CVE-2020-26918

Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 before 1.0.1.46, R6400v2 before 1.0.2.66, R6700v3 before 1.0.2.66, R7100LG before 1.0.0.50, R7300DST before 1.0.0.70, R7900 before 1.0.3.8, R8300 before 1.0.2.128, and R8500 befor...

CVE-2020-26918

Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 before 1.0.1.46, R6400v2 before 1.0.2.66, R6700v3 before 1.0.2.66, R7100LG before 1.0.0.50, R7300DST before 1.0.0.70, R7900 before 1.0.3.8, R8300 before 1.0.2.128, and R8500 befor...

CVE-2020-26917

The CVE-2020-26917 entry concerns NETGEAR devices vulnerable to stored XSS. Affected models and firmware ranges are: EX7000 < 1.0.1.78, R6250 < 1.0.4.34, R6400 < 1.0.1.46, R6400v2 < 1.0.2.66, R7100LG < 1.0.0.50, R7300DST < 1.0.0.70, R7900 < 1.0.3.8, R8300 < 1.0.2.128, and ...

CVE-2020-26917

Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 before 1.0.1.46, R6400v2 before 1.0.2.66, R7100LG before 1.0.0.50, R7300DST before 1.0.0.70, R7900 before 1.0.3.8, R8300 before 1.0.2.128, and R8500 before 1.0.2.128...

CVE-2020-26918

CVE-2020-26918 affects NETGEAR devices (EX7000 <= 1.0.1.78; R6250 <= 1.0.4.34; R6400 <= 1.0.1.46; R6400v2 <= 1.0.2.66; R6700v3 <= 1.0.2.66; R7100LG <= 1.0.0.50; R7300DST <= 1.0.0.70; R7900 <= 1.0.3.8; R8300 <= 1.0.2.128; R8500

NETGEAR R8300 Command Injection Vulnerability

The NETGEAR R8300 is a wireless router from NETGEAR. A command injection vulnerability exists in the NETGEAR R8300 device versions prior to 1.0.2.134. The vulnerability arises from a failure of the network system or product to properly filter special characters, commands, etc. during user input t...

CVE-2020-25067

NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker...

CVE-2020-25067

NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker...

Command injection

NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker...

CVE-2020-25067

NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker...

CVE-2020-25067

NETGEAR R8300 devices prior to firmware version 1.0.2.134 are affected by a command injection vulnerability (CVE-2020-25067) that can be exploited by an unauthenticated attacker. The issue arises from inadequate input filtering during user input, allowing an attacker to construct and execute comm...

CVE-2017-18865

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104...

CVE-2017-18865

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104...

Buffer overflow

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R6900P before 1.0.0.56, R7100LG before 1.0.0.32, R7300...

Stack overflow

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104...

CVE-2017-18864

CVE-2017-18864 and related entries describe a pre-authentication buffer overflow affecting NETGEAR routers. Affected models and versions include R6400 (before 1.0.1.24), R6400v2 (before 1.0.2.32), R6700 (before 1.0.1.22), R6900 (before 1.0.1.22), R7000 (before 1.0.9.4), R7000P (before 1.0.0.56), ...

CVE-2017-18865

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104...

Design/Logic Flaw

Certain NETGEAR devices are affected by password recovery and file access. This affects D8500 1.0.3.27 and earlier, DGN2200v4 1.0.0.82 and earlier, R6300v2 1.0.4.06 and earlier, R6400 1.0.1.20 and earlier, R6400v2 1.0.2.18 and earlier, R6700 1.0.1.22 and earlier, R6900 1.0.1.20 and earlier, R7000...

CVE-2018-21225

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, R6700 before 1.0.1.30, R6700v2 before 1.2.0.16, R6800 before 1.2.0.16, R6900 before 1.0.1.30, R6900P before 1.2.0.22, R6900v2 befor...

CVE-2018-21169

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7000 before 2018-03-01, D7800 before 1.0.1.31, D8500 before 1.0.3.36, JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.14, JWNR2010v5 before 1.1.0.46, PR2000 before 2018-03-01, R6050 before 1.0.1.14,...