Design/Logic Flaw

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, and XR1000 before 1.0.0.58...

Information disclosure

NETGEAR XR1000 devices before 1.0.0.58 are affected by disclosure of sensitive information...

Hardcoded credentials

NETGEAR XR1000 devices before 1.0.0.58 are affected by a hardcoded password...

Authentication flaw

NETGEAR XR1000 devices before 1.0.0.58 are affected by authentication bypass...

Command injection

NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker...

Denial of service

NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service...

Command injection

NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker...

Denial of service

NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service...

Command injection

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects LAX20 before 1.1.6.28, MK62 before 1.1.6.122, MR60 before 1.1.6.122, MS60 before 1.1.6.122, R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R6900P before 1.3.3.140, R7000 before 1.0.11.116, R7000P...

Command injection

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, EX7500 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 befo...

CVE-2021-45510

NETGEAR XR1000 devices before 1.0.0.58 are affected by authentication bypass...

CVE-2021-45510

CVE-2021-45510 affects NETGEAR XR1000 routers; authentication bypass exists in devices before firmware version 1.0.0.58. Details indicate an adjacent-network attack vector with low complexity and no authentication required, leading to high-impact confidentiality, integrity, and availability conse...

CVE-2021-45513

Affected product: NETGEAR XR1000 routers running firmware before 1.0.0.58. Issue: unauthenticated command injection vulnerability (no exploit details provided in the sources). Root cause is not detailed in the provided documents. Impact: high confidentiality, integrity, and availability risks per...

CVE-2021-45513

NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker...

CVE-2021-45514

NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker...

CVE-2021-45514

CVE-2021-45514 affects NETGEAR XR1000 devices prior to version 1.0.0.58, where an unauthenticated attacker can execute commands via a command-injection vulnerability. Exploitation details are not provided in the initial documents beyond this claim; CVSS data from NVD/related feeds shows high to c...

CVE-2021-45517

The CVE-2021-45517 entry concerns NETGEAR XR1000 devices and an impact of denial of service on firmware versions prior to 1.0.0.58. The available connected documents corroborate that the affected product is the XR1000 router and that the vulnerability manifests as a DoS condition before the 1.0.0...

CVE-2021-45518

CVE-2021-45518 affects NETGEAR XR1000 devices running firmware older than 1.0.0.58, where a denial-of-service condition impacts availability (CVSS shows HIGH impact). No exploit details or attack vectors are provided in the supplied documents. The likely remediation is upgrading to firmware versi...

CVE-2021-45518

NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service...

CVE-2021-45519

NETGEAR XR1000 devices with firmware older than 1.0.0.58 are reported to be affected by a denial-of-service condition (CVE-2021-45519). The available records consistently describe the vulnerability as a DoS affecting XR1000 units prior to 1.0.0.58. No concrete technical details on the root cause,...