CVE-2016-6277

CVE-2016-6277 affects Netgear routers (R6250, R6400, R6700, R6900, R7000, R7100LG, R7300DST, R7900, R8000, D6220, D6400, D7000, and possibly others) where remote attackers could execute arbitrary commands via shell metacharacters in the path info to cgi-bin/. Root cause is unsanitized/crafted pat...

CVE-2017-5521

CVE-2017-5521 affects multiple NETGEAR router models (R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, R8000) and enables an authentication bypass that can disclose the admin password through crafted requests to the web management server. The root ...

CVE-2021-34991

NETGEAR R6400v2 UPnP daemon contains a pre-authentication, stack-based buffer overflow in handling the UUID header, enabling network-adjacent attackers to execute code as root via crafted requests to port 5000. Documented by ZDI-21-1303 and corroborated across multiple sources; exploitation requi...

CVE-2018-21230

CVE-2018-21230 affects a broad range of NETGEAR routers (e.g., D1500, D500, D6100, D6220, D6400, D7000, D7800, D8500, DGN2200 variants, EX-series, R-series, WN-series, etc.) due to incorrect configuration of security settings. Connected sources list the affected models and firmware ranges (variou...

CVE-2018-21231

CVE-2018-21231 concerns multiple NETGEAR devices affected by an incorrect configuration of security settings. Affected models and firmware ranges include D1500 (<1.0.0.27), D500 (<1.0.0.27), D6100 (<1.0.0.57), D6220 (<1.0.0.40), D6400 (<1.0.0.74), D7000 (<1.0.1.60), D7800 (<1...

CVE-2021-34982

The CVE-2021-34982 entry describes a pre-auth, remote code execution vulnerability in the httpd service of NETGEAR routers. The flaw is a stack-based buffer overflow caused by unchecked length of user-supplied data in the strings file, leading to code execution with root privileges when a network...

CVE-2017-18704

CVE-2017-18704 describes an information-disclosure vulnerability in various NETGEAR devices where an attacker can read arbitrary files. Affected models and firmware ranges include D6220 (< 1.0.0.32), D6400 (< 1.0.0.60), D8500 (< 1.0.3.29), R6250 (< 1.0.4.16), R6300v2 (< 1.0.4.18), ...

CVE-2019-20753

CVE-2019-20753 affects a wide range of NETGEAR routers by a stack-based buffer overflow under unauthenticated access. Affected devices include DGN2200v1 (pre-1.0.0.58), D8500 (pre-1.0.3.42), D7000v2 (pre-1.0.0.51), D6400 (pre-1.0.0.78), D6220 (pre-1.0.0.44), JNDR3000 (pre-1.0.0.24), R8000 (pre-1....

CVE-2021-38516

CVE-2021-38516 targets NETGEAR devices where there is a lack of function-level access control. Affected devices include D6220 (before 1.0.0.48), D6400 (before 1.0.0.82), D7000v2 (before 1.0.0.52), D7800 (before 1.0.1.44), D8500 (before 1.0.3.43), and numerous other models (list in public advisori...

CVE-2021-38534

CVE-2021-38534 affects a wide range of NETGEAR routers and gateways. Based on the provided records, the vulnerability is described as stored cross-site scripting (XSS) impacting multiple device lines and numerous firmware versions (for example, D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6100 ...

CVE-2021-38514

CVE-2021-38514 corresponds to an authentication bypass affecting numerous NETGEAR devices (examples: D3600, D6000, D6100, D6200, D6220, D6400, D7000, D7000v2, D7800, D8500, various WN/R series, XR500, etc.) with many revision thresholds (most listed “before” specific version numbers). Root cause ...

CVE-2019-20754

CVE-2019-20754 affects several NETGEAR devices due to a buffer overflow caused by a vulnerability exploitable by an authenticated user. Affected models include DGN2200/DGN2200B (before 1.0.0.58), D8500 (before 1.0.3.42), D7000v2 (before 1.0.0.51), D6400 (before 1.0.0.80), D6220 (before 1.0.0.44),...

CVE-2017-18700

CVE-2017-18700 affects multiple NETGEAR devices (D6400, D7000, D8500, EX6200, EX7000, R6250, R6300v2, R6400, R6400v2, R6700, R6900, R6900P, R7000, R7000P, R7100LG, R7300DST, R7900, R8000, R8300, R8500, R9000, WNDR3400v3, WNR3500Lv2, WNDR3700v5) with stored XSS. The vulnerability is triggered by u...

CVE-2019-20728

CVE-2019-20728 affects a range of NETGEAR routers and gateways. The vulnerability is a buffer overflow triggered by an authenticated user, impacting multiple models (e.g., D6400, D7000v2, D7800, D8500, DGN2200v4, DGND2200Bv4, DM200, JNDR3000, RBK/RBR/RBS/RBW series, R6250, R6300v2, R6400/R6400v2,...

CVE-2019-20755

The CVE-2019-20755 entry concerns NETGEAR devices affected by a stack-based buffer overflow, exploitable by an authenticated user. Affected models and minimum/maximum versions are listed: D6220 (<1.0.0.46), D6400 (<1.0.0.80), D7000v2 (<1.0.0.51), D8500 (<1.0.3.42), DGN2200v1 (<1.0....

CVE-2020-35796

CVE-2020-35796 affects a broad set of NETGEAR devices (list includes CBR40, D6220, D6400, D7000v2, D8500, DC112A, DGN2200v4, EAX20/80, EX3700–EX7500, R-Series, XR300, etc.) with a pre-auth buffer overflow vulnerability. Root cause: improper handling/bounds checking leads to overflow when processi...

CVE-2019-20730

The CVE-2019-20730 entry documents an SQL injection vulnerability affecting a wide range of NETGEAR consumer/enterprise routers and gateways. Affected devices include models such as D3600 (before 1.0.0.68), D6000 (before 1.0.0.68), D6200 (before 1.1.00.28), D6220 (before 1.0.0.40), D6400 (before ...

CVE-2021-45640

The CVE-2021-45640 entry impacts NETGEAR routers and extenders (e.g., D3600/D6000/D6200/D6220/D6400/D7000/D7800 etc.) with firmware versions listed in the description. The root cause is an incorrect configuration of security settings on affected devices. Connected documents reiterate the same dev...

CVE-2021-45550

CVE-2021-45550 affects various NETGEAR devices (e.g., D3600, D6000, D6100, D6220, D6400, D7800, D8500, DGN2200v4, R6250, R6300v2, R6400, R6400v2, R6700, R7000, R7100LG, R7300, R7900, R8000, R8300, R8500, XR500, and others listed) with a pre-auth or authenticated command-injection risk. The vulner...

CVE-2020-35800

CVE-2020-35800 affects a wide range of NETGEAR devices (e.g., AC2100/AC2400/AC2600, CBK40/CBR40, D6000/D6220/D6400/D7000v2/D7800/D8500/DC112A, EX-series, R-series, etc.). The root issue is an incorrect security settings configuration across these models, leading to a security misconfiguration. Th...

CVE-2021-45641

CVE-2021-45641 affects multiple NETGEAR routers (e.g., D3600, D6000, D6200, D6220, D6400, D7000/…/XR500, among others) due to incorrect configuration of security settings. The vulnerability involves a misconfiguration issue in a broad list of NETGEAR devices before specified firmware versions (e....

CVE-2021-27239

The CVE-2021-27239 issue affects NETGEAR R6400 and R6700 routers with firmware 1.0.4.98. The flaw resides in the upnpd service, which listens on UDP port 1900; a crafted MX header in an SSDP message can overflow a fixed-length stack-based buffer, allowing network-adjacent attackers to execute arb...

CVE-2021-34983

NETGEAR multiple routers are affected by a pre-authentication httpd limitation that allows network-adjacent attackers to disclose sensitive information and potentially stored credentials. Root cause: lack of authentication before access to system configuration via the httpd service (port 80). The...

CVE-2017-18785

CVE-2017-18785 affects a broad set of NETGEAR devices (e.g., D3600, D6000, D6100, D6200, D7000, D7800, D8500, DGN2200 variants, EX-series, R-series, WN-series, etc.) with various firmware versions (examples: D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, R6400 before 1.0.1.3...

CVE-2019-20718

CVE-2019-20718 concerns authenticated-command-injection on multiple NETGEAR devices. The affected models and firmware ranges (D6220 ≤ 1.0.0.48, D6400 ≤ 1.0.0.82, D7000v2 ≤ 1.0.0.52, D8500 ≤ 1.0.3.43, R6250 ≤ 1.0.4.34, R6400 ≤ 1.0.1.44, R6400v2 ≤ 1.0.2.62, R7100LG ≤ 1.0.0.48, R7300DST ≤ 1.0.0.68, ...

CVE-2019-20733

The CVE-2019-20733 entry describes a stack-based buffer overflow in multiple NETGEAR routers and extenders. Affected devices include D6220, D6400, D7000v2, D8500, and many others (list spans EX series, R-series, WN and WNR models) with specific older firmware versions (e.g., D6220

CVE-2021-45638

CVE-2021-45638 affects NETGEAR routers (e.g., D6220 < 1.0.0.68, D6400 < 1.0.0.102, D7000v2 < 1.0.0.74, D8500 < 1.0.3.60, DC112A < 1.0.0.56, R6300v2 < 1.0.4.50, R6400 < 1.0.1.68, R7000 < 1.0.11.116, R7100LG < 1.0.0.70, RBS40V < 2.6.2.8, RBW30 < 2.6.2.2, RS400 < ...

CVE-2020-11770

CVE-2020-11770 affects a wide range of NETGEAR routers and gateways (e.g., D6220, D6400, D7000v2, D8500, R6220, R6250, R6260, R6400, R6400v2, R6700, R6700v2/v3, R6800, R6900/P, R7000/P, R7100LG, R7300DST, R7800, R7900/P, R8000/P, R8300, R8500, R8900, R9000, XR500) with command injection exploitab...

CVE-2017-18769

CVE-2017-18769 affects a broad set of NETGEAR devices where an attacker can read arbitrary files. The public descriptions enumerate affected models and firmware ranges (e.g., D6220 < 1.0.0.40, D6400 < 1.0.0.74, D7000 < 1.0.1.60, D7800 < 1.0.1.34, D8500

CVE-2018-21139

CVE-2018-21139 affects multiple NETGEAR consumer/SMB routers (e.g., D1500, D500, D6100, D6200, D6400, D7000 series, DGN2200, WNDR/ R-series, etc.) with firmware versions before the listed thresholds (e.g., D1500 before 1.0.0.27, D6100 before 1.0.0.58, etc.). Root cause is sensitive information di...

CVE-2019-20700

The CVE-2019-20700 entry applies to NETGEAR devices and describes a stack-based buffer overflow exploitable by an unauthenticated attacker. The documented affected models and firmware ranges include D6220 (<1.0.0.44), D6400 (<1.0.0.78), D7000v2 (<1.0.0.51), D8500 (<1.0.3.42), DGN2200v...

CVE-2019-20692

CVE-2019-20692 describes a stack-based buffer overflow affecting numerous NETGEAR devices (e.g., D6220 to R8500 lines, WNDR3400v3, WNR3500Lv2, etc.) caused by unauthenticated input that overflows a stack buffer. The description lists affected models and firmware version bounds (e.g., D6220 < 1...

CVE-2019-20731

CVE-2019-20731 affects a broad set of NETGEAR routers and extenders (e.g., D6220, D6400, D7000v2, D8500, EX3700/3800/6000/6100/6120/6130/6150v1/6200/7000, R6250/6300v2/6400v2/6700/6900/7000/6900P/7000P/7100LG/7300DST/8000/7900P/8000P/8300/8500, WN2500RPv2, WNDR3400v3) prior to the fixed versions ...

CVE-2021-45527

CVE-2021-45527 affects a wide range of NETGEAR routers and extenders. The vulnerability is a buffer overflow that can be triggered by an authenticated user, affecting models such as D6220 (pre-1.0.0.68), D6400 (pre-1.0.0.102), D7000v2 (pre-1.0.0.66), D8500 (pre-1.0.3.58), DC112A (pre-1.0.0.54), E...

CVE-2017-18788

CVE-2017-18788 affects a wide range of NETGEAR devices (e.g., D3600, D6000, D6100, D6200, D6220, D6400, D7000 family, DGN2200v4, EX-series, R-series, etc.) with command injection vulnerability triggered by an authenticated user. Affected firmware versions are listed in the entry (e.g., D3600 befo...

CVE-2018-21162

The CVE-2018-21162 entry describes a pre-authentication command-injection vulnerability in multiple NETGEAR devices. Affected products include D6400 (<1.0.0.78), EX6200 (<1.0.3.86), EX7000 (<1.0.0.64), R6250 (<1.0.4.8), R6300v2 (<1.0.4.6), R6400 (<1.0.1.12), R6700 (<1.0.1.16)...

CVE-2021-45604

CVE-2021-45604 is a stack-based buffer overflow affecting a wide range of NETGEAR devices, exploitable by an authenticated user. The vulnerability impacts numerous models (e.g., CBR750 up to 3.2.18.2, D6220 up to 1.0.0.68, D6400 up to 1.0.0.102, D8500 up to 1.0.3.60, LAX20 up to 1.1.6.28, MK62 up...

CVE-2017-18778

Summary (CVE-2017-18778) : Several NETGEAR devices are affected by an incorrect configuration of security settings. Affected models include D6220, D6400, D7000, D7000v2, D7800, D8500, JNR1010v2, JR6150, JWNR2010v5, PR2000, R6050, R6220, R6400, R6400v2, R6700v2, R6800, R6900v2, R7100LG, R7300DST, ...

CVE-2017-18756

Summary of CVE-2017-18756 (NETGEAR devices): Multiple NETGEAR routers/modems are affected by an incorrect configuration of security settings. Affected devices include D6220, D6400, D8500, DGN2200Bv4, DGN2200v4, R6250, R6300v2, R6400, R6400v2, R6700, R6900, R6900P, R7000, R7000P, R7100LG, R7900, R...

CVE-2019-20737

CVE-2019-20737 affects a range of NETGEAR routers and extenders due to a stack-based buffer overflow in an unauthenticated context. Affected models and firmware ranges include D6220 (<1.0.0.44), D6400 (<1.0.0.78), D7000v2 (<1.0.0.51), D8500 (<1.0.3.42), EX7000 (<1.0.0.66), R6700v3 ...

CVE-2018-21134

Technical details about CVE-2018-21134 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2018-21156

CVE-2018-21156 is a buffer overflow vulnerability in multiple NETGEAR devices that can be triggered by an authenticated user. The description applies to a long list of models (e.g., D6220, D6400, D7000v2, D8500, DGN2200v4/Bv4, EX-series like EX3700/3800/6000/6100/6120/6130/6150/6200, R-series inc...

CVE-2021-45610

CVE-2021-45610 affects a range of NETGEAR router models (e.g., D6220, D6400, D7000v2, D8500, DC112A, DGN2200v4, EAX80, R6250, R7000, R7100LG, R7900, R7960P, R8000, RAX200, RS400, XR300, R6400v2, R7000P, R8000P, RAX20/45/80, R6700v3, R6900P, RAX15/50/75, among others) with pre‑defined vulnerable f...

CVE-2017-18777

CVE-2017-18777 affects multiple NETGEAR devices, causing administrative password disclosure. Affected models include D6220 (pre V1.0.0.28), D6400 (pre V1.0.0.60), D8500 (pre V1.0.3.29), DGN2200v4/Bv4 (pre 1.0.0.82), R6300v2 (pre 1.0.4.8), R6400 (pre 1.0.1.20), R6700 (pre 1.0.1.20), R6900 (pre 1.0...

CVE-2019-20712

CVE-2019-20712 is a reported buffer overflow in multiple NETGEAR routers, exploitable by an authenticated user. Affected devices include D6220 (≤1.0.0.52), D6400 (≤1.0.0.86), D7000v2 (≤1.0.0.53), D8500 (≤1.0.3.44), and various other models (see list: DGN2200v4, DGND2200Bv4, R6250, R6300v2, R6400,...

CVE-2022-27643

CVE-2022-27643 affects NETGEAR R6700v3 routers; a pre-auth buffer overflow in upnpd when parsing the SOAPAction header allows network-adjacent attackers to execute code with root privileges. Investigations reference ZDI-CAN-15692 and multiple security trackers noting a SOAP handling flaw. The con...

CVE-2017-18733

CVE-2017-18733 affects certain NETGEAR routers and gateways (D6220 <1.0.0.28, D6400 <1.0.0.60, D8500 <1.0.3.29, R6250 <1.0.4.8, R6400 <1.0.1.22, R6400v2 <1.0.2.32, R7100LG <1.0.0.32, R7300DST <1.0.0.52, R8300 <1.0.2.94, R8500

CVE-2017-18849

CVE-2017-18849 (NETGEAR) is a command-injection flaw affecting multiple router/modem models (D6220, D6400, D8500, R6250, R6400, R6400v2, R6700, R6900, R6900P, R7000, R7000P, R7100LG, R7300DST, R7900, R8000, R8300, R8500) with specific firmware targets listed in the description (e.g., D6220 < 1...

CVE-2019-20719

CVE-2019-20719 affects multiple NETGEAR devices via a buffer overflow exploitable by an authenticated user. Affected models and minimum/affected versions include: D6220 (before 1.0.0.48), D6400 (before 1.0.0.82), D7000v2 (before 1.0.0.52), D8500 (before 1.0.3.43), R6250 (before 1.0.4.34), R6400 (...

CVE-2017-18850

CVE-2017-18850 concerns an authentication bypass affecting multiple NETGEAR devices. The initial description lists affected models and firmware ranges: D6220 before 1.0.0.26, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.12, R6400 before 1.01.24, R6400v2 before 1.0.2.30, R6700 ...