBS40V < 2.6.1.4, RBW30 < 2.6.1.4, MR60 < 1.0.6.110, RAX20 < 1.0.2.82, RAX45 < 1.0.2.72, RAX80 &...

CVE-2021-45673

Certain NETGEAR devices are affected by stored XSS. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before 1.0.4.62, RAX200 before 1.0.3.106, R7000P before 1.3.3.140, RAX80 before 1.0.3.106, R6900P before 1.3.3.140, and RAX75 before 1.0.3.106...

CVE-2021-45674

Certain NETGEAR devices are affected by stored XSS. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before 1.0.4.62, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX200 before 1.0.3.106, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106...

CVE-2021-45674

CVE-2021-45674 concerns NETGEAR routers affected by a stored Cross‑Site Scripting vulnerability. The documented impacted models/versions are: R7000 prior to 1.0.11.110, R7900 prior to 1.0.4.30, R8000 prior to 1.0.4.62, RAX15 prior to 1.0.2.82, RAX20 prior to 1.0.2.82, RAX200 prior to 1.0.3.106, R...

Netgear NETGEAR 安全漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in certain NETGEAR devices that stems from Certain NETGEAR devices are vulnerable to buffer overflow by an...

NETGEAR 安全漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in certain NETGEAR devices that stems from a buffer overflow affecting certain NETGEAR devices by an...

Netgear NETGEAR 命令注入漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in certain NETGEAR devices that can be exploited by unauthenticated attackers for command injection. The...

Netgear WNR3500L和NETGEAR 安全漏洞

Netgear WNR3500L and NETGEAR are both products of Netgear, Inc.WNR3500L is a wireless router.NETGEAR is a router. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in certain NETGEAR devices that originates from a buffer...

Netgear NETGEAR 缓冲区错误漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in certain NETGEAR devices that stems from Certain NETGEAR devices are affected by a stack-based buffer...

Netgear NETGEAR 信息泄露漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in NETGEAR devices, which can lead to the disclosure of sensitive information. The following products and...

CVE-2021-40847

The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code execution as root via a MitM attack. While the parental controls themselves are not enabled by default on the routers, the Circle update daemon, circled, is enabled ...

CVE-2021-40847

The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code execution as root via a MitM attack. While the parental controls themselves are not enabled by default on the routers, the Circle update daemon, circled, is enabled ...