Browse CVEs

HIGH 8.8 CVE-2020-14429 Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects MK62 before 1.0.4.92, MK63 before 1.0.4.92, MR60 befor… Mk62 Firmware 1.0.4.92 / 3.2.15.25+ Fix from $1,9502020-06-18 HIGH 8.8 CVE-2020-14430 Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK7… Rbk752 Firmware 3.2.15.25+ Fix from $1,9502020-06-18 HIGH 8.8 CVE-2020-14431 Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK7… Rbk752 Firmware 3.2.15.25+ Fix from $1,9502020-06-18 HIGH 8.8 CVE-2020-14432 Certain NETGEAR devices are affected by CSRF. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before … Rbk752 Firmware 3.2.15.25+ Fix from $1,9502020-06-18 HIGH 8.8 CVE-2020-14435 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.2.104, SRS60 before 2.5.2.104… Srk60 Firmware 2.5.2.104+ Fix from $1,9502020-06-18 HIGH 8.8 CVE-2020-14436 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.… Rbk752 Firmware 3.2.15.25+ Fix from $1,9502020-06-18 HIGH 8.8 CVE-2020-14437 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.… Rbk752 Firmware 3.2.15.25+ Fix from $1,9502020-06-18 HIGH 8.8 CVE-2020-14438 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.… Rbk752 Firmware 3.2.15.25+ Fix from $1,9502020-06-18 MEDIUM 6.8 CVE-2020-14433 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RB… Rbk852 Firmware 3.2.15.25+ Fix from $1,6002020-06-18 MEDIUM 6.8 CVE-2020-14434 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RB… Rbk752 Firmware 3.2.15.25+ Fix from $1,6002020-06-18 HIGH 8.8 CVE-2020-14426 Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK7… Rbk752 Firmware 3.2.10.11 / 3.2.15.25+ Fix from $1,9502020-06-18 HIGH 8.8 CVE-2020-14427 Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK7… Rbk752 Firmware 3.2.15.25+ Fix from $1,9502020-06-18 MEDIUM 5.9 CVE-2020-13245 Certain NETGEAR devices are affected by Missing SSL Certificate Validation. This affects R7000 1.0.9.6_1.2.19 through 1.0.11.100_10.2.10, and possibl… R6120 Firmware No fix yet Fix from $1,6002020-05-28 HIGH 8.8 CVE-2020-11549 An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and… Rbs50y Firmware Patch available Fix from $1,9502020-05-18 HIGH 8.8 CVE-2020-11551 An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and… Rbs50y Firmware Patch available Fix from $1,9502020-05-18 MEDIUM 6.5 CVE-2020-11550 An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and… Rbs50y Firmware Patch available Fix from $1,6002020-05-18 HIGH 8.8 CVE-2017-18864 Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6400 before 1.0.1.24, R6400v2 before 1.0.2.32… R6400 Firmware 1.0.0.32 / 1.0.0.54+ Fix from $1,9502020-05-05 MEDIUM 6.8 CVE-2017-18865 Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before … R8500 Firmware 1.0.2.104+ Fix from $1,6002020-05-05 MEDIUM 6.8 CVE-2017-18867 Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6100 before 1.0.0.55, D7800 before V1.0.1.24, R71… D6100 Firmware 1.0.0.32 / 1.0.0.48+ Fix from $1,6002020-05-05 MEDIUM 6.1 CVE-2017-18866 Certain NETGEAR devices are affected by stored XSS. This affects R9000 before 1.0.2.40, R6100 before 1.0.1.1, 6R7500 before 1.0.0.110, R7500v2 before… 6r7500 Firmware 1.0.0.48 / 1.0.0.58+ Fix from $1,6002020-05-05 HIGH 7.7 CVE-2017-18860 Certain NETGEAR devices are affected by debugging command execution. This affects FS752TP 5.4.2.19 and earlier, GS108Tv2 5.4.2.29 and earlier, GS110T… Fs752tp Firmware after 6.6.2.6 Fix from $1,9502020-04-29 HIGH 8.8 CVE-2017-18855 NETGEAR WNR854T devices before 1.5.2 are affected by command execution. Wnr854t Firmware 1.5.2+ Fix from $1,9502020-04-29 MEDIUM 6.7 CVE-2017-18856 NETGEAR ReadyNAS devices before 6.6.1 are affected by command injection. Readynas Os Firmware 6.6.1+ Fix from $1,6002020-04-29 MEDIUM 6.7 CVE-2017-18854 NETGEAR ReadyNAS 6.6.1 and earlier is affected by command injection. Readynas Os Firmware after 6.6.1 Fix from $1,6002020-04-29 MEDIUM 6.5 CVE-2017-18853 Certain NETGEAR devices are affected by password recovery and file access. This affects D8500 1.0.3.27 and earlier, DGN2200v4 1.0.0.82 and earlier, R… D8500 Firmware after 1.0.7.10 Fix from $1,6002020-04-29 HIGH 8.8 CVE-2018-21224 Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, … D3600 Firmware 1.0.0.50 / 1.0.0.67+ Fix from $1,9502020-04-28 HIGH 8.8 CVE-2018-21226 Certain NETGEAR devices are affected by authentication bypass. This affects JNR1010v2 before 1.1.0.48, JWNR2010v5 before 1.1.0.48, WNR1000v4 before 1… Jnr1010 Firmware 1.1.0.48+ Fix from $1,9502020-04-28 MEDIUM 6.8 CVE-2018-21225 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 … D7800 Firmware 1.0.1.30 / 1.0.1.34+ Fix from $1,6002020-04-28 CRITICAL 9.8 CVE-2017-18857 The NETGEAR Insight application before 2.42 for Android and iOS is affected by password mismanagement. Insight 2.42+ Fix from $2,3002020-04-28 CRITICAL 9.8 CVE-2017-18858 Certain NETGEAR devices are affected by command execution. This affects M4200-10MG-POE+ 12.0.2.11 and earlier, M4300-28G 12.0.2.11 and earlier, M4300… M4200 10mg Poe\+ Firmware after 12.0.2.11 Fix from $2,3002020-04-28