Buffer overflow

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects DC112A before 1.0.0.52, R6400 before 1.0.1.68, RAX200 before 1.0.3.106, WNDR3400v3 before 1.0.1.38, XR300 before 1.0.3.68, R8500 before 1.0.2.144, RAX75 before 1.0.3.106, R8300 before 1.0.2.144,...

CVE-2021-45535

CVE-2021-45535 is a command-injection vulnerability affecting certain NETGEAR devices. An authenticated user can trigger the issue in several models (RAX200, RAX80, RAX75, RBK752, RBR750, RBS750, RBK852, RBR850, RBS850) with vulnerable firmware up to the listed versions, e.g., RAX200/RAX80/RAX75 ...

CVE-2021-45540

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7000 before 1.0.11.126, R7900 before 1.0.4.46, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.74, R8000P before 1.4.2.84, RAX200 before 1.0.3.106, MR60 before 1.0.6.110, RAX45...

CVE-2021-45540

CVE-2021-45540 affects certain NETGEAR routers; vulnerability is a command injection exploitable by an authenticated user. Affected devices and firmware versions include: R7000 < 1.0.11.126, R7900 < 1.0.4.46, R7900P < 1.4.2.84, R7960P < 1.4.2.84, R8000 < 1.0.4.74, R8000P < 1.4.2...

CVE-2021-45541

CVE-2021-45541 affects several NETGEAR devices via a command injection vulnerability that can be triggered by an authenticated user. The advisory lists affected models and firmware ranges, including R7900 (before 1.0.4.38), R7900P (before 1.4.2.84), R8000 (before 1.0.4.68), R8000P (before 1.4.2.8...

CVE-2021-45542

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RAX200 before 1.0.4.120, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12...

CVE-2021-45543

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R8000 before 1.0.4.74, RAX200 before 1.0.4.120, R8000P before 1.4.2.84, R7900P before 1.4.2.84, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, and RBK852 before 3.2.17.12...

CVE-2021-45543

CVE-2021-45543 affects several NETGEAR routers where an authenticated user can perform a command injection. Affected models and minimum/affected versions include: R8000 before 1.0.4.74; RAX200 before 1.0.4.120; R8000P before 1.4.2.84; R7900P before 1.4.2.84; RBR850 before 3.2.17.12; RBS850 before...

CVE-2021-45545

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7850 before 1.0.5.74, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.74, R8000P before 1.4.2.84, RAX200 before 1.0.4.120, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, RBK852...

CVE-2021-45545

The CVE-2021-45545 entry describes a post-authentication command injection affecting several NETGEAR routers. Affected devices and versions include R7850 before 1.0.5.74, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.74, R8000P before 1.4.2.84, RAX200 before 1.0.4.120, RAX75 ...

CVE-2021-45546

CVE-2021-45546 concerns command injection in authenticated context affecting multiple NETGEAR devices (R7850, R7900P, R7960P, R8000, R8000P, RAX200, RAX75, RAX80, RBK/RBR/RBS series) with affected firmwares ranging to 1.0.x/3.2.x releases cited in public CVE records. The connected documents provi...

CVE-2021-45606

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126, R7900 before 1.0.4.46, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.74, R8000P before 1.4.2.84, RAX200 before 1.0.4.12...

CVE-2021-45607

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140, RAX200 before 1.0.5.126, RAX75 before 1.0.5.126, and RAX80...

CVE-2021-45607

CVE-2021-45607 affects several NETGEAR routers (R6400v2, R6700v3, R6900P, R7000, R7000P, RAX200, RAX75, RAX80) with a stack-based buffer overflow exploitable by an authenticated user. The provided records list affected versions as: R6400v2 < 1.0.4.118; R6700v3 < 1.0.4.118; R6900P < 1.3.3...

CVE-2021-45611

CVE-2021-45611 describes a pre-authentication buffer overflow in certain NETGEAR router families, exploitable by a network attacker. Affected models and firmware ranges include: DC112A < 1.0.0.52, R6400 < 1.0.1.68, RAX200 < 1.0.3.106, WNDR3400v3 < 1.0.1.38, XR300 < 1.0.3.68, R8500 ...

CVE-2021-45616

CVE-2021-45616 affects a wide range of NETGEAR devices (CBR750, LAX20, MK62, MR60, MS60, R6900P, R7000/R7000P, R7850, R7900/8000 series, RAX 15/20/200/35v2/40v2/43/45/50/75/80, RBK/RBR/RBS series, RS400, XR1000). The root cause is a pre-authenticated command-injection vulnerability allowing an un...

CVE-2021-45616

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 3.2.18.2, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140, R78...

CVE-2021-45647

CVE-2021-45647 affects NETGEAR devices, causing disclosure of sensitive information. Affected models include EAX80 (before 1.0.1.62), EX7000 (before 1.0.1.104), R6120 (before 1.0.0.76), R6220/R6230 (before 1.1.0.110), R6260/R6850/R6350/R6330 (before 1.1.0.78), R6800 (before 1.2.0.76), R6900v2 (be...

CVE-2021-45669

CVE-2021-45669 describes a stored cross-site scripting vulnerability in certain NETGEAR devices, affecting multiple router/Wi‑Fi system models (e.g., RAX200, MR60, RAX20, RAX45, RAX80, MS60, RAX15, RAX50, RAX75, RBR750/R850, RBS750/850, RBK752/852) with various older firmware versions listed. The...

CVE-2021-45669

Certain NETGEAR devices are affected by stored XSS. This affects RAX200 before 1.0.3.106, MR60 before 1.0.6.110, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72, RAX80 before 1.0.3.106, MS60 before 1.0.6.110, RAX15 before 1.0.2.82, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, RBR750 before 3.2.16....