Browse CVEs

HIGH 8.8 CVE-2021-27255 This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentica… Br200 Firmware 1.0.0.134 / 1.0.1.60+ Fix from $1,9502021-03-05 HIGH 8.8 CVE-2021-27256 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. … Br200 Firmware 1.0.0.134 / 1.0.1.60+ Fix from $1,9502021-03-05 MEDIUM 6.5 CVE-2021-27257 This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800… Br200 Firmware 1.0.0.134 / 1.0.1.60+ Fix from $1,6002021-03-05 HIGH 8.8 CVE-2020-27861 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentica… Cbk40 Firmware 1.0.0.210 / 1.0.1.82+ Fix from $1,9502021-02-12 HIGH 8.8 CVE-2020-27866EPSS 9% This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260,… Ac2100 Firmware 1.2.0.76+ Fix from $1,9502021-02-12 MEDIUM 6.8 CVE-2020-27867 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260… Ac2100 Firmware 1.2.0.76+ Fix from $1,6002021-02-12 HIGH 8.8 CVE-2020-27872 This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers. Auth… Ac2100 Firmware 1.2.0.76+ Fix from $1,9502021-02-04 MEDIUM 6.5 CVE-2020-27873 This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 rout… Ac2100 Firmware 1.2.0.76+ Fix from $1,6002021-02-04 HIGH 8.1 CVE-2020-35831 Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before … D7800 Firmware 1.0.0.78 / 1.0.1.56+ Fix from $1,9502020-12-30 HIGH 8.1 CVE-2020-35839 Certain NETGEAR devices are affected by Stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before … D7800 Firmware 1.0.0.78 / 1.0.1.10+ Fix from $1,9502020-12-30 HIGH 7.6 CVE-2020-35841 Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 bef… D6200 Firmware 1.0.0.42 / 1.0.1.24+ Fix from $1,9502020-12-30 MEDIUM 5.4 CVE-2020-35840 Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 bef… D6200 Firmware 1.0.0.42 / 1.0.1.24+ Fix from $1,6002020-12-30 MEDIUM 5.4 CVE-2020-35842 Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 bef… D6200 Firmware 1.0.0.42 / 1.0.1.24+ Fix from $1,6002020-12-30 CRITICAL 9.8 CVE-2020-35795 Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72… Ac2100 Firmware 1.0.0.36 / 1.0.1.58+ Fix from $2,3002020-12-30 CRITICAL 9.8 CVE-2020-35796 Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, … Cbr40 Firmware 1.0.0.36 / 1.0.0.48+ Fix from $2,3002020-12-30 CRITICAL 9.8 CVE-2020-35797 NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an unauthenticated attacker. Nms300 Firmware 1.6.0.27+ Fix from $2,3002020-12-30 CRITICAL 9.8 CVE-2020-35799 Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 befor… D3600 Firmware 1.0.0.61 / 1.0.0.76+ Fix from $2,3002020-12-30 CRITICAL 9.4 CVE-2020-35800 Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC… Ac2100 Firmware 1.0.0.60 / 1.0.0.80+ Fix from $2,3002020-12-30 HIGH 7.8 CVE-2020-35798 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700v3 before 1.0.4.… R6400v2 Firmware 1.0.2.74 / 1.0.4.26+ Fix from $1,9502020-12-30 HIGH 7.5 CVE-2020-35802 Certain NETGEAR devices are affected by disclosure of sensitive information. This affects CBR40 before 2.5.0.14, RBW30 before 2.6.1.4, RAX75 before 1… Cbr40 Firmware 1.0.3.102 / 2.5.0.14+ Fix from $1,9502020-12-30 HIGH 7.3 CVE-2020-35801 Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.4… Jgs516pe Firmware 2.6.0.48+ Fix from $1,9502020-12-30 MEDIUM 6.8 CVE-2020-35794 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBS40V before 2.6.1.4, RBK752 before 3.2.15.25, RBR7… Rbs40v Firmware 2.6.1.4 / 3.2.15.25+ Fix from $1,6002020-12-30 HIGH 8.8 CVE-2020-35785 NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication (aka PSV-2020-0363, PSV-2020-0364, and PSV-2020-0365). Dgn2200 Firmware 1.0.0.60+ Fix from $1,9502020-12-30 HIGH 8.8 CVE-2020-35789 NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user. Nms300 Firmware 1.6.0.27+ Fix from $1,9502020-12-30 HIGH 8.1 CVE-2020-35782 Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.4… Jgs516pe Firmware 2.6.0.48+ Fix from $1,9502020-12-30 HIGH 8.0 CVE-2020-35787 Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 … D3600 Firmware 1.0.0.76 / 1.0.1.18+ Fix from $1,9502020-12-30 HIGH 7.2 CVE-2020-35784 Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48… Jgs516pe Firmware 2.6.0.48+ Fix from $1,9502020-12-30 MEDIUM 6.8 CVE-2020-35788 NETGEAR WAC104 devices before 1.0.4.13 are affected by a buffer overflow by an authenticated user. Wac104 Firmware 1.0.4.13+ Fix from $1,6002020-12-30 MEDIUM 6.8 CVE-2020-35790 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 … D7800 Firmware 1.0.1.56 / 1.0.2.68+ Fix from $1,6002020-12-30 MEDIUM 6.8 CVE-2020-35792 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7500v2 before 1.0.3.48, R8900 before 1.0.5.2, R9000… R7500 Firmware 1.0.2.68 / 1.0.3.48+ Fix from $1,6002020-12-30