Browse CVEs

HIGH 7.5 CVE-2019-20695 Certain NETGEAR devices are affected by disclosure of sensitive information. This affects SRK60 before 2.3.5.106, SRR60 before 2.3.5.106, and SRS60 b… Srk60 Firmware 2.3.5.106+ Fix from $1,9502020-04-16 HIGH 7.5 CVE-2019-20696 Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC505 before V5.6.8.3 and WAC510 before V5.6.8.3. Wac505 Firmware 5.6.8.3+ Fix from $1,9502020-04-16 MEDIUM 6.8 CVE-2019-20688 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D6100 … D3600 Firmware 1.0.0.63 / 1.0.0.75+ Fix from $1,6002020-04-16 MEDIUM 6.8 CVE-2019-20689 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6000 before 1.0.0.75, D6100 before 1.0.0.63, EX2700… D6000 Firmware 1.0.0.63 / 1.0.0.75+ Fix from $1,6002020-04-16 MEDIUM 6.7 CVE-2019-20692 Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.44, D6400 befor… D6220 Firmware 1.0.0.44 / 1.0.0.51+ Fix from $1,6002020-04-16 MEDIUM 6.7 CVE-2019-20700 Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.44, D6400 befor… D6220 Firmware 1.0.0.44 / 1.0.0.51+ Fix from $1,6002020-04-16 MEDIUM 6.5 CVE-2019-20698 Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC505 before 8.0.5.5 and WAC510 before 8.0.5.5. Wac505 Firmware 8.0.5.5+ Fix from $1,6002020-04-16 MEDIUM 5.4 CVE-2019-20693 Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC505 before 8.0.6.4 and WAC510 before 8.0.6.4. Wac505 Firmware 8.0.6.4+ Fix from $1,6002020-04-16 HIGH 8.8 CVE-2019-20682 Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 befor… D3600 Firmware 1.0.0.28 / 1.0.0.38+ Fix from $1,9502020-04-16 HIGH 8.8 CVE-2019-20683 Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 befor… D3600 Firmware 1.0.0.28 / 1.0.0.38+ Fix from $1,9502020-04-16 CRITICAL 9.8 CVE-2019-20679 NETGEAR MR1100 devices before 12.06.08.00 are affected by lack of access control at the function level. Mr1100 Firmware 12.06.08.00+ Fix from $2,3002020-04-15 HIGH 8.8 CVE-2019-20681 Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.34, D7000 before 1.0.1.68, JR6150 before 1.0.1.18, PR… D6200 Firmware 1.0.0.28 / 1.0.0.46+ Fix from $1,9502020-04-15 HIGH 8.0 CVE-2019-20680 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7000v2 before 1.0.0.53, R6220 before 1.1.0.80, R626… D7000 Firmware 1.0.0.53 / 1.0.2.4+ Fix from $1,9502020-04-15 MEDIUM 6.0 CVE-2019-20676 Certain NETGEAR devices are affected by lack of access control at the function level. This affects FS728TLP before 1.0.1.26, GS105Ev2 before 1.6.0.4,… Fs728tlp Firmware 1.0.0.15 / 1.0.1.4+ Fix from $1,6002020-04-15 HIGH 8.8 CVE-2019-20656 Certain NETGEAR devices are affected by a hardcoded password. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 before 1.0.0.30, R60… D6200 Firmware 1.0.0.30 / 1.0.0.42+ Fix from $1,9502020-04-15 HIGH 8.0 CVE-2019-20657 Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR200… D6200 Firmware 1.0.0.28 / 1.0.0.42+ Fix from $1,9502020-04-15 HIGH 7.8 CVE-2019-20655 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects XR500 before 2.3.2.56 and XR700 before 1.0.1.20. Xr500 Firmware 1.0.1.20 / 2.3.2.56+ Fix from $1,9502020-04-15 HIGH 7.2 CVE-2019-20659 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400v2 before 1.0.4.84, R6700 before 1.0.2.8, R6700… R6400 Firmware 1.0.2.8 / 1.0.3.10+ Fix from $1,9502020-04-15 MEDIUM 6.5 CVE-2019-20658 Certain NETGEAR devices are affected by disclosure of sensitive information. This affects FS728TLP before 1.0.1.26, GS105Ev2 before 1.6.0.4, GS105PE … Fs728tlp Firmware 1.0.0.15 / 1.0.1.4+ Fix from $1,6002020-04-15 HIGH 7.5 CVE-2019-20654 Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC505 before 8.0.6.4 and WAC510 before 8.0.6.4. Wac505 Firmware 8.0.6.4+ Fix from $1,9502020-04-15 MEDIUM 6.7 CVE-2019-20651 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WAC505 before 8.2.1.16 and WAC510 before 8.2.1.16. Wac505 Firmware 8.2.1.16+ Fix from $1,6002020-04-15 MEDIUM 6.5 CVE-2019-20652 NETGEAR WAC505 devices before 8.2.1.16 are affected by disclosure of sensitive information. Wac505 Firmware 8.2.1.16+ Fix from $1,6002020-04-15 MEDIUM 6.5 CVE-2019-20653 Certain NETGEAR devices are affected by denial of service. This affects WAC505 before 8.0.6.4 and WAC510 before 8.0.6.4. Wac505 Firmware 8.0.6.4+ Fix from $1,6002020-04-15 CRITICAL 9.8 CVE-2020-11789 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700 before 1.0.2.8,… R6400 Firmware 1.0.2.8 / 1.0.3.10+ Fix from $2,3002020-04-15 CRITICAL 9.8 CVE-2020-11790 NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers. R7800 Firmware 1.0.2.68+ Fix from $2,3002020-04-15 HIGH 7.5 CVE-2020-11792 NETGEAR R8900, R9000, RAX120, and XR700 devices before 2020-01-20 are affected by Transport Layer Security (TLS) certificate private key disclosure. R8900 Firmware Mitigation only Fix from $1,9502020-04-15 MEDIUM 6.1 CVE-2020-11791 NETGEAR JGS516PE devices before 2.6.0.43 are affected by reflected XSS. Jgs516pe Firmware 2.6.0.43+ Fix from $1,6002020-04-15 CRITICAL 9.8 CVE-2019-20646 NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials. Rax40 Firmware 1.0.3.64+ Fix from $2,3002020-04-15 HIGH 8.8 CVE-2019-20640 Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 befor… D3600 Firmware 1.0.0.28 / 1.0.0.38+ Fix from $1,9502020-04-15 HIGH 8.8 CVE-2019-20641 NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level. Rax40 Firmware 1.0.3.64+ Fix from $1,9502020-04-15