CVSS: 9.7EPSS: 0%CPEs: 256EXPL: 0CVE-2020-35800
https://notcve.org/view.php?id=CVE-2020-35800
29 Dec 2020 — Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D6000 before 1.0.0.80, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D7800 before 1.0.3.48, D8500 before 1.0.3.50, DC112A before 1.0.0.48, DGN2200v4 before 1.0.0.114, DM200 before 1.0.0.66, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX2700 before 1.0.1.58, EX3110 bef... • https://kb.netgear.com/000062733/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-Range-Extenders-and-Orbi-WiFi-Systems-PSV-2020-0112 •
CVSS: 6.8EPSS: 0%CPEs: 42EXPL: 0CVE-2020-26913
https://notcve.org/view.php?id=CVE-2020-26913
09 Oct 2020 — Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.63, R7800 before 1.0.2.60, R8900 before 1.0.4.26, R9000 before 1.0.4.26, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50 before 2.3.0.32, RBK40 before 2.3.0.28, RBR40 before 2.3.0.28, RBS40 before 2.3.0.28, SRK60 before 2.2.2.20, SRR60 before 2.2.2.20, SRS60 before 2.2.2.20, WN3000RPv2 before 1.0.0.78, WNDR430... • https://kb.netgear.com/000062340/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-and-WiFi-Systems-PSV-2018-0140 • CWE-787: Out-of-bounds Write •
CVSS: 6.0EPSS: 0%CPEs: 22EXPL: 0CVE-2020-26915
https://notcve.org/view.php?id=CVE-2020-26915
09 Oct 2020 — Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Determinados dispositivos NETGEAR, están afectados por una vulnerabilidad de tipo XSS almacenado. Esto afecta a D7800 versiones anteriores a 1.0.1.56, R7500v2 versiones anteriores a ... • https://kb.netgear.com/000062338/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-WiFi-Systems-PSV-2018-0554 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.9EPSS: 0%CPEs: 30EXPL: 1CVE-2020-13245
https://notcve.org/view.php?id=CVE-2020-13245
28 May 2020 — Certain NETGEAR devices are affected by Missing SSL Certificate Validation. This affects R7000 1.0.9.6_1.2.19 through 1.0.11.100_10.2.10, and possibly R6120, R7800, R6220, R8000, R6350, R9000, R6400, RAX120, R6400v2, RBR20, R6800, XR300, R6850, XR500, and R7000P. Determinados dispositivos NETGEAR están afectados por una falta de comprobación del certificado SSL. Esto afecta a R7000 versiones 1.0.9.6_1.2.19 hasta 1.0.11.100_10.2.10, y posiblemente a R6120, R7800, R6220, R8000, R6350, R9000, R6400, RAX120, R6... • https://iot-lab-fh-ooe.github.io/netgear_update_vulnerability • CWE-295: Improper Certificate Validation •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2018-21118
https://notcve.org/view.php?id=CVE-2018-21118
22 Apr 2020 — NETGEAR XR500 devices before 2.3.2.32 are affected by authentication bypass. Los dispositivos NETGEAR XR500 versiones anteriores a 2.3.2.32, están afectados por una omisión de autenticación. • https://kb.netgear.com/000060240/Security-Advisory-for-Authentication-Bypass-on-XR500-PSV-2018-0324 • CWE-287: Improper Authentication •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2018-21117
https://notcve.org/view.php?id=CVE-2018-21117
22 Apr 2020 — NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler. Los dispositivos NETGEAR XR500 versiones anteriores a 2.3.2.32, están afectados por una ejecución de código remota por parte de atacantes no autenticados por medio del manejador traceroute. • https://kb.netgear.com/000060241/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-XR500-PSV-2018-0313 •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2018-21116
https://notcve.org/view.php?id=CVE-2018-21116
22 Apr 2020 — NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers. Los dispositivos NETGEAR XR500 versiones anteriores a 2.3.2.32, están afectados por una ejecución de código remota por parte de atacantes no autenticados. • https://kb.netgear.com/000060242/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-XR500-PSV-2018-0312 •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2018-21115
https://notcve.org/view.php?id=CVE-2018-21115
22 Apr 2020 — NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers. Los dispositivos NETGEAR XR500 versiones anteriores a 2.3.2.32, están afectados por una ejecución de código remota por parte de atacantes no autenticados. • https://kb.netgear.com/000060243/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-XR500-PSV-2018-0309 • CWE-20: Improper Input Validation •
CVSS: 6.8EPSS: 0%CPEs: 22EXPL: 0CVE-2019-20736
https://notcve.org/view.php?id=CVE-2019-20736
16 Apr 2020 — Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6000 before 1.0.0.72, D6100 before 1.0.0.63, R7800 before 1.0.2.52, R8900 before 1.0.4.2, R9000 before 1.0.4.2, WNDR3700v4 before 1.0.2.102, WNDR4300v1 before 1.0.2.104, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.0.0.58, WNR2000v5 before 1.0.0.68, and XR500 before 2.3.2.32. Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por par... • https://kb.netgear.com/000061190/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2018-0133 • CWE-787: Out-of-bounds Write •
CVSS: 6.8EPSS: 0%CPEs: 30EXPL: 0CVE-2019-20735
https://notcve.org/view.php?id=CVE-2019-20735
16 Apr 2020 — Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.75, D6000 before V1.0.0.75, D6100 before V1.0.0.63, R7800 before v1.0.2.52, R8900 before v1.0.4.2, R9000 before v1.0.4.2, RBK50 before v2.3.0.32, RBR50 before v2.3.0.32, RBS50 before v2.3.0.32, WNDR3700v4 before V1.0.2.102, WNDR4300v1 before V1.0.2.104, WNDR4300v2 before v1.0.0.58, WNDR4500v3 before v1.0.0.58, WNR2000v5 before v1.0.0.68, and XR500 before V2.3.2.32. Determinados dis... • https://kb.netgear.com/000061191/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0138 • CWE-787: Out-of-bounds Write •