Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-21085 State: PUBLISHED Published: 2020-04-08T14:45:46 Last Updated: 2024-08-05T12:19:27.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software. There is a race condition with a resultant use-after-free in vnswap_deinit_backing_storage. The Samsung ID is SVE-2017-11176 (February 2018). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2018-21086 State: PUBLISHED Published: 2020-04-08T14:45:02 Last Updated: 2024-08-05T12:19:27.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software. There is a race condition with a resultant double free in vnswap_init_backing_storage. The Samsung ID is SVE-2017-11177 (February 2018). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2018-21087 State: PUBLISHED Published: 2020-04-08T14:43:17 Last Updated: 2024-08-05T12:19:27.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software. There is a vnswap heap-based buffer overflow via the store function, with resultant privilege escalation. The Samsung ID is SVE-2017-10599 (January 2018). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2018-21088 State: PUBLISHED Published: 2020-04-08T14:42:30 Last Updated: 2024-08-05T12:19:27.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with N(7.x) software. An attacker can cause a reboot because InputMethodManagerService has an unprotected system service. The Samsung ID is SVE-2017-9995 (January 2018). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2018-21089 State: PUBLISHED Published: 2020-04-08T13:30:04 Last Updated: 2024-08-05T12:19:27.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with N(7.x) (MT6755/MT6757 Mediatek models) software. Bootloader has an integer overflow that leads to arbitrary code execution via the download offset control. The Samsung ID is SVE-2017-10732 (January 2018). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2018-21090 State: PUBLISHED Published: 2020-04-08T13:27:23 Last Updated: 2024-08-05T12:19:27.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with software through 2017-11-03 (S.LSI modem chipsets). The Exynos modem chipset has a baseband buffer overflow. The Samsung ID is SVE-2017-10745 (January 2018). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2018-21091 State: PUBLISHED Published: 2020-04-08T13:21:01 Last Updated: 2024-08-05T12:19:27.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. Telecom has a System Crash via abnormal exception handling. The Samsung ID is SVE-2017-10906 (January 2018). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2018-21092 State: PUBLISHED Published: 2020-04-08T13:15:42 Last Updated: 2024-08-05T12:19:27.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. A crafted AT command may be sent by the DeviceTest application via an NFC tag. The Samsung ID is SVE-2017-10885 (January 2018). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2018-21093 State: PUBLISHED Published: 2020-04-27T14:41:02 Last Updated: 2024-08-05T12:19:27.643Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D8500 before 1.0.3.42, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, EX6000 before 1.0.0.30, EX6100 before 1.0.2.24, EX6120 before 1.0.0.40, EX6130 before 1.0.0.22, EX6150 before 1.0.0.42, EX6200 before 1.0.3.88, EX7000 before 1.0.0.66, R6250 before 1.0.4.26, R6300-2CXNAS before 1.0.3.60, R6300v2 before 1.0.4.28, R6400 before 1.0.1.36, R64
efore 1.0.0.66, R6250 before 1.0.4.26, R6300-2CXNAS before 1.0.3.60, R6300v2 before 1.0.4.28, R6400 before 1.0.1.36, R6400v2 before 1.0.2.52, R6700 before 1.0.1.46, R6900 before 1.0.1.46, R7000 before 1.0.9.28, R7000P before 1.3.1.44, R6900P before 1.3.1.44, R7100LG before 1.0.0.46, R7300 before 1.0.0.68, R7900 before 1.0.2.10, R8000 before 1.0.4.18, R8000P before 1.3.0.10, R7900P before 1.3.0.10, R8500 before 1.0.2.122, R8300 before 1.0.2.122, RBW30 before 2.1.2.6, WN2500RPv2 before 1.0.0.54, and WNR3500Lv2 before 1.2.0.56. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060456/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers
: References: - https://kb.netgear.com/000060456/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-Modem-Routers-Wireless-Extenders-and-Orbi-Satellites-PSV-2017-2011
CVE ID: CVE-2018-21094 State: PUBLISHED Published: 2020-04-27T14:42:14 Last Updated: 2024-08-05T12:19:27.611Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AC:L/AV:N/A:L/C:L/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/0000604
and WN604 before 3.3.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060460/Security-Advisory-for-a-Security-Misconfiguration-on-Some-Wireless-Access-Points-PSV-2018-0350
CVE ID: CVE-2018-21095 State: PUBLISHED Published: 2020-04-27T15:54:54 Last Updated: 2024-08-05T12:19:27.624Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/AV:A/A:N/C:L/I:L/PR:H/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects SRR60 before 2.2.1.210 and SRS60 before 2.2.1.210. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060458/Security-Advisory-for-Stored-Cross-Site-Scripting-on-SRS60-and-SRR60-PSV-2018-0218
CVE ID: CVE-2018-21096 State: PUBLISHED Published: 2020-04-27T15:56:14 Last Updated: 2024-08-05T12:19:27.607Z Severity: MEDIUM (CVSS 5.2 CVSS:3.0/AC:L/AV:A/A:H/C:N/I:N/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060455/Security-Advisory-for-Cross-Site-Re
alyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060455/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Wireless-Access-Points-PSV-2018-0096
CVE ID: CVE-2018-21097 State: PUBLISHED Published: 2020-04-27T15:57:34 Last Updated: 2024-08-05T12:19:27.583Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, and WND930 before 2.1.5. Additional Analyst Notes: - CVE Program Container: References: - https://kb.net
0 before 2.1.7, and WND930 before 2.1.5. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060457/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Wireless-Access-Points-PSV-2018-0094
CVE ID: CVE-2018-21098 State: PUBLISHED Published: 2020-04-27T17:04:41 Last Updated: 2024-08-05T12:19:27.629Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060452/Security-Advisory-for-Post-Authentication-Command-Injection-on-R7800-PSV-2018-0365
CVE ID: CVE-2018-21099 State: PUBLISHED Published: 2020-04-27T17:05:41 Last Updated: 2024-08-05T12:19:27.602Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AC:L/AV:A/A:H/C:L/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060451/Security-Advisory-for-Post-Authentication-Command-Injection-on-R7800-PSV-2018-0384
CVE ID: CVE-2018-21100 State: PUBLISHED Published: 2020-04-27T17:06:51 Last Updated: 2024-08-05T12:19:27.600Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AC:L/AV:A/A:H/C:L/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060450/Security-Advisory-for-Post-Authentication-Command-Injection-on-R7800-PSV-2018-0382
CVE ID: CVE-2018-21101 State: PUBLISHED Published: 2020-04-23T18:12:21 Last Updated: 2024-08-05T12:19:27.646Z Severity: HIGH (CVSS 8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060449/Security-Advisory-for-Post-Authentication-Command-Injection-on-R7800-PSV-2018-0380
CVE ID: CVE-2018-21102 State: PUBLISHED Published: 2020-04-23T18:23:57 Last Updated: 2024-08-05T12:19:27.616Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060454/Security-Advisory-for-Cross-Site-Request-Forgery-on-ReadyNAS-OS-6-PSV-2018-0373
CVE ID: CVE-2018-21103 State: PUBLISHED Published: 2020-04-23T18:31:16 Last Updated: 2024-08-05T12:19:27.674Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060448/Security-Advisory-for-a-Post-Authentication-Command-Injection-on-R7800-PSV-2018-0363
CVE ID: CVE-2018-21104 State: PUBLISHED Published: 2020-04-23T18:33:18 Last Updated: 2024-08-05T12:19:27.650Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060447/Security-Advisory-for-a-Post-Authentication-Command-Injection-on-R7800-PSV-2018-0362
CVE ID: CVE-2018-21105 State: PUBLISHED Published: 2020-04-23T19:01:33 Last Updated: 2024-08-05T12:19:27.634Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060446/Security-Advisory-for-a-Post-Authentication-Command-Injection-on-R7800-PSV-2018-0361
CVE ID: CVE-2018-21106 State: PUBLISHED Published: 2020-04-23T19:06:28 Last Updated: 2024-08-05T12:19:27.636Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060445/Security-Advisory-for-a-Post-Authentication-Command-Injection-on-R7800-PSV-2018-0360
CVE ID: CVE-2018-21107 State: PUBLISHED Published: 2020-04-23T19:07:46 Last Updated: 2024-08-05T12:19:27.626Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060444/Security-Advisory-for-a-Post-Authentication-Command-Injection-on-R7800-PSV-2018-0359
CVE ID: CVE-2018-21108 State: PUBLISHED Published: 2020-04-23T19:36:50 Last Updated: 2024-08-05T12:19:27.626Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060443/Security-Advisory-for-a-Post-Authentication-Command-Injection-on-R7800-PSV-2018-0357
CVE ID: CVE-2018-21109 State: PUBLISHED Published: 2020-04-23T19:37:44 Last Updated: 2024-08-05T12:19:27.614Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060442/Security-Advisory-for-a-Post-Authentication-Command-Injection-on-R7800-PSV-2018-0356
CVE ID: CVE-2018-21110 State: PUBLISHED Published: 2020-04-23T19:38:41 Last Updated: 2024-08-05T12:19:27.639Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060441/Security-Advisory-for-a-Post-Authentication-Command-Injection-on-R7800-PSV-2018-0355
CVE ID: CVE-2018-21111 State: PUBLISHED Published: 2020-04-22T14:23:27 Last Updated: 2024-08-05T12:19:27.631Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D6100 before 1.0.0.60, R7800 before 1.0.2.52, R8900 before 1.0.4.2, R9000 before 1.0.4.2, WNDR3700v4 before 1.0.2.102, WNDR4300 before 1.0.2.104, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.0.0.58, and WNR2000v5 before 1.0.0.66. Additional Analyst Notes: - CVE Program Container: References: - https
3 before 1.0.0.58, and WNR2000v5 before 1.0.0.66. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060440/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-and-Modem-Routers-PSV-2018-0115
CVE ID: CVE-2018-21112 State: PUBLISHED Published: 2020-04-22T14:24:51 Last Updated: 2024-08-05T12:19:27.634Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.44, R7500v2 before 1.0.3.38, R7800 before 1.0.2.52, R8900 before 1.0.4.12, and R9000 before 1.0.4.12. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060439/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-Modem-Routers-PSV-2018-0093
CVE ID: CVE-2018-21113 State: PUBLISHED Published: 2020-04-22T14:38:25 Last Updated: 2024-08-05T12:19:27.629Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6100 before 1.0.0.58, D7800 before 1.0.1.42, R6100 before 1.0.1.28, R7500 before 1.0.0.130, R7500v2 before 1.0.3.36, R7800 before 1.0.2.52, R8900 before 1.0.4.12, R9000 before 1.0.4.12, WNDR3700v4 before 1.0.2.102, WNDR4300 before 1.0.2.104, WNDR4300v2 before 1.0.0.56, and WNDR4500v3 before 1.0.0.56. Additional Analyst Notes: - CVE Program Container: Ref
.104, WNDR4300v2 before 1.0.0.56, and WNDR4500v3 before 1.0.0.56. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060438/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-and-Modem-Routers-PSV-2018-0033
CVE ID: CVE-2018-21114 State: PUBLISHED Published: 2020-04-22T14:43:55 Last Updated: 2024-08-05T12:19:27.653Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.44, EX6150v2 before 1.0.1.70, EX6100v2 before 1.0.1.70, EX6200v2 before 1.0.1.64, EX7300 before 1.0.2.136, EX6400 before 1.0.2.136, R6100 before 1.0.1.16, R7500 before 1.0.0.110, R7800 before 1.0.2.32, R9000 before 1.0.4.12, WN3000RPv2 before 1.0.0.56, WN3000RPv3 before 1.0.2.52, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50. A
2, WN3000RPv2 before 1.0.0.56, WN3000RPv3 before 1.0.2.52, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060437/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-Modem-Routers-and-Wireless-Extenders-PSV-2017-0645
CVE ID: CVE-2018-21115 State: PUBLISHED Published: 2020-04-22T14:45:19 Last Updated: 2024-08-05T12:19:27.635Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060243/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-XR500-PSV-2018-0309
CVE ID: CVE-2018-21116 State: PUBLISHED Published: 2020-04-22T14:47:34 Last Updated: 2024-08-05T12:19:27.630Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060242/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-XR500-PSV-2018-0312
CVE ID: CVE-2018-21117 State: PUBLISHED Published: 2020-04-22T15:00:54 Last Updated: 2024-08-05T12:19:27.649Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060241/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-XR500-PSV-2018-0313
CVE ID: CVE-2018-21118 State: PUBLISHED Published: 2020-04-22T15:09:35 Last Updated: 2024-08-05T12:19:27.648Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR XR500 devices before 2.3.2.32 are affected by authentication bypass. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060240/Security-Advisory-for-Authentication-Bypass-on-XR500-PSV-2018-0324
CVE ID: CVE-2018-21119 State: PUBLISHED Published: 2020-04-22T15:10:40 Last Updated: 2024-08-05T12:19:27.631Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WAC505 before 5.0.5.4 and WAC510 before 5.0.5.4. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060239/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Wireless-Access-Points-PSV-2018-0285
CVE ID: CVE-2018-21120 State: PUBLISHED Published: 2020-04-22T15:12:18 Last Updated: 2024-08-05T12:19:27.644Z Severity: MEDIUM (CVSS 5.2 CVSS:3.0/AC:L/AV:A/A:H/C:N/I:N/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060238/Security-Advisory-for-Cross-Site-Re
alyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060238/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Wireless-Access-Points-PSV-2018-0095
CVE ID: CVE-2018-21121 State: PUBLISHED Published: 2020-04-22T15:21:10 Last Updated: 2024-08-05T12:19:27.624Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by authentication bypass. This affects GS810EMX before 1.0.0.5, XS512EM before 1.0.0.6, and XS724EM before 1.0.0.6. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060237/Security-Advisory-for-Authentication-Bypass-on-Some-Switches-PSV-2018-0219
CVE ID: CVE-2018-21122 State: PUBLISHED Published: 2020-04-22T15:25:11 Last Updated: 2024-08-05T12:19:27.628Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AC:L/AV:A/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by denial of service. This affects GS110EMX before 1.0.0.9, GS810EMX before 1.0.0.5, XS512EM before 1.0.0.6, and XS724EM before 1.0.0.6. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000060236/Security-Advisory-for-Denial-of-Service-on-Some-Switches-PSV-2018-0222