CVE-2017-18799
https://notcve.org/view.php?id=CVE-2017-18799
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6200v2 before 1.0.3.14, R6250 before 1.0.4.8, R6300v2 before 1.0.4.8, R6700 before 1.1.1.20, R7000 before 1.0.7.10, R7000P/R6900P before 1.0.0.56, R7100LG before 1.0.0.30, R7900 before 1.0.1.14, R8000 before 1.0.3.22, R8500 before 1.0.2.74, and D8500 before 1.0.3.28. Determinados dispositivos NETGEAR están afectados por una configuración incorrecta de los ajustes de seguridad. Esto afecta a R6200v2 versiones anteriores a 1.0.3.14, R6250 versiones anteriores a 1.0.4.8, R6300v2 versiones anteriores a 1.0.4.8, R6700 versiones anteriores a 1.1.1.20, R7000 versiones anteriores a 1.0.7.10, R7000P/R6900P versiones anteriores a 1. 0.0.56, R7100LG versiones anteriores a 1.0.0.30, R7900 versiones anteriores a 1.0.1.14, R8000 versiones anteriores a 1.0.3.22, R8500 versiones anteriores a 1.0.2.74, y D8500 versiones anteriores a 1.0.3.28. • https://kb.netgear.com/000049357/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-D8500-and-Some-Routers-PSV-2017-0528 • CWE-20: Improper Input Validation •
CVE-2017-18842
https://notcve.org/view.php?id=CVE-2017-18842
Certain NETGEAR devices are affected by CSRF. This affects R7300 before 1.0.0.54, R8500 before 1.0.2.94, DGN2200v1 before 1.0.0.55, and D2200D/D2200DW-1FRNAS before 1.0.0.32. Determinados dispositivos NETGEAR están afectados por un ataque de tipo CSRF. Esto afecta a R7300 versiones anteriores a 1.0.0.54, R8500 versiones anteriores a 1.0.2.94, DGN2200v1 versiones anteriores a 1.0.0.55, y D2200D/D2200DW-1FRNAS versiones anteriores a 1.0.0.32. • https://kb.netgear.com/000049017/Security-Advisory-for-a-Cross-Site-Request-Forgery-on-Some-Routers-DSL-Gateways-and-a-Modem-Router-PSV-2017-0327 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVE-2017-18846
https://notcve.org/view.php?id=CVE-2017-18846
Certain NETGEAR devices are affected by a stack-based buffer overflow. This affects R6250 before 1.0.4.12, R6400v2 before 1.0.2.32, R7000P/R6900P before 1.0.0.56, R7900 before 1.0.1.18, R8300 before 1.0.2.100_1.0.82, R8500 before 1.0.2.100_1.0.82, and D8500 before 1.0.3.29. Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria. Esto afecta a R6250 versiones anteriores a 1.0.4.12, R6400v2 versiones anteriores a 1.0.2.32, R7000P/R6900P versiones anteriores a 1.0.0.56, R7900 versiones anteriores a 1.0.1.18, R8300 versiones anteriores a 1.0.2.100_1.0.82, R8500 versiones anteriores a 1.0.2.100_1.0.82, y D8500 versiones anteriores a 1.0.3.29. • https://kb.netgear.com/000049013/Security-Advisory-for-Stack-Overflow-on-Some-Routers-PSV-PSV-2017-0793 • CWE-787: Out-of-bounds Write •
CVE-2017-18847
https://notcve.org/view.php?id=CVE-2017-18847
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400v2 before 1.0.2.32, R7000P/R6900P before 1.0.0.56, R7900 before 1.0.1.18, R8300 before 1.0.2.100_1.0.82, R8500 before 1.0.2.100_1.0.82, and D8500 before 1.0.3.29. Determinados dispositivos NETGEAR están afectados por la capacidad de un atacante para leer archivos arbitrarios. Esto afecta a R6400v2 versiones anteriores a 1.0.2.32, R7000P/R6900P versiones anteriores a 1.0.0.56, R7900 versiones anteriores a 1.0.1.18, R8300 versiones anteriores a 1.0.2.100_1.0.82, R8500 versiones anteriores a 1.0.2.100_1.0.82, y D8500 versiones anteriores a 1.0.3.29. • https://kb.netgear.com/000049012/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-PSV-PSV-2017-0783 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVE-2017-18848
https://notcve.org/view.php?id=CVE-2017-18848
Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.0.36, AC1450 before 1.0.0.36, R7300 before 1.0.0.54, and R8500 before 1.0.2.94. Determinados dispositivos NETGEAR están afectados por un ataque de tipo CSRF. Esto afecta a R6300v2 versiones anteriores a 1.0.0.36, AC1450 versiones anteriores a 1.0.0.36, R7300 versiones anteriores a 1.0.0.54, y R8500 versiones anteriores a 1.0.2.94. • https://kb.netgear.com/000049011/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-PSV-2017-0334 • CWE-352: Cross-Site Request Forgery (CSRF) •