|
2023-06-20
|
CVE-2023-34563
|
netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication.
|
R6250_firmware
|
9.8
|
|
|
|
2020-10-09
|
CVE-2020-26917
|
Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 before 1.0.1.46, R6400v2 before 1.0.2.66, R7100LG before 1.0.0.50, R7300DST before 1.0.0.70, R7900 before 1.0.3.8, R8300 before 1.0.2.128, and R8500 before 1.0.2.128.
|
Ex7000_firmware, R6250_firmware, R6400_firmware, R6400v2_firmware, R7100lg_firmware, R7300dst_firmware, R7900_firmware, R8300_firmware, R8500_firmware
|
4.8
|
|
|
|
2020-10-09
|
CVE-2020-26918
|
Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 before 1.0.1.46, R6400v2 before 1.0.2.66, R6700v3 before 1.0.2.66, R7100LG before 1.0.0.50, R7300DST before 1.0.0.70, R7900 before 1.0.3.8, R8300 before 1.0.2.128, and R8500 before 1.0.2.128.
|
Ex7000_firmware, R6250_firmware, R6400_firmware, R6400v2_firmware, R6700v3_firmware, R7100lg_firmware, R7300dst_firmware, R7900_firmware, R8300_firmware, R8500_firmware
|
4.8
|
|
|
|
2020-11-09
|
CVE-2020-28373
|
upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overflow. This affects R6400v2 V1.0.4.102_10.0.75, R6400 V1.0.1.62_1.0.41, R7000P V1.3.2.126_10.1.66, XR300 V1.0.3.50_10.3.36, R8000 V1.0.4.62, R8300 V1.0.2.136, R8500 V1.0.2.136, R7300DST V1.0.0.74, R7850 V1.0.5.64, R7900 V1.0.4.30, RAX20 V1.0.2.64, RAX80 V1.0.3.102, and R6250 V1.0.4.44.
|
R6250_firmware, R6400_firmware, R6400v2_firmware, R7000p_firmware, R7300dst_firmware, R7850_firmware, R7900_firmware, R8000_firmware, R8300_firmware, R8500_firmware, Rax20_firmware, Rax80_firmware, Xr300_firmware
|
8.8
|
|
|
|
2020-12-30
|
CVE-2020-35796
|
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, DC112A before 1.0.0.48, DGN2200v4 before 1.0.0.114, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX3700 before 1.0.0.84, EX3800 before 1.0.0.84, EX3920 before 1.0.0.84, EX6000 before 1.0.0.44, EX6100 before 1.0.2.28, EX6120 before 1.0.0.54, EX6130 before 1.0.0.36, EX6150...
|
Cbr40_firmware, D6220_firmware, D6400_firmware, D7000v2_firmware, D8500_firmware, Dc112a_firmware, Dgn2200v4_firmware, Eax20_firmware, Eax80_firmware, Ex3700_firmware, Ex3800_firmware, Ex3920_firmware, Ex6000_firmware, Ex6100_firmware, Ex6120_firmware, Ex6130_firmware, Ex6150_firmware, Ex6200_firmware, Ex6920_firmware, Ex7000_firmware, Ex7500_firmware, Mk62_firmware, Mr60_firmware, Ms60_firmware, R6250_firmware, R6300v2_firmware, R6400_firmware, R6400v2_firmware, R6700_firmware, R6700v3_firmware, R6900_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7100lg_firmware, R7850_firmware, R7900_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, R8300_firmware, R8500_firmware, Rax15_firmware, Rax200_firmware, Rax20_firmware, Rax50_firmware, Rax75_firmware, Rax80_firmware, Rbk752_firmware, Rbk842_firmware, Rbk852_firmware, Rbr750_firmware, Rbr840_firmware, Rbr850_firmware, Rbs40v\-200_firmware, Rbs750_firmware, Rbs840_firmware, Rbs850_firmware, Rbw30_firmware, Rs400_firmware, Rx45_firmware, Wn2500rpv2_firmware, Wn3500rp_firmware, Wndr3400v3_firmware, Wnr1000v3_firmware, Wnr2000v2_firmware, Wnr3500lv2_firmware, Xr300_firmware
|
9.8
|
|
|
|
2020-12-30
|
CVE-2020-35800
|
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D6000 before 1.0.0.80, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D7800 before 1.0.3.48, D8500 before 1.0.3.50, DC112A before 1.0.0.48, DGN2200v4 before 1.0.0.114, DM200 before 1.0.0.66, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX2700 before...
|
Ac2100_firmware, Ac2400_firmware, Ac2600_firmware, Cbk40_firmware, Cbr40_firmware, D6000_firmware, D6220_firmware, D6400_firmware, D7000v2_firmware, D7800_firmware, D8500_firmware, Dc112a_firmware, Dgn2200v4_firmware, Dm200_firmware, Eax20_firmware, Eax80_firmware, Ex2700_firmware, Ex3110_firmware, Ex3700_firmware, Ex3800_firmware, Ex3920_firmware, Ex6000_firmware, Ex6100v2_firmware, Ex6110_firmware, Ex6120_firmware, Ex6130_firmware, Ex6150v1_firmware, Ex6150v2_firmware, Ex6200v1_firmware, Ex6250_firmware, Ex6400_firmware, Ex6400v2_firmware, Ex6410_firmware, Ex6920_firmware, Ex7000_firmware, Ex7300_firmware, Ex7300v2_firmware, Ex7320_firmware, Ex7500_firmware, Ex7700_firmware, Ex8000_firmware, Mk62_firmware, Mr60_firmware, Ms60_firmware, R6120_firmware, R6220_firmware, R6230_firmware, R6250_firmware, R6260_firmware, R6300v2_firmware, R6330_firmware, R6350_firmware, R6400v1_firmware, R6400v2_firmware, R6700v1_firmware, R6700v2_firmware, R6700v3_firmware, R6800_firmware, R6850_firmware, R6900_firmware, R6900p_firmware, R6900v2_firmware, R7000_firmware, R7000p_firmware, R7100lg_firmware, R7200_firmware, R7350_firmware, R7400_firmware, R7450_firmware, R7500v2_firmware, R7800_firmware, R7850_firmware, R7900_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, R8300_firmware, R8500_firmware, R8900_firmware, R9000_firmware, Rax120_firmware, Rax15_firmware, Rax200_firmware, Rax20_firmware, Rax35_firmware, Rax40_firmware, Rax45_firmware, Rax50_firmware, Rax75_firmware, Rax80_firmware, Rbk12_firmware, Rbk20_firmware, Rbk40_firmware, Rbk50_firmware, Rbk752_firmware, Rbk842_firmware, Rbk852_firmware, Rbr10_firmware, Rbr20_firmware, Rbr40_firmware, Rbr50_firmware, Rbr750_firmware, Rbr840_firmware, Rbr850_firmware, Rbs10_firmware, Rbs20_firmware, Rbs40_firmware, Rbs40v\-200_firmware, Rbs40v_firmware, Rbs50_firmware, Rbs50y_firmware, Rbs750_firmware, Rbs840_firmware, Rbs850_firmware, Rbw30_firmware, Rs400_firmware, Wn2500rpv2_firmware, Wn3000rpv3_firmware, Wn3500rpv1_firmware, Wndr3400v3_firmware, Wnr1000v3_firmware, Wnr2000v2_firmware, Xr300_firmware, Xr450_firmware, Xr500_firmware, Xr700_firmware
|
9.4
|
|
|
|
2021-03-29
|
CVE-2021-27239
|
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the upnpd service, which listens on UDP port 1900 by default. A crafted MX header field in an SSDP message can trigger an overflow of a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the...
|
D6220_firmware, D6400_firmware, D7000_firmware, D8500_firmware, Dc112a_firmware, Ex7000_firmware, Ex7500_firmware, R6250_firmware, R6300_firmware, R6400_firmware, R6700_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7100lg_firmware, R7850_firmware, R7900_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, R8300_firmware, R8500_firmware, Rax200_firmware, Rax75_firmware, Rax80_firmware, Rbr750_firmware, Rbr850_firmware, Rbs40v_firmware, Rbs750_firmware, Rbs850_firmware, Rs400_firmware, Wndr3400_firmware, Wnr3500l_firmware, Xr300_firmware
|
8.8
|
|
|
|
2021-08-11
|
CVE-2021-38514
|
Certain NETGEAR devices are affected by authentication bypass. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6100 before 1.0.0.63, D6200 before 1.1.00.34, D6220 before 1.0.0.48, D6400 before 1.0.0.86, D7000 before 1.0.1.70, D7000v2 before 1.0.0.52, D7800 before 1.0.1.56, D8500 before 1.0.3.44, DC112A before 1.0.0.42, DGN2200v4 before 1.0.0.108, DGND2200Bv4 before 1.0.0.108, EX2700 before 1.0.1.48, EX3700 before 1.0.0.76, EX3800 before 1.0.0.76, EX6000 before 1.0.0.38, EX6100...
|
D3600_firmware, D6000_firmware, D6100_firmware, D6200_firmware, D6220_firmware, D6400_firmware, D7000_firmware, D7800_firmware, D8500_firmware, Dc112a_firmware, Dgn2200_firmware, Dgnd2200b_firmware, Ex2700_firmware, Ex3700_firmware, Ex3800_firmware, Ex6000_firmware, Ex6100_firmware, Ex6120_firmware, Ex6130_firmware, Ex6150_firmware, Ex6200_firmware, Ex6400_firmware, Ex7000_firmware, Ex7300_firmware, Ex8000_firmware, Jr6150_firmware, Pr2000_firmware, R6020_firmware, R6050_firmware, R6080_firmware, R6120_firmware, R6220_firmware, R6250_firmware, R6300_firmware, R6400_firmware, R6700_firmware, R6800_firmware, R6900_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7100lg_firmware, R7300dst_firmware, R7500_firmware, R7800_firmware, R7900_firmware, R7900p_firmware, R8000_firmware, R8000p_firmware, R8300_firmware, R8500_firmware, R9000_firmware, Rbk40_firmware, Rbk50_firmware, Rbk50v_firmware, Rbr40_firmware, Rbr50_firmware, Rbs40_firmware, Rbs40v_firmware, Rbs50_firmware, Rbw30_firmware, Wn2000rpt_firmware, Wn2500rp_firmware, Wn3000rp_firmware, Wn3100rp_firmware, Wndr3400_firmware, Wndr3700_firmware, Wndr4300_firmware, Wndr4500_firmware, Wnr2000_firmware, Wnr2020_firmware, Wnr2050_firmware, Wnr3500l_firmware, Xr500_firmware
|
2.7
|
|
|
|
2021-08-11
|
CVE-2021-38516
|
Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D7000v2 before 1.0.0.52, D7800 before 1.0.1.44, D8500 before 1.0.3.43, DC112A before 1.0.0.40, DGN2200v4 before 1.0.0.108, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50 before 2.3.0.32, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK40 before 2.3.0.28, RBR40 before 2.3.0.28, RBS40 before 2.3.0.28, R6020 before...
|
Ac2100_firmware, Ac2400_firmware, Ac2600_firmware, D6220_firmware, D6400_firmware, D7000_firmware, D7800_firmware, D8500_firmware, Dc112a_firmware, Dgn2200_firmware, R6020_firmware, R6080_firmware, R6120_firmware, R6220_firmware, R6230_firmware, R6250_firmware, R6260_firmware, R6350_firmware, R6400_firmware, R6700_firmware, R6800_firmware, R6850_firmware, R6900_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7100lg_firmware, R7200_firmware, R7350_firmware, R7400_firmware, R7450_firmware, R7500_firmware, R7800_firmware, R7900_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, R8900_firmware, R9000_firmware, Rax120_firmware, Rbk20_firmware, Rbk40_firmware, Rbk50_firmware, Rbk752_firmware, Rbk852_firmware, Rbr20_firmware, Rbr40_firmware, Rbr50_firmware, Rbr750_firmware, Rbr850_firmware, Rbs20_firmware, Rbs40_firmware, Rbs50_firmware, Rbs750_firmware, Rbs850_firmware, Wnr3500l_firmware, Xr450_firmware, Xr500_firmware
|
9.8
|
|
|
|
2021-08-11
|
CVE-2021-38519
|
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6250 before 1.0.4.36, R6300v2 before 1.0.4.36, R6400 before 1.0.1.50, R6400v2 before 1.0.2.66, R6700v3 before 1.0.2.66, R6700 before 1.0.2.8, R6900 before 1.0.2.8, R7000 before 1.0.9.88, R6900P before 1.3.2.132, R7100LG before 1.0.0.52, R7900 before 1.0.3.10, R8000 before 1.0.4.46, R7900P before 1.4.1.50, R8000P before 1.4.1.50, and RAX80 before 1.0.1.40.
|
R6250_firmware, R6300_firmware, R6400_firmware, R6400v2_firmware, R6700_firmware, R6900_firmware, R6900p_firmware, R7000_firmware, R7100lg_firmware, R7900_firmware, R7900p_firmware, R8000_firmware, R8000p_firmware, Rax80_firmware
|
7.2
|
|
|