Command injection

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBR752 before 3.2.17.12, RBR753 before 3.2.17.12, RBR753S before 3.2.17.12,...

Authentication flaw

Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12...

CVE-2021-29076

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12...

Command injection

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12...

Command injection

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12...

Stack overflow

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects RBW30 before 2.6.2.2, RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753...

CVE-2021-29067

CVE-2021-29067 corresponds to an authentication bypass affecting multiple NETGEAR devices. Affected models and minimum/affected firmware versions include: RBW30 < 2.6.2.2, RBS40V < 2.6.2.4, RBK852 < 3.2.17.12, RBK853 < 3.2.17.12, RBK854 < 3.2.17.12, RBR850 < 3.2.17.12, RBS850 &l...

CVE-2021-29070

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12...

CVE-2021-29070

CVE-2021-29070 affects several NETGEAR devices (RBK852/853/854, RBR850, RBS850) with firmware versions before 3.2.17.12. The vulnerability is a command-injection flaw exploitable by an authenticated user over an adjacent network (attack vector: adjacent, authentication: single, low complexity). I...

CVE-2021-29071

The CVE-2021-29071 entry concerns a command injection vulnerability in certain NETGEAR router/mesh devices (RBK852/853/854, RBR850/RBS850, RBR752/753/753S/754/750, RBS750) prior to version 3.2.17.12, exploitable by an authenticated user. The root cause is a command injection in affected component...

CVE-2021-29072

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12...

CVE-2021-29074

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects RBW30 before 2.6.2.2, RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753 before...

CVE-2021-29074

The CVE-2021-29074 entry concerns NETGEAR devices (RBW30, RBK family, RBR/RBS series) affected by a stack-based buffer overflow exploitable by an authenticated user. Affected versions are RBW30

CVE-2021-29076

Vulnerability CVE-2021-29076 affects NETGEAR RBK852/RBK853/RBK854/RBR850/RBS850 devices with versions before 3.2.17.12. Affected component is the device firmware where an unauthenticated attacker can trigger a command injection (root cause: command injection). Impact per sources is severe (CVSS v...

CVE-2021-29077

The CVE-2021-29077 entry affects multiple NETGEAR WiFi/mesh devices with a pre-auth command-injection vulnerability. Affected models and minimum/maximum versions include RBW30 < 2.6.2.2, RBS40V

CVE-2021-29078

CVE-2021-29078 affects multiple NETGEAR WiFi devices (RBK852/853/854, RBR850, RBS850, RBK752/753/753S/754, RBR750, RBS750) with pre-3.2.17.12 firmware. The vulnerability is a pre-auth, command-injection flaw that could impact confidentiality, integrity, and availability per CVSS scores (3.1: AV:A...

CVE-2021-29078

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753 before 3.2.17.12, RBK753S before...

CVE-2021-29079

CVE-2021-29079 affects NETGEAR RBK852/RBK853/RBK854/RBR850/RBS850 with firmware before 3.2.17.12. The issue is an unauthenticated command injection (attack vector: adjacent network; complexity: low; no authentication required). CVSSv3.1 base score 9.6 (CRITICAL) with HIGH impacts on confidentiali...

CVE-2021-29080

CVE-2021-29080 affects a range of NETGEAR devices where an unauthenticated attacker can trigger a password reset. Vulnerable versions include: RBK852, RBK853, RBR854, RBR850, RBS850 prior to 3.2.10.11; CBR40 prior to 2.5.0.10; R7000 prior to 1.0.11.116; R6900P prior to 1.3.2.126; R7900 prior to 1...

CVE-2021-29081

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects RBW30 before 2.6.2.2, RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753...