CVSS: 6.0EPSS: 0%CPEs: 22EXPL: 0CVE-2020-26915
https://notcve.org/view.php?id=CVE-2020-26915
09 Oct 2020 — Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Determinados dispositivos NETGEAR, están afectados por una vulnerabilidad de tipo XSS almacenado. Esto afecta a D7800 versiones anteriores a 1.0.1.56, R7500v2 versiones anteriores a ... • https://kb.netgear.com/000062338/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-WiFi-Systems-PSV-2018-0554 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2018-21118
https://notcve.org/view.php?id=CVE-2018-21118
22 Apr 2020 — NETGEAR XR500 devices before 2.3.2.32 are affected by authentication bypass. Los dispositivos NETGEAR XR500 versiones anteriores a 2.3.2.32, están afectados por una omisión de autenticación. • https://kb.netgear.com/000060240/Security-Advisory-for-Authentication-Bypass-on-XR500-PSV-2018-0324 • CWE-287: Improper Authentication •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2018-21117
https://notcve.org/view.php?id=CVE-2018-21117
22 Apr 2020 — NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler. Los dispositivos NETGEAR XR500 versiones anteriores a 2.3.2.32, están afectados por una ejecución de código remota por parte de atacantes no autenticados por medio del manejador traceroute. • https://kb.netgear.com/000060241/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-XR500-PSV-2018-0313 •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2018-21116
https://notcve.org/view.php?id=CVE-2018-21116
22 Apr 2020 — NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers. Los dispositivos NETGEAR XR500 versiones anteriores a 2.3.2.32, están afectados por una ejecución de código remota por parte de atacantes no autenticados. • https://kb.netgear.com/000060242/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-XR500-PSV-2018-0312 •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2018-21115
https://notcve.org/view.php?id=CVE-2018-21115
22 Apr 2020 — NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers. Los dispositivos NETGEAR XR500 versiones anteriores a 2.3.2.32, están afectados por una ejecución de código remota por parte de atacantes no autenticados. • https://kb.netgear.com/000060243/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-XR500-PSV-2018-0309 • CWE-20: Improper Input Validation •
CVSS: 6.8EPSS: 0%CPEs: 22EXPL: 0CVE-2019-20736
https://notcve.org/view.php?id=CVE-2019-20736
16 Apr 2020 — Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6000 before 1.0.0.72, D6100 before 1.0.0.63, R7800 before 1.0.2.52, R8900 before 1.0.4.2, R9000 before 1.0.4.2, WNDR3700v4 before 1.0.2.102, WNDR4300v1 before 1.0.2.104, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.0.0.58, WNR2000v5 before 1.0.0.68, and XR500 before 2.3.2.32. Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por par... • https://kb.netgear.com/000061190/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2018-0133 • CWE-787: Out-of-bounds Write •
CVSS: 6.8EPSS: 0%CPEs: 30EXPL: 0CVE-2019-20735
https://notcve.org/view.php?id=CVE-2019-20735
16 Apr 2020 — Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.75, D6000 before V1.0.0.75, D6100 before V1.0.0.63, R7800 before v1.0.2.52, R8900 before v1.0.4.2, R9000 before v1.0.4.2, RBK50 before v2.3.0.32, RBR50 before v2.3.0.32, RBS50 before v2.3.0.32, WNDR3700v4 before V1.0.2.102, WNDR4300v1 before V1.0.2.104, WNDR4300v2 before v1.0.0.58, WNDR4500v3 before v1.0.0.58, WNR2000v5 before v1.0.0.68, and XR500 before V2.3.2.32. Determinados dis... • https://kb.netgear.com/000061191/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0138 • CWE-787: Out-of-bounds Write •
CVSS: 6.8EPSS: 0%CPEs: 20EXPL: 0CVE-2019-20727
https://notcve.org/view.php?id=CVE-2019-20727
16 Apr 2020 — Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6100 before 1.0.0.63, R7800 before 1.0.2.52, R8900 before 1.0.4.2, R9000 before 1.0.4.2, WNDR3700v4 before 1.0.2.102, WNDR4300v1 before 1.0.2.104, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.0.0.58, WNR2000v5 before 1.0.0.68, and XR500 before 2.3.2.32. Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un usuario autenticado. Esto afecta a D6100 versiones anteriores... • https://kb.netgear.com/000061201/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-Gateways-PSV-2018-0139 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 6.8EPSS: 0%CPEs: 24EXPL: 0CVE-2019-20726
https://notcve.org/view.php?id=CVE-2019-20726
16 Apr 2020 — Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D6100 before 1.0.0.63, R7800 before 1.0.2.52, R8900 before 1.0.4.2, R9000 before 1.0.4.2, WNDR3700v4 before 1.0.2.102, WNDR4300v1 before 1.0.2.104, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.0.0.58, WNR2000v5 before 1.0.0.68, and XR500 before 2.3.2.32. Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un usuario autenti... • https://kb.netgear.com/000061202/Security-Advisory-for-Post-Authentication-Command-on-Some-Routers-and-Gateways-PSV-2018-0141 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 6.8EPSS: 0%CPEs: 24EXPL: 0CVE-2019-20725
https://notcve.org/view.php?id=CVE-2019-20725
16 Apr 2020 — Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D6100 before 1.0.0.63, R7800 before 1.0.2.52, R8900 before 1.0.4.2, R9000 before 1.0.4.2, WNDR3700v4 before 1.0.2.102, WNDR4300v1 before 1.0.2.104, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.0.0.58, WNR2000v5 before 1.0.0.68, and XR500 before 2.3.2.32. Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stac... • https://kb.netgear.com/000061203/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2018-0143 • CWE-787: Out-of-bounds Write •