3 results (0.005 seconds)

CVSS: 4.3EPSS: 0%CPEs: 26EXPL: 0

28 Apr 2020 — Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1 before 2017-01-11, JWNR2000Tv3 before 2017-01-11, JWNR2010v3 before 2017-01-11, PLW1000 before 2017-01-11, PLW1010 before 2017-01-11, WNR500 before 2017-01-11, WNR612v3 before 2017-01-11, N450 before 2017-01-11, and CG3000Dv2 before 2017-01-11. Determinados dispositivos de NETGEAR están afectados por una vulnerabili... • https://kb.netgear.com/30114/NETGEAR-Product-Vulnerability-Advisory-CSRF-LocalFile-XSS • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 8.8EPSS: 0%CPEs: 6EXPL: 0

23 Apr 2020 — Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, PLW1000v2 before 1.0.0.14, and PLW1010v2 before 1.0.0.14. Determinados dispositivos NETGEAR están afectados por una omisión de autenticación. Esto afecta a R6300v2 versiones anteriores a 1.0.4.8, PLW1000v2 versiones anteriores a 1.0.0.14 y PLW1010v2 versiones anteriores a 1.0.0.14. • https://kb.netgear.com/000051523/Security-Advisory-for-Authentication-Bypass-on-R6300v2-PLW1000v2-and-PLW1010v2-PSV-2016-0069 • CWE-287: Improper Authentication •

CVSS: 6.8EPSS: 0%CPEs: 6EXPL: 0

22 Apr 2020 — Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7800 before 1.0.2.36, PLW1000v2 before 1.0.0.14, and PLW1010v2 before 1.0.0.14. Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer por parte de un usuario autenticado. Esto afecta a R7800 versiones anteriores a la versión 1.0.2.36, PLW1000v2 versiones anteriores a la versión 1.0.0.14 y PLW1010v2 versiones anteriores a 1.0.0.14. • https://kb.netgear.com/000051473/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Powerlines-and-a-Router-PSV-2016-0121 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •