|
2020-10-09
|
CVE-2020-26918
|
Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 before 1.0.1.46, R6400v2 before 1.0.2.66, R6700v3 before 1.0.2.66, R7100LG before 1.0.0.50, R7300DST before 1.0.0.70, R7900 before 1.0.3.8, R8300 before 1.0.2.128, and R8500 before 1.0.2.128.
|
Ex7000_firmware, R6250_firmware, R6400_firmware, R6400v2_firmware, R6700v3_firmware, R7100lg_firmware, R7300dst_firmware, R7900_firmware, R8300_firmware, R8500_firmware
|
4.8
|
|
|
|
2020-12-30
|
CVE-2020-35795
|
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D7800 before 1.0.1.58, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX7500 before 1.0.0.68, MK62 before 1.0.5.102, MR60 before 1.0.5.102, MS60 before 1.0.5.102, R6120 before 1.0.0.70, R6220 before 1.1.0.100, R6230 before 1.1.0.100, R6260 before 1.1.0.76, R6330 before...
|
Ac2100_firmware, Ac2400_firmware, Ac2600_firmware, Cbk40_firmware, Cbr40_firmware, D7800_firmware, Eax20_firmware, Eax80_firmware, Ex7500_firmware, Mk62_firmware, Mr60_firmware, Ms60_firmware, R6120_firmware, R6220_firmware, R6230_firmware, R6260_firmware, R6330_firmware, R6350_firmware, R6400_firmware, R6400v2_firmware, R6700_firmware, R6700v2_firmware, R6700v3_firmware, R6800_firmware, R6850_firmware, R6900_firmware, R6900p_firmware, R6900v2_firmware, R7000_firmware, R7000p_firmware, R7200_firmware, R7350_firmware, R7400_firmware, R7450_firmware, R7800_firmware, R7850_firmware, R7900_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, R8900_firmware, R9000_firmware, Rax120_firmware, Rax15_firmware, Rax200_firmware, Rax20_firmware, Rax45_firmware, Rax50_firmware, Rax75_firmware, Rax80_firmware, Rbk12_firmware, Rbk20_firmware, Rbk40_firmware, Rbk50_firmware, Rbk752_firmware, Rbk842_firmware, Rbk852_firmware, Rbr10_firmware, Rbr20_firmware, Rbr40_firmware, Rbr50_firmware, Rbr750_firmware, Rbr840_firmware, Rbr850_firmware, Rbs10_firmware, Rbs20_firmware, Rbs40_firmware, Rbs50_firmware, Rbs750_firmware, Rbs840_firmware, Rbs850_firmware, Rs400_firmware, Xr300_firmware, Xr450_firmware, Xr500_firmware, Xr700_firmware
|
9.8
|
|
|
|
2020-12-30
|
CVE-2020-35796
|
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, DC112A before 1.0.0.48, DGN2200v4 before 1.0.0.114, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX3700 before 1.0.0.84, EX3800 before 1.0.0.84, EX3920 before 1.0.0.84, EX6000 before 1.0.0.44, EX6100 before 1.0.2.28, EX6120 before 1.0.0.54, EX6130 before 1.0.0.36, EX6150...
|
Cbr40_firmware, D6220_firmware, D6400_firmware, D7000v2_firmware, D8500_firmware, Dc112a_firmware, Dgn2200v4_firmware, Eax20_firmware, Eax80_firmware, Ex3700_firmware, Ex3800_firmware, Ex3920_firmware, Ex6000_firmware, Ex6100_firmware, Ex6120_firmware, Ex6130_firmware, Ex6150_firmware, Ex6200_firmware, Ex6920_firmware, Ex7000_firmware, Ex7500_firmware, Mk62_firmware, Mr60_firmware, Ms60_firmware, R6250_firmware, R6300v2_firmware, R6400_firmware, R6400v2_firmware, R6700_firmware, R6700v3_firmware, R6900_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7100lg_firmware, R7850_firmware, R7900_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, R8300_firmware, R8500_firmware, Rax15_firmware, Rax200_firmware, Rax20_firmware, Rax50_firmware, Rax75_firmware, Rax80_firmware, Rbk752_firmware, Rbk842_firmware, Rbk852_firmware, Rbr750_firmware, Rbr840_firmware, Rbr850_firmware, Rbs40v\-200_firmware, Rbs750_firmware, Rbs840_firmware, Rbs850_firmware, Rbw30_firmware, Rs400_firmware, Rx45_firmware, Wn2500rpv2_firmware, Wn3500rp_firmware, Wndr3400v3_firmware, Wnr1000v3_firmware, Wnr2000v2_firmware, Wnr3500lv2_firmware, Xr300_firmware
|
9.8
|
|
|
|
2020-12-30
|
CVE-2020-35798
|
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700v3 before 1.0.4.84, R6900P before 1.3.2.124, R7000 before 1.0.11.100, R7000P before 1.3.2.124, R7800 before 1.0.2.74, R7850 before 1.0.5.60, R7900 before 1.0.4.26, R7960P before 1.4.1.50, R8000 before 1.0.4.52, R7900P before 1.4.1.50, R8000P before 1.4.1.50, RAX15 before 1.0.1.64, RAX20 before 1.0.1.64, RAX200 before 1.0.1.12, RAX45 before 1.0.2.66, RAX50...
|
R6400v2_firmware, R6700v3_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7800_firmware, R7850_firmware, R7900_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, Rax15_firmware, Rax200_firmware, Rax20_firmware, Rax45_firmware, Rax50_firmware, Rax75_firmware, Rax80_firmware, Rbk752_firmware, Rbk842_firmware, Rbk852_firmware, Rbr750_firmware, Rbr840_firmware, Rbr850_firmware, Rbs750_firmware, Rbs840_firmware, Rbs850_firmware, Rs400_firmware, Xr300_firmware
|
7.8
|
|
|
|
2020-12-30
|
CVE-2020-35800
|
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D6000 before 1.0.0.80, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D7800 before 1.0.3.48, D8500 before 1.0.3.50, DC112A before 1.0.0.48, DGN2200v4 before 1.0.0.114, DM200 before 1.0.0.66, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX2700 before...
|
Ac2100_firmware, Ac2400_firmware, Ac2600_firmware, Cbk40_firmware, Cbr40_firmware, D6000_firmware, D6220_firmware, D6400_firmware, D7000v2_firmware, D7800_firmware, D8500_firmware, Dc112a_firmware, Dgn2200v4_firmware, Dm200_firmware, Eax20_firmware, Eax80_firmware, Ex2700_firmware, Ex3110_firmware, Ex3700_firmware, Ex3800_firmware, Ex3920_firmware, Ex6000_firmware, Ex6100v2_firmware, Ex6110_firmware, Ex6120_firmware, Ex6130_firmware, Ex6150v1_firmware, Ex6150v2_firmware, Ex6200v1_firmware, Ex6250_firmware, Ex6400_firmware, Ex6400v2_firmware, Ex6410_firmware, Ex6920_firmware, Ex7000_firmware, Ex7300_firmware, Ex7300v2_firmware, Ex7320_firmware, Ex7500_firmware, Ex7700_firmware, Ex8000_firmware, Mk62_firmware, Mr60_firmware, Ms60_firmware, R6120_firmware, R6220_firmware, R6230_firmware, R6250_firmware, R6260_firmware, R6300v2_firmware, R6330_firmware, R6350_firmware, R6400v1_firmware, R6400v2_firmware, R6700v1_firmware, R6700v2_firmware, R6700v3_firmware, R6800_firmware, R6850_firmware, R6900_firmware, R6900p_firmware, R6900v2_firmware, R7000_firmware, R7000p_firmware, R7100lg_firmware, R7200_firmware, R7350_firmware, R7400_firmware, R7450_firmware, R7500v2_firmware, R7800_firmware, R7850_firmware, R7900_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, R8300_firmware, R8500_firmware, R8900_firmware, R9000_firmware, Rax120_firmware, Rax15_firmware, Rax200_firmware, Rax20_firmware, Rax35_firmware, Rax40_firmware, Rax45_firmware, Rax50_firmware, Rax75_firmware, Rax80_firmware, Rbk12_firmware, Rbk20_firmware, Rbk40_firmware, Rbk50_firmware, Rbk752_firmware, Rbk842_firmware, Rbk852_firmware, Rbr10_firmware, Rbr20_firmware, Rbr40_firmware, Rbr50_firmware, Rbr750_firmware, Rbr840_firmware, Rbr850_firmware, Rbs10_firmware, Rbs20_firmware, Rbs40_firmware, Rbs40v\-200_firmware, Rbs40v_firmware, Rbs50_firmware, Rbs50y_firmware, Rbs750_firmware, Rbs840_firmware, Rbs850_firmware, Rbw30_firmware, Rs400_firmware, Wn2500rpv2_firmware, Wn3000rpv3_firmware, Wn3500rpv1_firmware, Wndr3400v3_firmware, Wnr1000v3_firmware, Wnr2000v2_firmware, Xr300_firmware, Xr450_firmware, Xr500_firmware, Xr700_firmware
|
9.4
|
|
|
|
2021-09-21
|
CVE-2021-40847
|
The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code execution as root via a MitM attack. While the parental controls themselves are not enabled by default on the routers, the Circle update daemon, circled, is enabled by default. This daemon connects to Circle and NETGEAR to obtain version information and updates to the circled daemon and its filtering database. However, database updates from NETGEAR are unsigned...
|
R6400v2_firmware, R6700_firmware, R6700v3_firmware, R6900_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7850_firmware, R7900_firmware, R8000_firmware, Rs400_firmware
|
8.1
|
|
|
|
2021-11-15
|
CVE-2021-34991
|
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPnP service, which listens on TCP port 5000 by default. When parsing the uuid request header, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can...
|
Cax80_firmware, D6220_firmware, D6400_firmware, D7000v2_firmware, Dc112a_firmware, Dgn2200v4_firmware, Ex3700_firmware, Ex3800_firmware, Ex6120_firmware, Ex6130_firmware, R6400_firmware, R6400v2_firmware, R6700v3_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7100lg_firmware, R7850_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, R8300_firmware, R8500_firmware, Rax15_firmware, Rax200_firmware, Rax20_firmware, Rax35v2_firmware, Rax38v2_firmware, Rax40v2_firmware, Rax42_firmware, Rax43_firmware, Rax45_firmware, Rax48_firmware, Rax50_firmware, Rax50s_firmware, Rax75_firmware, Rax80_firmware, Raxe450_firmware, Raxe500_firmware, Rs400_firmware, Wndr3400v3_firmware, Wnr3500lv2_firmware, Xr300_firmware
|
8.8
|
|
|
|
2021-12-26
|
CVE-2021-45525
|
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX7000 before 1.0.1.80, R6400 before 1.0.1.50, R6400v2 before 1.0.4.118, R6700 before 1.0.2.8, R6700v3 before 1.0.4.118, R6900 before 1.0.2.8, R6900P before 1.3.2.124, R7000 before 1.0.9.88, R7000P before 1.3.2.124, R7900 before 1.0.3.18, R7900P before 1.4.1.50, R8000 before 1.0.4.46, R8000P before 1.4.1.50, RAX80 before 1.0.1.56, and WNR3500Lv2 before 1.2.0.62.
|
Ex7000_firmware, R6400_firmware, R6400v2_firmware, R6700_firmware, R6700v3_firmware, R6900_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7900_firmware, R7900p_firmware, R8000_firmware, R8000p_firmware, Rax80_firmware, Wnr3500lv2_firmware
|
8.8
|
|
|
|
2021-12-26
|
CVE-2021-45527
|
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.102, D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, DC112A before 1.0.0.54, EX7000 before 1.0.1.94, EX7500 before 1.0.0.72, R6250 before 1.0.4.48, R6300v2 before 1.0.4.52, R6400 before 1.0.1.70, R6400v2 before 1.0.4.102, R6700v3 before 1.0.4.102, R7000 before 1.0.11.116, R7100LG before 1.0.0.64, R7850 before 1.0.5.68, R7900 before 1.0.4.30, R7960P before...
|
D6220_firmware, D6400_firmware, D7000v2_firmware, D8500_firmware, Dc112a_firmware, Ex7000_firmware, Ex7500_firmware, R6250_firmware, R6300v2_firmware, R6400_firmware, R6400v2_firmware, R6700v3_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7100lg_firmware, R7850_firmware, R7900_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, R8300_firmware, R8500_firmware, Rax200_firmware, Rax75_firmware, Rax80_firmware, Rbk752_firmware, Rbk852_firmware, Rbr750_firmware, Rbr850_firmware, Rbs40v_firmware, Rbs750_firmware, Rbs850_firmware, Rs400_firmware, Xr300_firmware
|
9.8
|
|
|
|
2021-12-26
|
CVE-2021-45554
|
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.74, R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R7000 before 1.0.11.126, R6900P before 1.3.3.140, R7000P before 1.3.3.140, and R8000 before 1.0.4.74.
|
R6400_firmware, R6400v2_firmware, R6700v3_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R8000_firmware
|
6.8
|
|
|