Browse CVEs

MEDIUM 6.7 CVE-2020-35791 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.68, R8900 before 1.0.5.2, and R90… R7800 Firmware 1.0.2.68 / 1.0.5.2+ Fix from $1,6002020-12-30 MEDIUM 6.7 CVE-2020-35793 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.58, R7500v2 before 1.0.3.46, R780… D7800 Firmware 1.0.1.58 / 1.0.2.74+ Fix from $1,6002020-12-30 MEDIUM 6.5 CVE-2020-35780 NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service. Nms300 Firmware 1.6.0.27+ Fix from $1,6002020-12-30 MEDIUM 6.5 CVE-2020-35781 NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service. Nms300 Firmware 1.6.0.27+ Fix from $1,6002020-12-30 MEDIUM 6.5 CVE-2020-35783 Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 before 2.6.0.48… Jgs516pe Firmware 2.6.0.48+ Fix from $1,6002020-12-30 HIGH 8.8 CVE-2020-35778 Certain NETGEAR devices are affected by CSRF. This affects GS716Tv3 before 6.3.1.36 and GS724Tv4 before 6.3.1.36. Gs716t Firmware 6.3.1.36+ Fix from $1,9502020-12-30 HIGH 8.6 CVE-2020-35779 NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service. Nms300 Firmware 1.6.0.27+ Fix from $1,9502020-12-30 HIGH 8.4 CVE-2020-35777 NETGEAR DGN2200v1 devices before v1.0.0.58 are affected by command injection. Dgn2200v1 Firmware 1.0.0.58+ Fix from $1,9502020-12-30 MEDIUM 6.5 CVE-2020-5641 Cross-site request forgery (CSRF) vulnerability in GS108Ev3 firmware version 2.06.10 and earlier allows remote attackers to hijack the authentication… Gs108ev3 Firmware after 2.06.10 Fix from $1,6002020-11-24 HIGH 8.8 CVE-2020-28373 upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overflow. This affects R6400v2 V1.0… R6400v2 Firmware Mitigation only Fix from $1,9502020-11-09 MEDIUM 6.5 CVE-2020-28041 The SIP ALG implementation on NETGEAR Nighthawk R7000 1.0.9.64_10.2.64 devices allows remote attackers to communicate with arbitrary TCP and UDP serv… Nighthawk R7000 Firmware No fix yet Fix from $1,6002020-11-02 MEDIUM 6.5 CVE-2020-17409 This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R622… R6020 Firmware 1.0.0.44 / 1.0.0.70+ Fix from $1,6002020-10-13 CRITICAL 9.8 CVE-2020-26927 Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.42, R60… Ac2100 Firmware 1.0.0.42 / 1.0.1.26+ Fix from $2,3002020-10-09 CRITICAL 9.6 CVE-2020-26926 Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, … Cbr40 Firmware 2.5.0.10 / 3.2.10.11+ Fix from $2,3002020-10-09 CRITICAL 9.6 CVE-2020-26928 Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, … Cbr40 Firmware 2.5.0.10 / 3.2.10.11+ Fix from $2,3002020-10-09 HIGH 8.0 CVE-2020-26929 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.100 and R6230 before 1.1.0.100. R6230 Firmware 1.1.0.100+ Fix from $1,9502020-10-09 MEDIUM 6.5 CVE-2020-26924 Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC720 before 3.9.1.13 and WAC730 before 3.9.1.13. Wac720 Firmware 3.9.1.13+ Fix from $1,6002020-10-09 MEDIUM 6.5 CVE-2020-26931 Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 be… Wc7500 Firmware 6.5.5.24+ Fix from $1,6002020-10-09 CRITICAL 9.8 CVE-2020-26919 KEVEPSS 57% NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level. Jgs516pe Firmware 2.6.0.43+ Fix from $2,3002020-10-09 HIGH 8.8 CVE-2020-26920 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.3.110, SRR60 before 2.5.3.110… Srk60 Firmware 2.5.3.110+ Fix from $1,9502020-10-09 HIGH 8.8 CVE-2020-26921 Certain NETGEAR devices are affected by authentication bypass. This affects GS110EMX before 1.0.1.7, GS810EMX before 1.7.1.3, XS512EM before 1.0.1.3,… Gs110emx Firmware 1.0.1.3 / 1.0.1.7+ Fix from $1,9502020-10-09 HIGH 7.1 CVE-2020-26914 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR615… D6200 Firmware 1.0.0.42 / 1.0.0.66+ Fix from $1,9502020-10-09 MEDIUM 6.8 CVE-2020-26913 Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.63, R7800 before 1.0.… D6100 Firmware 1.0.0.63 / 1.0.2.60+ Fix from $1,6002020-10-09 MEDIUM 6.7 CVE-2020-26922 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC76… Wc7500 Firmware 6.5.5.24+ Fix from $1,6002020-10-09 MEDIUM 6.3 CVE-2020-26916 Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6… D6200 Firmware 1.0.0.42 / 1.0.0.66+ Fix from $1,6002020-10-09 CRITICAL 9.8 CVE-2020-26908 Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 before 1.0.0.30, R6… D6200 Firmware 1.0.0.30 / 1.0.0.42+ Fix from $2,3002020-10-09 HIGH 8.8 CVE-2020-26904 Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750… Cbr40 Firmware 2.5.0.10 / 3.2.10.11+ Fix from $1,9502020-10-09 HIGH 8.8 CVE-2020-26905 Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750… Cbr40 Firmware 2.5.0.10 / 3.2.10.11+ Fix from $1,9502020-10-09 HIGH 8.8 CVE-2020-26906 Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750… Cbr40 Firmware 2.5.0.10 / 3.2.10.11+ Fix from $1,9502020-10-09 HIGH 8.8 CVE-2020-26907 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.16.6, RBR850 before 3.2.16.6… Rbk852 Firmware 3.2.16.6+ Fix from $1,9502020-10-09