|
2020-12-30
|
CVE-2020-35800
|
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D6000 before 1.0.0.80, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D7800 before 1.0.3.48, D8500 before 1.0.3.50, DC112A before 1.0.0.48, DGN2200v4 before 1.0.0.114, DM200 before 1.0.0.66, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX2700 before...
|
Ac2100_firmware, Ac2400_firmware, Ac2600_firmware, Cbk40_firmware, Cbr40_firmware, D6000_firmware, D6220_firmware, D6400_firmware, D7000v2_firmware, D7800_firmware, D8500_firmware, Dc112a_firmware, Dgn2200v4_firmware, Dm200_firmware, Eax20_firmware, Eax80_firmware, Ex2700_firmware, Ex3110_firmware, Ex3700_firmware, Ex3800_firmware, Ex3920_firmware, Ex6000_firmware, Ex6100v2_firmware, Ex6110_firmware, Ex6120_firmware, Ex6130_firmware, Ex6150v1_firmware, Ex6150v2_firmware, Ex6200v1_firmware, Ex6250_firmware, Ex6400_firmware, Ex6400v2_firmware, Ex6410_firmware, Ex6920_firmware, Ex7000_firmware, Ex7300_firmware, Ex7300v2_firmware, Ex7320_firmware, Ex7500_firmware, Ex7700_firmware, Ex8000_firmware, Mk62_firmware, Mr60_firmware, Ms60_firmware, R6120_firmware, R6220_firmware, R6230_firmware, R6250_firmware, R6260_firmware, R6300v2_firmware, R6330_firmware, R6350_firmware, R6400v1_firmware, R6400v2_firmware, R6700v1_firmware, R6700v2_firmware, R6700v3_firmware, R6800_firmware, R6850_firmware, R6900_firmware, R6900p_firmware, R6900v2_firmware, R7000_firmware, R7000p_firmware, R7100lg_firmware, R7200_firmware, R7350_firmware, R7400_firmware, R7450_firmware, R7500v2_firmware, R7800_firmware, R7850_firmware, R7900_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, R8300_firmware, R8500_firmware, R8900_firmware, R9000_firmware, Rax120_firmware, Rax15_firmware, Rax200_firmware, Rax20_firmware, Rax35_firmware, Rax40_firmware, Rax45_firmware, Rax50_firmware, Rax75_firmware, Rax80_firmware, Rbk12_firmware, Rbk20_firmware, Rbk40_firmware, Rbk50_firmware, Rbk752_firmware, Rbk842_firmware, Rbk852_firmware, Rbr10_firmware, Rbr20_firmware, Rbr40_firmware, Rbr50_firmware, Rbr750_firmware, Rbr840_firmware, Rbr850_firmware, Rbs10_firmware, Rbs20_firmware, Rbs40_firmware, Rbs40v\-200_firmware, Rbs40v_firmware, Rbs50_firmware, Rbs50y_firmware, Rbs750_firmware, Rbs840_firmware, Rbs850_firmware, Rbw30_firmware, Rs400_firmware, Wn2500rpv2_firmware, Wn3000rpv3_firmware, Wn3500rpv1_firmware, Wndr3400v3_firmware, Wnr1000v3_firmware, Wnr2000v2_firmware, Xr300_firmware, Xr450_firmware, Xr500_firmware, Xr700_firmware
|
9.4
|
|
|
|
2020-12-30
|
CVE-2020-35799
|
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.78, D6200 before 1.1.00.32, D7000 before 1.0.1.68, D7800 before 1.0.1.56, DM200 before 1.0.0.61, EX2700 before 1.0.1.52, EX6100v2 before 1.0.1.76, EX6150v2 before 1.0.1.76, EX6200v2 before 1.0.1.74, EX6400 before 1.0.2.140, EX7300 before 1.0.2.140, EX8000 before 1.0.1.186, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before...
|
D3600_firmware, D6000_firmware, D6200_firmware, D7000_firmware, D7800_firmware, Dm200_firmware, Ex2700_firmware, Ex6100v2_firmware, Ex6150v2_firmware, Ex6200v2_firmware, Ex6400_firmware, Ex7300_firmware, Ex8000_firmware, Jr6150_firmware, Pr2000_firmware, R6020_firmware, R6050_firmware, R6080_firmware, R6120_firmware, R6220_firmware, R6230_firmware, R6260_firmware, R6700v2_firmware, R6800_firmware, R6900v2_firmware, R7500v2_firmware, R7800_firmware, R8900_firmware, R9000_firmware, Rbk20_firmware, Rbk40_firmware, Rbk50_firmware, Rbr20_firmware, Rbr40_firmware, Rbr50_firmware, Rbs20_firmware, Rbs40_firmware, Rbs50_firmware, Wn2000rptv3_firmware, Wn3000rpv2_firmware, Wn3000rpv3_firmware, Wn3100rpv2_firmware, Wnr2000v5_firmware, Wnr2020_firmware, Xr450_firmware, Xr500_firmware
|
9.8
|
|
|
|
2021-12-26
|
CVE-2021-45548
|
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.60, DM200 before 1.0.0.66, EX2700 before 1.0.1.56, EX6150v2 before 1.0.1.86, EX6200v2 before 1.0.1.86, EX6250 before 1.0.0.128, EX6400 before 1.0.2.144, EX6400v2 before 1.0.0.128, EX6410 before 1.0.0.128, EX6420 before 1.0.0.128, EX7300 before 1.0.2.144, EX7300v2 before 1.0.0.128, EX7320 before 1.0.0.128, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.5.26,...
|
D7800_firmware, Dm200_firmware, Ex2700_firmware, Ex6150v2_firmware, Ex6200v2_firmware, Ex6250_firmware, Ex6400_firmware, Ex6400v2_firmware, Ex6410_firmware, Ex6420_firmware, Ex7300_firmware, Ex7300v2_firmware, Ex7320_firmware, R7500v2_firmware, R7800_firmware, R8900_firmware, R9000_firmware, Rax120_firmware, Rbk20_firmware, Rbk40_firmware, Rbr20_firmware, Rbr40_firmware, Rbs20_firmware, Rbs40_firmware, Wn3000rpv2_firmware, Wn3000rpv3_firmware, Wnr2000v5_firmware, Xr500_firmware
|
8.8
|
|
|
|
2021-12-26
|
CVE-2021-45602
|
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.66, EX2700 before 1.0.1.68, WN3000RPv2 before 1.0.0.90, WN3000RPv3 before 1.0.2.100, LBR1020 before 2.6.5.20, LBR20 before 2.6.5.32, R6700AX before 1.0.10.110, R7800 before 1.0.2.86, R8900 before 1.0.5.38, R9000 before 1.0.5.38, RAX10 before 1.0.10.110, RAX120v1 before 1.2.3.28, RAX120v2 before 1.2.3.28, RAX70 before 1.0.10.110, RAX78 before 1.0.10.110, XR450 before 2.3.2.130,...
|
D7800_firmware, Ex2700_firmware, Lbr1020_firmware, Lbr20_firmware, R6700ax_firmware, R7800_firmware, R8900_firmware, R9000_firmware, Rax10_firmware, Rax120v1_firmware, Rax120v2_firmware, Rax70_firmware, Rax78_firmware, Wn3000rpv2_firmware, Wn3000rpv3_firmware, Xr450_firmware, Xr500_firmware, Xr700_firmware
|
7.8
|
|
|
|
2021-12-26
|
CVE-2021-45603
|
Certain NETGEAR devices are affected by disclosure of sensitive information. A UPnP request reveals a device's serial number, which can be used for a password reset. This affects D7800 before 1.0.1.66, EX2700 before 1.0.1.68, WN3000RPv2 before 1.0.0.90, WN3000RPv3 before 1.0.2.100, LBR1020 before 2.6.5.20, LBR20 before 2.6.5.32, R6700AX before 1.0.10.110, R7800 before 1.0.2.86, R8900 before 1.0.5.38, R9000 before 1.0.5.38, RAX10 before 1.0.10.110, RAX120v1 before 1.2.3.28, RAX120v2 before...
|
D7800_firmware, Ex2700_firmware, Lbr1020_firmware, Lbr20_firmware, R6700ax_firmware, R7800_firmware, R8900_firmware, R9000_firmware, Rax10_firmware, Rax120v1_firmware, Rax120v2_firmware, Rax70_firmware, Rax78_firmware, Wn3000rpv2_firmware, Wn3000rpv3_firmware, Xr450_firmware, Xr500_firmware, Xr700_firmware
|
5.5
|
|
|
|
2021-12-26
|
CVE-2021-45658
|
Certain NETGEAR devices are affected by server-side injection. This affects D7800 before 1.0.1.58, DM200 before 1.0.0.66, EX2700 before 1.0.1.56, EX6150v2 before 1.0.1.86, EX6100v2 before 1.0.1.86, EX6200v2 before 1.0.1.78, EX6250 before 1.0.0.110, EX6410 before 1.0.0.110, EX6420 before 1.0.0.110, EX6400v2 before 1.0.0.110, EX7300 before 1.0.2.144, EX6400 before 1.0.2.144, EX7320 before 1.0.0.110, EX7300v2 before 1.0.0.110, R7500v2 before 1.0.3.48, R7800 before 1.0.2.68, R8900 before...
|
D7800_firmware, Dm200_firmware, Ex2700_firmware, Ex6100v2_firmware, Ex6150v2_firmware, Ex6200v2_firmware, Ex6250_firmware, Ex6400_firmware, Ex6400v2_firmware, Ex6410_firmware, Ex6420_firmware, Ex7300_firmware, Ex7300v2_firmware, Ex7320_firmware, R7500v2_firmware, R7800_firmware, R8900_firmware, R9000_firmware, Rax120_firmware, Rbk20_firmware, Rbk40_firmware, Rbk50_firmware, Rbr20_firmware, Rbr50_firmware, Rbs20_firmware, Rbs50_firmware, Rbs50y_firmware, Wn3000rpv2_firmware, Wn3000rpv3_firmware, Wnr2000v5_firmware, Xr500_firmware, Xr700_firmware
|
9.8
|
|
|