Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e included in the search order for DLLs, an attacker could perform DLL search-order hijacking to escalate their privileges to SYSTEM. Furthermore, if the Global Search or Web Screens functionality is enabled, then privilege escalation is possible via the GlobalSearchService and Sage.CNA.WindowsService services, again via DLL search-order hijacking because unprivileged users would have modify permissions on the application directory. Note that while older versions of the software default to installing in %PROGRAMFILES(X86)% (which would allow the Sage folder to inherit strong permissions, making the installation not vulnerable), the official Sage 300 installation guides for those versions rec
g permissions, making the installation not vulnerable), the official Sage 300 installation guides for those versions recommend installing in C:\Sage, which would make the installation vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://controlgap.com/blog?tag=insecurity - https://www.controlgap.com/blog/sage-300-case-study
CVE ID: CVE-2021-45493 State: PUBLISHED Published: 2021-12-26T01:04:53 Last Updated: 2024-08-04T04:39:21.278Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:L/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RAX35 before 1.0.4.102, RAX38 before 1.0.4.102, and RAX40 before 1.0.4.102. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064453/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-Routers-PSV-2019-0293
CVE ID: CVE-2021-45494 State: PUBLISHED Published: 2021-12-26T01:04:26 Last Updated: 2024-08-04T04:39:21.075Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064160/Security-Advisory-for-Arbitrary-File-Read-on-Some-WiFi-Systems-PSV-2021-0044
CVE ID: CVE-2021-45495 State: PUBLISHED Published: 2021-12-26T01:04:16 Last Updated: 2024-08-04T04:39:21.111Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:A/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR D7000 devices before 1.0.1.68 are affected by authentication bypass. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064055/Security-Advisory-for-Authentication-Bypass-on-D7000-PSV-2018-0631
CVE ID: CVE-2021-45496 State: PUBLISHED Published: 2021-12-26T01:04:04 Last Updated: 2024-08-04T04:39:21.275Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064529/Security-Advisory-for-Authentication-Bypass-on-D7000-PSV-2021-0060
CVE ID: CVE-2021-45497 State: PUBLISHED Published: 2021-12-26T01:03:54 Last Updated: 2024-08-04T04:39:21.193Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064533/Security-Advisory-for-Authentication-Bypass-on-D7000-PSV-2021-0155
CVE ID: CVE-2021-45498 State: PUBLISHED Published: 2021-12-26T01:03:45 Last Updated: 2024-08-04T04:39:21.179Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:A/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R6700v2 devices before 1.2.0.88 are affected by authentication bypass. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064054/Security-Advisory-for-Authentication-Bypass-on-R6700v2-PSV-2018-0630
CVE ID: CVE-2021-45499 State: PUBLISHED Published: 2021-12-26T01:03:34 Last Updated: 2024-08-04T04:39:21.209Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:H/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by authentication bypass. This affects R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000P before 1.4.2.84, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064445/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2019-0027
CVE ID: CVE-2021-45500 State: PUBLISHED Published: 2021-12-26T01:03:25 Last Updated: 2024-08-04T04:39:21.217Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by authentication bypass. This affects R7000P before 1.3.3.140 and R8000 before 1.0.4.68. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064070/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2019-0183
CVE ID: CVE-2021-45501 State: PUBLISHED Published: 2021-12-26T01:03:14 Last Updated: 2024-08-04T04:39:21.276Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by authentication bypass. This affects AC2400 before 1.1.0.84, AC2600 before 1.1.0.84, D7000 before 1.0.1.82, R6020 before 1.0.0.52, R6080 before 1.0.0.52, R6120 before 1.0.0.80, R6220 before 1.1.0.110, R6230 before 1.1.0.110, R6260 before 1.1.0.84, R6330 before 1.1.0.84, R6350 before 1.1.0.84, R6700v2 before 1.1.0.84, R6800 before 1.1.0.84, R6850 before 1.1.0.84, R6900v2 before 1.1.0.84, R7200 before 1.1.0.84, R735
00v2 before 1.1.0.84, R6800 before 1.1.0.84, R6850 before 1.1.0.84, R6900v2 before 1.1.0.84, R7200 before 1.1.0.84, R7350 before 1.1.0.84, R7400 before 1.1.0.84, and R7450 before 1.1.0.84. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064532/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2021-0154
CVE ID: CVE-2021-45502 State: PUBLISHED Published: 2021-12-26T01:03:05 Last Updated: 2024-08-04T04:39:21.180Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064126/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0473
CVE ID: CVE-2021-45503 State: PUBLISHED Published: 2021-12-26T01:02:51 Last Updated: 2024-08-04T04:39:21.197Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064127/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0474
CVE ID: CVE-2021-45504 State: PUBLISHED Published: 2021-12-26T01:02:41 Last Updated: 2024-08-04T04:39:21.195Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBR852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064128/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0475
CVE ID: CVE-2021-45505 State: PUBLISHED Published: 2021-12-26T01:02:31 Last Updated: 2024-08-04T04:39:21.275Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064129/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0477
CVE ID: CVE-2021-45506 State: PUBLISHED Published: 2021-12-26T01:02:20 Last Updated: 2024-08-04T04:39:21.518Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064130/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0483
CVE ID: CVE-2021-45507 State: PUBLISHED Published: 2021-12-26T01:02:10 Last Updated: 2024-08-04T04:39:21.394Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBW30 before 2.6.2.2, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, and RBS40V before 2.6.2.8. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064131/Security-Advisory-for-Authentication-
yst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064131/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0487
CVE ID: CVE-2021-45508 State: PUBLISHED Published: 2021-12-26T01:02:00 Last Updated: 2024-08-04T04:39:21.286Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, and RBR850 before 3.2.17.12. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064133/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0490
CVE ID: CVE-2021-45509 State: PUBLISHED Published: 2021-12-26T01:01:52 Last Updated: 2024-08-04T04:39:21.208Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064148/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0564
CVE ID: CVE-2021-45510 State: PUBLISHED Published: 2021-12-26T01:01:40 Last Updated: 2024-08-04T04:39:21.223Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:A/A:H/C:N/I:L/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR XR1000 devices before 1.0.0.58 are affected by authentication bypass. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064150/Security-Advisory-for-Authentication-Bypass-on-XR1000-PSV-2021-0011
CVE ID: CVE-2021-45511 State: PUBLISHED Published: 2021-12-26T01:01:27 Last Updated: 2024-08-04T04:39:21.462Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000 before 2021-08-27, R6220 before 2021-08-27, R6230 before 2021-08-27, R6260 before 2021-08-27, R6330 before 2021-08-27, R6350 before 2021-08-27, R6700v2 before 2021-08-27, R6800 before 2021-08-27, R6850 before 2021-08-27, R6900v2 before 2021-08-27, R7200 before 2021-08-27, R7350 before 2021-08-27,
efore 2021-08-27, R6850 before 2021-08-27, R6900v2 before 2021-08-27, R7200 before 2021-08-27, R7350 before 2021-08-27, R7400 before 2021-08-27, and R7450 before 2021-08-27. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000063961/Security-Advisory-for-Authentication-Bypass-Vulnerability-on-the-D7000-and-Some-Routers-PSV-2021-0133
CVE ID: CVE-2021-45512 State: PUBLISHED Published: 2021-12-26T01:01:17 Last Updated: 2024-08-04T04:39:21.171Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, EX3700 before 1.0.0.84, EX3800 before 1.0.0.84, EX6120 before 1.0.0.54, EX6130 before 1.0.0.36, EX7000 before 1.0.1.90, R6250 before 1.0.4.42, R6400v2 before 1.0.4.98, R6700v3 before 1.0.4.98, R6900P before 1.3.2.124, R7000 before 1.0.11.106, R7000P before 1.3.2.124, R7100LG before 1.0.0.56, R7900 before 1.0.4.26, R8000 before 1.0.4.58, R
000 before 1.0.11.106, R7000P before 1.3.2.124, R7100LG before 1.0.0.56, R7900 before 1.0.4.26, R8000 before 1.0.4.58, R8300 before 1.0.2.134, R8500 before 1.0.2.134, RS400 before 1.5.0.48, WNR3500Lv2 before 1.2.0.62, and XR300 before 1.0.3.50. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064117/Security-Advisory-for-Broken-Cryptography-on-Some-Routers-and-Extenders-PSV-2020-0134
CVE ID: CVE-2021-45513 State: PUBLISHED Published: 2021-12-26T01:01:05 Last Updated: 2024-08-04T04:39:21.207Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064149/Security-Advisory-for-Command-Injection-on-XR1000-PSV-2021-0010
CVE ID: CVE-2021-45514 State: PUBLISHED Published: 2021-12-26T01:00:52 Last Updated: 2024-08-04T04:39:21.196Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064154/Security-Advisory-for-Command-Injection-on-XR1000-PSV-2021-0018
CVE ID: CVE-2021-45515 State: PUBLISHED Published: 2021-12-26T01:00:39 Last Updated: 2024-08-04T04:39:21.461Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:A/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by denial of service. This affects EX7500 before 1.0.0.72, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, RBRE960 before 6.0.3.68, RBSE960 before 6.0.3.68, RBR750 before 3.2.17.12, RBR850 before 3.2.17.12, RBS750 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, and RBK852 before 3.2.17.12. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064484/Security-Adviso
17.12. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064484/Security-Advisory-for-Denial-of-Service-on-Some-Extenders-and-WiFi-Systems-PSV-2020-0286
CVE ID: CVE-2021-45516 State: PUBLISHED Published: 2021-12-26T01:00:30 Last Updated: 2024-08-04T04:39:21.393Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AC:L/AV:A/A:H/C:N/I:L/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by denial of service. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126, R6900P before 1.3.3.140, R7000P before 1.3.3.140, R8000 before 1.0.4.74, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064060/Security-Advisory-for-Denial-of-Service-on-Some-Routers-and-WiFi-Systems-PSV-2019-0115
CVE ID: CVE-2021-45517 State: PUBLISHED Published: 2021-12-26T01:00:20 Last Updated: 2024-08-04T04:39:21.486Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:A/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064156/Security-Advisory-for-Denial-of-Service-on-XR1000-PSV-2021-0031
CVE ID: CVE-2021-45518 State: PUBLISHED Published: 2021-12-26T01:00:10 Last Updated: 2024-08-04T04:39:21.489Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:A/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064157/Security-Advisory-for-Denial-of-Service-on-XR1000-PSV-2021-0032
CVE ID: CVE-2021-45519 State: PUBLISHED Published: 2021-12-26T00:59:59 Last Updated: 2024-08-04T04:39:21.484Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:A/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064158/Security-Advisory-for-Denial-of-Service-on-XR1000-PSV-2021-0033
CVE ID: CVE-2021-45520 State: PUBLISHED Published: 2021-12-26T00:59:48 Last Updated: 2024-08-04T04:39:21.428Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064151/Security-Advisory-for-Hardcoded-Password-on-Some-WiFi-Systems-PSV-2021-0012
CVE ID: CVE-2021-45521 State: PUBLISHED Published: 2021-12-26T00:59:39 Last Updated: 2024-08-04T04:39:21.502Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AC:L/AV:A/A:N/C:H/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064161/Security-Advisory-for-Hardcoded-Password-on-Some-WiFi-Systems-PSV-2021-0045
CVE ID: CVE-2021-45522 State: PUBLISHED Published: 2021-12-26T00:59:27 Last Updated: 2024-08-04T04:39:21.552Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AC:L/AV:A/A:N/C:L/I:L/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR XR1000 devices before 1.0.0.58 are affected by a hardcoded password. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064155/Security-Advisory-for-Hardcoded-Password-on-XR1000-PSV-2021-0030
CVE ID: CVE-2021-45523 State: PUBLISHED Published: 2021-12-26T00:59:02 Last Updated: 2024-08-04T04:39:21.549Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AC:L/AV:A/A:H/C:N/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064442/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-R7000-PSV-2018-0418
CVE ID: CVE-2021-45524 State: PUBLISHED Published: 2021-12-26T00:58:52 Last Updated: 2024-08-04T04:39:21.454Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AC:H/AV:A/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R8000 devices before 1.0.4.62 are affected by a buffer overflow by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064123/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-R8000-PSV-2020-0315
CVE ID: CVE-2021-45525 State: PUBLISHED Published: 2021-12-26T00:58:40 Last Updated: 2024-08-04T04:39:21.455Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AC:L/AV:A/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX7000 before 1.0.1.80, R6400 before 1.0.1.50, R6400v2 before 1.0.4.118, R6700 before 1.0.2.8, R6700v3 before 1.0.4.118, R6900 before 1.0.2.8, R6900P before 1.3.2.124, R7000 before 1.0.9.88, R7000P before 1.3.2.124, R7900 before 1.0.3.18, R7900P before 1.4.1.50, R8000 before 1.0.4.46, R8000P before 1.4.1.50, RAX80 before 1.0.1.56, and WNR3500Lv2 before 1.2.0.
900P before 1.4.1.50, R8000 before 1.0.4.46, R8000P before 1.4.1.50, RAX80 before 1.0.1.56, and WNR3500Lv2 before 1.2.0.62. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064052/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Routers-and-Extenders-PSV-2018-0618
CVE ID: CVE-2021-45526 State: PUBLISHED Published: 2021-12-26T00:58:14 Last Updated: 2024-08-04T04:39:21.494Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AC:L/AV:L/A:H/C:L/I:L/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX6000 before 1.0.0.38, EX6120 before 1.0.0.48, EX6130 before 1.0.0.30, R6300v2 before 1.0.4.52, R6400 before 1.0.1.52, R7000 before 1.0.11.126, R7900 before 1.0.4.30, R8000 before 1.0.4.52, R7000P before 1.3.2.124, R8000P before 1.4.1.50, RAX80 before 1.0.3.88, R6900P before 1.3.2.124, R7900P before 1.4.1.50, and RAX75 before 1.0.3.88. Additional Analyst Notes
80 before 1.0.3.88, R6900P before 1.3.2.124, R7900P before 1.4.1.50, and RAX75 before 1.0.3.88. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064446/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Routers-and-Extenders-PSV-2019-0078
CVE ID: CVE-2021-45527 State: PUBLISHED Published: 2021-12-26T00:58:02 Last Updated: 2024-08-04T04:39:21.497Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.102, D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, DC112A before 1.0.0.54, EX7000 before 1.0.1.94, EX7500 before 1.0.0.72, R6250 before 1.0.4.48, R6300v2 before 1.0.4.52, R6400 before 1.0.1.70, R6400v2 before 1.0.4.102, R6700v3 before 1.0.4.102, R7000 before 1.0.11.116, R7100LG before 1.0.0.64, R7850 before 1.0.5.