CVE-2019-20746

The CVE-2019-20746 entry describes a reflected cross-site scripting (XSS) vulnerability affecting multiple NETGEAR devices. Affected products and versions include D3600 ≤1.0.0.75, D6000 ≤1.0.0.75, D7800 ≤1.0.1.44, DM200 ≤1.0.0.58, R7800 ≤1.0.2.58, R8900 ≤1.0.4.12, R9000 ≤1.0.4.8, RBK/RBR/RBS seri...

CVE-2020-35799

CVE-2020-35799 affects a wide range of NETGEAR devices (D3600, D6000, D6200, D7000, D7800, DM200, EX2700, EX6100v2, EX6150v2, EX6200v2, EX6400, EX7300, EX8000, JR6150, PR2000, R6020, R6050, R6080, R6120, R6220, R6230, R6260, R6700v2, R6800, R6900v2, R7500v2, R7800, R8900, R9000, RBK/RBR/RBS famil...

CVE-2021-38534

CVE-2021-38534 affects a wide range of NETGEAR routers and gateways. Based on the provided records, the vulnerability is described as stored cross-site scripting (XSS) impacting multiple device lines and numerous firmware versions (for example, D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6100 ...

CVE-2019-20736

CVE-2019-20736 affects NETGEAR devices (D6000, D6100, R7800, R8900, R9000, WNDR3700v4, WNDR4300v1/v2, WNDR4500v3, WNR2000v5, XR500) via a stack-based buffer overflow in an authenticated context. Affected firmware versions are listed (e.g., D6000 < 1.0.0.72, D6100 < 1.0.0.63, R7800 < 1.0....

CVE-2021-38514

CVE-2021-38514 corresponds to an authentication bypass affecting numerous NETGEAR devices (examples: D3600, D6000, D6100, D6200, D6220, D6400, D7000, D7000v2, D7800, D8500, various WN/R series, XR500, etc.) with many revision thresholds (most listed “before” specific version numbers). Root cause ...

CVE-2021-38525

CVE-2021-38525 affects a large set of NETGEAR routers (e.g., D3600, D6000, D6200, D7000, EX6xxx, XR500, R6xxx, R7xxx, etc.) with a stack-based buffer overflow vulnerability exploitable by an authenticated user. The issue occurs in multiple models and firmware revisions listed in the vulnerability...

CVE-2021-45640

The CVE-2021-45640 entry impacts NETGEAR routers and extenders (e.g., D3600/D6000/D6200/D6220/D6400/D7000/D7800 etc.) with firmware versions listed in the description. The root cause is an incorrect configuration of security settings on affected devices. Connected documents reiterate the same dev...

CVE-2020-35787

CVE-2020-35787 is a buffer overflow in a range of NETGEAR devices that can be triggered by an authenticated user. Affected products and firmware ranges include: D3600 < 1.0.0.76, D6000 < 1.0.0.76, D6200 < 1.1.00.36, D7000 < 1.0.1.70, EX6200v2 < 1.0.1.78, EX7000 < 1.0.1.78, EX800...

CVE-2019-20752

CVE-2019-20752 is a stored cross-site scripting (XSS) vulnerability affecting multiple NETGEAR devices. The Red Hat and NVD entries list affected models and firmware ranges (e.g., D3600 < 1.0.0.75, D6000 < 1.0.0.75, D7800 < 1.0.1.44, DM200 < 1.0.0.58, R7800 < 1.0.2.58, R8900 < 1...

CVE-2019-20730

The CVE-2019-20730 entry documents an SQL injection vulnerability affecting a wide range of NETGEAR consumer/enterprise routers and gateways. Affected devices include models such as D3600 (before 1.0.0.68), D6000 (before 1.0.0.68), D6200 (before 1.1.00.28), D6220 (before 1.0.0.40), D6400 (before ...

CVE-2021-45550

CVE-2021-45550 affects various NETGEAR devices (e.g., D3600, D6000, D6100, D6220, D6400, D7800, D8500, DGN2200v4, R6250, R6300v2, R6400, R6400v2, R6700, R7000, R7100LG, R7300, R7900, R8000, R8300, R8500, XR500, and others listed) with a pre-auth or authenticated command-injection risk. The vulner...

CVE-2020-35800

CVE-2020-35800 affects a wide range of NETGEAR devices (e.g., AC2100/AC2400/AC2600, CBK40/CBR40, D6000/D6220/D6400/D7000v2/D7800/D8500/DC112A, EX-series, R-series, etc.). The root issue is an incorrect security settings configuration across these models, leading to a security misconfiguration. Th...

CVE-2021-45641

CVE-2021-45641 affects multiple NETGEAR routers (e.g., D3600, D6000, D6200, D6220, D6400, D7000/…/XR500, among others) due to incorrect configuration of security settings. The vulnerability involves a misconfiguration issue in a broad list of NETGEAR devices before specified firmware versions (e....

CVE-2019-20735

The CVE-2019-20735 entry affects NETGEAR devices and describes a stack-based buffer overflow triggered by an authenticated user. Affected models and firmware versions include: D3600 (before 1.0.0.75), D6000 (before 1.0.0.75), D6100 (before 1.0.0.63), R7800 (before 1.0.2.52), R8900 (before 1.0.4.2...

CVE-2018-21224

CVE-2018-21224 affects certain NETGEAR routers: D3600 (pre 1.0.0.67), D6000 (pre 1.0.0.67), D7800 (pre 1.0.1.30), R6100 (pre 1.0.1.20), R7500 (pre 1.0.0.118), R7500v2 (pre 1.0.3.24), R9000 (pre 1.0.2.52), WNDR3700v4 (pre 1.0.2.96), WNDR4300 (pre 1.0.2.98), WNDR4300v2 (pre 1.0.0.50), WNDR4500v3 (p...

CVE-2019-20685

This CVE (CVE-2019-20685) affects a range of NETGEAR devices, caused by a stack-based buffer overflow in unauthenticated scenarios. Affected models and versions include D3600/D6000/D6200/D7000/DM200/JR6150/PR2000/R6020/R6050/R6080/R6120/R6220/R6260/R6700v2/R6800/R6900v2/WNR2020/XR500 with specifi...

CVE-2017-18785

CVE-2017-18785 affects a broad set of NETGEAR devices (e.g., D3600, D6000, D6100, D6200, D7000, D7800, D8500, DGN2200 variants, EX-series, R-series, WN-series, etc.) with various firmware versions (examples: D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, R6400 before 1.0.1.3...

CVE-2018-21212

CVE-2018-21212 is a buffer overflow affecting multiple NETGEAR devices (e.g., D3600, D6100, D7800, EX2700, R6100, R7500/R7500v2, R7800, R9000, WN-series, WNDR-series) caused by memory operations performed without proper data boundary validation. Connected sources (CNVD-2021-46564, Red Hat securit...

CVE-2018-21219

The CVE-2018-21219 entry concerns buffer overflow in multiple NETGEAR devices (D3600, D6000, D6100, D7800, R6100, R7500, R7500v2, R9000, WNDR3700v4, WNDR4300, WNDR4300v2, WNDR4500v3, WNR2000v5) prior to specific firmware versions (e.g., D3600 < 1.0.0.67, D6000 < 1.0.0.67, D6100 < 1.0.0.5...

CVE-2019-20684

Concrete details available: CVE-2019-20684 is a stack-based buffer overflow in multiple NETGEAR routers (e.g., D3600, D6000, D6200, D7000, R6700v2, XR500, etc.) that is exploitable by an unauthenticated attacker over adjacent network. The underlying cause is improper data boundary checks leading ...

CVE-2019-20717

CVE-2019-20717 describes a denial-of-service (DoS) vulnerability affecting multiple NETGEAR devices (e.g., D3600, D6000, D7800, EX-series, R-series, RBK/RBR/RBS series, WN-series, etc.) with specific firmware versions ranging from older to around 2.x. The Red Hat entry characterizes it as a DoS i...

CVE-2016-11059

NETGEAR devices are affected by CVE-2016-11059, exposing passwords. The affected models include AC1450, C6300, D500, D1500, D3600, D6000, D6100, D6200, D6200B, D6300B, D6300, DGN1000v3, DGN2200v1/v3, DGN2200V4, DGN2200Bv3/v4, DGND3700v1/v2, DGND3700Bv2, JNR1010v1/v2, JNR3300, JR6100, JR6150, JWNR...

CVE-2018-21211

CVE-2018-21211 affects NETGEAR devices (D3600, D6000, D6100, D7800, R7500, R7500v2, R7800, R9000, WNDR3700v4, WNDR4300, WNDR4300v2, WNDR4500v3, WNR2000v5) with specific pre-existing firmware versions. Multiple connected sources (EUVD-2018-13729, RH:CVE-2018-21211, CNVD-2021-46563, NVD/NVD list, C...

CVE-2019-20683

CVE-2019-20683 is a stack-based buffer overflow in various NETGEAR routers/gateways that can be exploited by an unauthenticated attacker. Affected products include D3600 (pre-1.0.0.76), D6000 (pre-1.0.0.76), D6200 (pre-1.1.00.32), D7000 (pre-1.0.1.68), JR6150 (pre-1.0.1.18), PR2000 (pre-1.0.0.28)...

CVE-2019-20723

The vulnerability CVE-2019-20723 affects NETGEAR devices and is described as a stack-based buffer overflow exploitable by an authenticated user. Affected models and firmware ranges include D3600 (before 1.0.0.75), D6000 (before 1.0.0.75), D6100 (before 1.0.0.63), DM200 (before 1.0.0.58), EX2700 (...

CVE-2017-18762

CVE-2017-18762 describes a pre-authenticated command injection affecting multiple NETGEAR devices. The affected models and firmware ranges are: D3600 (before 1.0.0.68), D6000 (before 1.0.0.68), D6100 (before 1.0.0.57), R6100 (before 1.0.1.16), R6900P (before 1.2.0.22), R7000 (before 1.0.9.10), R7...

CVE-2017-18788

CVE-2017-18788 affects a wide range of NETGEAR devices (e.g., D3600, D6000, D6100, D6200, D6220, D6400, D7000 family, DGN2200v4, EX-series, R-series, etc.) with command injection vulnerability triggered by an authenticated user. Affected firmware versions are listed in the entry (e.g., D3600 befo...

CVE-2019-20691

The provided connected documents confirm a CSRF vulnerability (CVE-2019-20691) affecting multiple NETGEAR devices: D3600 (before 1.0.0.72), D6000 (before 1.0.0.72), EX3700 (before 1.0.0.70), EX3800 (before 1.0.0.70), EX6000 (before 1.0.0.30), EX6100 (before 1.0.2.24), EX6120 (before 1.0.0.40), EX...

CVE-2019-20703

CVE-2019-20703 affects NETGEAR D3600 (before 1.0.0.76), D6000 (before 1.0.0.76), and XR500 (before 2.3.2.32). The vulnerability is an OS command injection that occurs when an authenticated user constructs an OS command from externally provided data without proper filtering of special characters. ...

CVE-2015-8288

Netgear D6000 and D3600 routers running firmware 1.0.0.49 (and earlier) contain a hard-coded RSA private key and a hard-coded X.509 certificate/key pair, enabling remote attackers to bypass cryptographic protections, gain administrator access, perform man‑in‑the‑middle attacks, or decrypt passive...

CVE-2018-21207

CVE-2018-21207 affects multiple NETGEAR devices (e.g., D3600, D6000, D7800, EX2700, R6100, R7500/2, R7800, R9000, WN2000RPTv3, WN3000RPv3, WN3100RPv2, WNDR3700/v4, WNDR4300/v2, WNDR4500v3, etc.). The root cause is a stack-based buffer overflow caused by processing externally supplied data, exploi...

CVE-2018-21215

CVE-2018-21215 is a confirmed NETGEAR buffer‑overflow vulnerability affecting specific models (D3600, D6000, D6100, EX2700, R7500v2, R9000, WN2000RPTv3, WN3000RPv3, WN3100RPv2) with listed older firmware versions. The underlying issue is a buffer overflow caused by memory operations on data bound...

CVE-2015-8289

Netgear D3600/D6000 routers with firmware up to 1.0.0.49 disclose the administrator password via the password-recovery page. The vulnerability (CVE-2015-8289) lets remote attackers read the cleartext password by inspecting the /cgi-bin/passrec.asp page’s source. Affected devices include D3600 and...

CVE-2018-21136

CVE-2018-21136 affects NETGEAR D3600 and D6000 devices; the vulnerability is an information-disclosure flaw in firmware prior to 1.0.0.76. Root cause is unspecified in the provided documents, but the impact is exposure of sensitive data. Remediation per the sources is to upgrade to firmware 1.0.0...

CVE-2018-21220

CVE-2018-21220 affects a range of NETGEAR devices (D3600, D6000, D6100, D7800, R6100, R7500/R7500v2, R9000, WNDR3700v4, WNDR4300/WDN R4300v2, WNDR4500v3, WNR2000v5) where an unauthenticated attacker can trigger a buffer overflow due to improper memory boundary validation. The cited records indica...

CVE-2019-20682

The vulnerability CVE-2019-20682 affects NETGEAR devices and is caused by a stack-based buffer overflow exploitable by an unauthenticated attacker. Affected models include D3600 (pre-1.0.0.76), D6000 (pre-1.0.0.76), D6200 (pre-1.1.00.32), D7000 (pre-1.0.1.68), JR6150 (pre-1.0.1.18), PR2000 (pre-1...

CVE-2019-20688

CVE-2019-20688 affects a range of NETGEAR devices (routers/gateways/extenders) including D3600, D6000, D6100, EX2700, EX6100v2, EX6150v2, EX6200v2, EX6400, EX7300, EX8000, R7800, R8900, R9000, WN2000RPTv3, WN3000RPv2, WN3100RPv2, WNDR3700v4, WNDR4300v1/v2, WNDR4500v3, WNR2000v5, and XR500. The vu...

CVE-2018-21213

CVE-2018-21213 describes a pre-authentication buffer overflow affecting multiple NETGEAR devices. The vulnerability exists in various models (D3600, D6000, D7800, R6100, R7500, R7500v2, R7800, R9000, WNDR3700v4, WNDR4300, WNDR4300v2, WNDR4500v3) with specific firmware versions listed in the initi...

CVE-2018-21214

CVE-2018-21214 affects multiple NETGEAR devices (D3600, D6000, EX2700, R6100, R7500v2, R9000, WN2000RPTv3, WN3000RPv3, WN3100RPv2) with pre-update firmware versions listed in the description. The vulnerability is a buffer overflow that can be exploited by an unauthenticated attacker. Impact is de...

CVE-2019-20689

CVE-2019-20689 concerns a command-injection flaw in certain NETGEAR devices where an authenticated user can inject commands. Affected models/firmware include D6000 (< 1.0.0.75), D6100 (< 1.0.0.63), EX2700 (< 1.0.1.48), EX6100v2 (< 1.0.1.76), EX6150v2 (< 1.0.1.76), EX6200v2 (< 1....

CVE-2017-18740

The CVE-2017-18740 entry affects a range of NETGEAR devices with incorrect configuration of security settings, including D3600 (before 1.0.0.61), D6000 (before 1.0.0.61), D6100 (before 1.0.0.55), D7800 (before 1.0.1.28), R6100 (before 1.0.1.16), R7500 (before 1.0.0.112), R7500v2 (before 1.0.3.20)...

CVE-2019-20714

CVE-2019-20714 : Concrete details exist. NETGEAR devices (D3600, D6000, D7800, DM200, R7500v2, R7800, R8900, R9000, RBK/RBR/RBS/RB... and WN-series) are affected by a stored XSS in the WEB application. Affected pre-versions are listed in the description; remediation is to upgrade to the fixed ver...

CVE-2019-20715

CVE-2019-20715 is a stored XSS vulnerability affecting multiple NETGEAR devices (e.g., D3600/D6000/D6100/D7800/DM200/R7500v2/R7800/RBK50/RBR50/RBS50) with specific firmware versions listed (before 1.0.0.76 for D3600/D6000; before 1.0.0.63 for D6100; before 1.0.1.47 for D7800; before 1.0.0.61 for ...

CVE-2018-21223

The CVE-2018-21223 entry pertains to a pre-auth, remote buffer overflow in certain NETGEAR routers/gateways. The affected devices and firmware ranges are: D3600 prior to 1.0.0.67; D6000 prior to 1.0.0.67; D7800 prior to 1.0.1.30; R6100 prior to 1.0.1.20; R7500 prior to 1.0.0.118; R7500v2 prior to...

CVE-2019-20640

CVE-2019-20640 affects multiple NETGEAR devices (D3600, D6000, D6200, D7000, JR6150, PR2000, R6020, R6050, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, WNR2020, XR500) with a stack-based buffer overflow triggered by an unauthenticated attacker. The root cause is a memory boundary check fa...

CVE-2019-20726

CVE-2019-20726 affects multiple NETGEAR devices (D3600/D6000/D6100, R7800/R8900/R9000, WNDR3700v4, WNDR4300v1/v2, WNDR4500v3, WNR2000v5, XR500, and XR500 series) with command injection exploitable by an authenticated user. The root cause is improper handling of input in a command construction con...

CVE-2018-21111

CVE-2018-21111 affects multiple NETGEAR devices (D3600, D6000, D6100, R7800, R8900, R9000, WNDR3700v4, WNDR4300, WNDR4300v2, WNDR4500v3, WNR2000v5) with a stack-based buffer overflow gated by an authenticated user. The root cause is improper memory bounds handling, leading to potential overflow. ...

CVE-2018-21210

CVE-2018-21210 describes a buffer overflow in multiple NETGEAR devices that can be exploited by an unauthenticated attacker. The affected products and versions are: D3600 (before 1.0.0.67), D6000 (before 1.0.0.67), D7800 (before 1.0.1.30), EX2700 (before 1.0.1.28), R6100 (before 1.0.1.20), R7500 ...

CVE-2018-21221

The CVE-2018-21221 entry describes a pre-auth buffer overflow affecting NETGEAR D3600 (<= 1.0.0.66), D6000 (<= 1.0.0.66), and R9000 (

CVE-2019-20724

CVE-2019-20724 describes a command-injection vulnerability in certain NETGEAR routers and gateways, exploitable by an authenticated user. The affected devices and firmware ranges include: D3600 < 1.0.0.75, D6000 < 1.0.0.75, D6100 < 1.0.0.63, D7800 < 1.0.1.44, R7500v2 < 1.0.3.38, R7...