alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2017-18689 (published 2020-04-07)
An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos5433, Exynos7420, or Exynos7870 chipsets) software. An attacker can bypass a ko (aka Kernel Module) signature by modifying the count of kernel modules. The Samsung ID is SVE-2016-7466 (January 2017).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-354
Affected vendors: google, samsung
Affected products: android, exynos_5433, exynos_7420, exynos_7870
CVE-2017-18690 (published 2020-04-07)
An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) (Exynos54xx, Exynos7420, Exynos8890, or Exynos8895 chipsets) software. There is a buffer overflow in the sensor hub. The Samsung ID is SVE-2016-7484 (January 2017).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: google, samsung
Affected products: android, exynos_5410, exynos_5420, exynos_5422, exynos_5430, exynos_5450, exynos_7420, exynos_8890, exynos_8895
CVE-2017-18691 (published 2020-04-07)
An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos8890 chipsets) software. There are multiple Buffer Overflows in TSP sysfs cmd_store. The Samsung ID is SVE-2016-7500 (January 2017).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: google, samsung
Affected products: android, exynos_8890
CVE-2017-18692 (published 2020-04-07)
An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (MSM8939, MSM8996, MSM8998, Exynos7580, Exynos8890, or Exynos8895 chipsets) software. There is a race condition, with a resultant buffer overflow, in the sec_ts touchscreen sysfs interface. The Samsung ID is SVE-2016-7501 (January 2017).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: google, qualcomm, samsung
Affected products: android, exynos_7580, exynos_8890, exynos_8895, msm8939, msm8996, msm8998
CVE-2017-18693 (published 2020-04-07)
An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. There is a buffer overflow in the fps sysfs entry. The Samsung ID is SVE-2016-7510 (January 2017).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: google
Affected products: android
CVE-2017-18694 (published 2020-04-07)
An issue was discovered on Samsung mobile devices with software through 2016-10-25 (Exynos5 chipsets). Attackers can read kernel addresses in the log because an incorrect format specifier is used. The Samsung ID is SVE-2016-7551 (January 2017).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-200
Affected vendors: google, samsung
Affected products: android, exynos_5250, exynos_5260, exynos_5410, exynos_5420, exynos_5422, exynos_5430, exynos_5800
CVE-2017-18695 (published 2020-04-07)
An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. Attackers (who control a certain subdomain) can discover a user's credentials, during an email account login, via an EAS autodiscover packet. The Samsung ID is SVE-2016-7654 (January 2017).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-522
Affected vendors: google
Affected products: android
CVE-2017-18696 (published 2020-04-07)
An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos7420, Exynos8890, or MSM8996 chipsets) software. RKP allows memory corruption. The Samsung ID is SVE-2016-7897 (January 2017).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: google, qualcomm, samsung
Affected products: android, exynos_7420, exynos_8890, msm8996
CVE-2017-18697 (published 2020-04-24)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 before 1.0.2.40 and R9000 before 1.0.2.52.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: r7800, r7800_firmware, r9000, r9000_firmware
CVE-2017-18698 (published 2020-04-24)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6100 before 1.0.1.20, R7800 before 1.0.2.40, and R9000 before 1.0.2.52.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: r6100, r6100_firmware, r7800, r7800_firmware, r9000, r9000_firmware
CVE-2017-18699 (published 2020-04-24)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 before 1.0.2.40 and R9000 before 1.0.2.52.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: r7800, r7800_firmware, r9000, r9000_firmware
CVE-2017-18700 (published 2020-04-24)
Certain NETGEAR devices are affected by stored XSS. This affects D6400 before 1.0.0.60, D7000 before 1.0.1.50, D8500 before 1.0.3.29, EX6200 before 1.0.3.84, EX7000 before 1.0.0.60, R6250 before 1.0.4.16, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R6900P before 1.3.0.8, R7000 before 1.0.9.14, R7000P before 1.3.0.8, R7100LG before 1.0.0.34, R7300DST before 1.0.0.56, R7900 before 1.0.1.26, R8000 before 1.0.4.4, R8300 before 1.0.2.106, R8500 before 1.0.2.106, R9000 before 1.0.2.52, WNDR3400v3 before 1.0.1.16, WNR3500Lv2 before 1.2.0.46, and WNDR3700v5 before 1.1.0.48.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: netgear
Affected products: d6400, d6400_firmware, d7000, d7000_firmware, d8500, d8500_firmware, ex6200, ex6200_firmware, ex7000, ex7000_firmware, r6250, r6250_firmware, r6300, r6300_firmware, r6400, r6400_firmware, r6700, r6700_firmware, r6900, r6900_firmware, r6900p, r6900p_firmware, r7000, r7000_firmware, r7000p
CVE-2017-18701 (published 2020-04-24)
Certain NETGEAR devices are affected by reflected XSS. This affects R6700 before 1.0.1.36 and R6900 before 1.0.1.34.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: netgear
Affected products: r6700, r6700_firmware, r6900, r6900_firmware
CVE-2017-18702 (published 2020-04-24)
NETGEAR R6220 devices before 1.1.0.60 are affected by incorrect configuration of security settings.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Affected vendors: netgear
Affected products: r6220, r6220_firmware
CVE-2017-18703 (published 2020-04-24)
Certain NETGEAR devices are affected by CSRF. This affects D1500 before 1.0.0.25, D500 before 1.0.0.25, D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800 before 1.0.1.28, EX6100v2 before 1.0.1.60, EX6150v2 before 1.0.1.60, JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.16, JWNR2010v5 before 1.1.0.46, PR2000 before 1.0.0.18, R6020 before 1.0.0.26, R6050 before 1.0.1.16, R6080 before 1.0.0.26, R6100 before 1.0.1.20, R6220 before 1.1.0.60, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WN3000RPv3 before 1.0.2.50, WN3100RPv2 before 1.0.0.40, WNDR3700v5 before 1.1.0.48, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, WNR1000v4 before 1.1.0.46, WNR2000v5 before 1.0.0.62, WNR2020 before 1.1.0.46, and WNR2050 before 1.1.0.46.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: netgear
Affected products: d1500, d1500_firmware, d500, d500_firmware, d6100, d6100_firmware, d7000, d7000_firmware, d7800, d7800_firmware, ex6100, ex6100_firmware, ex6150, ex6150_firmware, jnr1010, jnr1010_firmware, jr6150, jr6150_firmware, jwnr2010, jwnr2010_firmware, pr2000, pr2000_firmware, r6020, r6020_firmware, r6050
CVE-2017-18704 (published 2020-04-24)
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.32, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.16, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R7000 before 1.0.9.14, R7000P before 1.3.0.8, R6900P before 1.3.0.8, R7100LG before 1.0.0.34, R7300DST before 1.0.0.56, R7900 before 1.0.1.26, R8000 before 1.0.4.4, R8500 before 1.0.2.106, R8300 before 1.0.2.106, and WNDR3400v3 before 1.0.1.16.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: netgear
Affected products: d6220, d6220_firmware, d6400, d6400_firmware, d8500, d8500_firmware, r6250, r6250_firmware, r6300, r6300_firmware, r6400, r6400_firmware, r6700, r6700_firmware, r6900, r6900_firmware, r6900p, r6900p_firmware, r7000, r7000_firmware, r7000p, r7000p_firmware, r7100lg, r7100lg_firmware, r7300dst
CVE-2017-18705 (published 2020-04-24)
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.88, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.62.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: netgear
Affected products: d7800, d7800_firmware, r6100, r6100_firmware, r7500, r7500_firmware, r7800, r7800_firmware, r9000, r9000_firmware, wndr3700, wndr3700_firmware, wndr4300, wndr4300_firmware, wndr4500, wndr4500_firmware, wnr2000, wnr2000_firmware
CVE-2017-18706 (published 2020-04-24)
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6100 before 1.0.1.20, R7500 before 1.0.0.118, WNDR3700v4 before 1.0.2.88, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.62.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: netgear
Affected products: r6100, r6100_firmware, r7500, r7500_firmware, wndr3700, wndr3700_firmware, wndr4300, wndr4300_firmware, wndr4500, wndr4500_firmware, wnr2000, wnr2000_firmware
CVE-2017-18707 (published 2020-04-24)
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R8300 before 1.0.2.106 and R8500 before 1.0.2.106.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: netgear
Affected products: r8300, r8300_firmware, r8500, r8500_firmware
CVE-2017-18708 (published 2020-04-24)
Certain NETGEAR devices are affected by CSRF. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: netgear
Affected products: r8300, r8300_firmware, r8500, r8500_firmware
CVE-2017-18709 (published 2020-04-24)
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: netgear
Affected products: r8300, r8300_firmware, r8500, r8500_firmware
CVE-2017-18710 (published 2020-04-24)
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R8300 before 1.0.2.106 and R8500 before 1.0.2.106.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-200
Affected vendors: netgear
Affected products: r8300, r8300_firmware, r8500, r8500_firmware
CVE-2017-18711 (published 2020-04-24)
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.28, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R6900P before 1.3.0.8, R7000 before 1.0.9.14, R7000P before 1.3.0.8, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: netgear
Affected products: d7800, d7800_firmware, r6400, r6400_firmware, r6700, r6700_firmware, r6900, r6900_firmware, r6900p, r6900p_firmware, r7000, r7000_firmware, r7000p, r7000p_firmware, r7500, r7500_firmware, r7800, r7800_firmware, r9000, r9000_firmware, wndr4300, wndr4300_firmware, wndr4500, wndr4500_firmware
CVE-2017-18712 (published 2020-04-24)
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D7800 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: netgear
Affected products: d7800, d7800_firmware, r6100, r6100_firmware, r7500, r7500_firmware, r7800, r7800_firmware, r9000, r9000_firmware, wndr4300, wndr4300_firmware, wndr4500, wndr4500_firmware
CVE-2017-18713 (published 2020-04-24)
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D7800 before 1.0.1.28, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: netgear
Affected products: d7800, d7800_firmware, r6700, r6700_firmware, r6900, r6900_firmware, r7500, r7500_firmware, r7800, r7800_firmware, r9000, r9000_firmware, wndr4300, wndr4300_firmware, wndr4500, wndr4500_firmware
CVE-2017-18714 (published 2020-04-24)
NETGEAR WNDR4500v3 devices before 1.0.0.48 are affected by denial of service.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: netgear
Affected products: wndr4500, wndr4500_firmware
CVE-2017-18715 (published 2020-04-24)
Certain NETGEAR devices are affected by reflected XSS. This affects EX3700 before 1.0.0.66, EX3800 before 1.0.0.66, EX6100 before 1.0.2.20, EX6120 before 1.0.0.34, EX6150 before 1.0.0.36, EX6200 before 1.0.3.84, and EX7000 before 1.0.0.60.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: netgear
Affected products: ex3700, ex3700_firmware, ex3800, ex3800_firmware, ex6100, ex6100_firmware, ex6120, ex6120_firmware, ex6150, ex6150_firmware, ex6200, ex6200_firmware, ex7000, ex7000_firmware
CVE-2017-18716 (published 2020-04-24)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: d6200, d6200_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18717 (published 2020-04-24)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: d6200, d6200_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18718 (published 2020-04-24)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: d6200, d6200_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18719 (published 2020-04-24)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6020 before 1.1.00.26, R6080 before 1.1.00.26; R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: d6200, d6200_firmware, r6020, r6020_firmware, r6080, r6080_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18720 (published 2020-04-24)
Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: netgear
Affected products: d6200, d6200_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18721 (published 2020-04-24)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: d6200, d6200_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18722 (published 2020-04-24)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: d6200, d6200_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18723 (published 2020-04-24)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: d6200, d6200_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18724 (published 2020-04-24)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: d6200, d6200_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18725 (published 2020-04-24)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24. R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: d6200, d6200_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18726 (published 2020-04-24)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6020 before 1.0.0.30, R6080 before 1.0.0.30, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: r6020, r6020_firmware, r6080, r6080_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18727 (published 2020-04-24)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: d6200, d6200_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18728 (published 2020-04-24)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: d6200, d6200_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18729 (published 2020-04-24)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6020 before 1.0.0.30, R6080 before 1.0.0.30, R6120 before 1.0.0.36, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: d6200, d6200_firmware, r6020, r6020_firmware, r6080, r6080_firmware, r6120, r6120_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18730 (published 2020-04-24)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6020 before 1.0.0.30, R6080 before 1.0.0.30, R6120 before 1.0.0.36, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: d6200, d6200_firmware, r6020, r6020_firmware, r6080, r6080_firmware, r6120, r6120_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18731 (published 2020-04-24)
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6100 before 1.0.1.16, R7500 before 1.0.0.112, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, and WNR2000v5 before 1.0.0.58.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: netgear
Affected products: r6100, r6100_firmware, r7500, r7500_firmware, r7800, r7800_firmware, wnr2500, wnr2500_firmware
CVE-2017-18732 (published 2020-04-23)
Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, PLW1000v2 before 1.0.0.14, and PLW1010v2 before 1.0.0.14.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: netgear
Affected products: plw1000, plw1000_firmware, plw1010, plw1010_firmware, r6300, r6300_firmware
CVE-2017-18733 (published 2020-04-23)
Certain NETGEAR devices are affected by authentication bypass. This affects D6220 before 1.0.0.28, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.8, R6400 before 1.0.1.22, R6400v2 before 1.0.2.32, R7100LG before 1.0.0.32, R7300DST before 1.0.0.52, R8300 before 1.0.2.94, and R8500 before 1.0.2.100.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: netgear
Affected products: d6220, d6220_firmware, d6400, d6400_firmware, d8500, d8500_firmware, r6250, r6250_firmware, r6400, r6400_firmware, r7100lg, r7100lg_firmware, r7300dst, r7300dst_firmware, r8300, r8300_firmware, r8500, r8500_firmware
CVE-2017-18734 (published 2020-04-23)
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, R6900v2 before 1.2.0.4, WNDR3700v5 before 1.1.0.48, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-74
Affected vendors: netgear
Affected products: jnr1010, jnr1010_firmware, jr6150, jr6150_firmware, jwnr2010, jwnr2010_firmware, pr2000, pr2000_firmware, r6050, r6050_firmware, r6220, r6220_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware, wndr3700, wndr3700_firmware, wnr1000, wnr1000_firmware, wnr2020, wnr2020_firmware, wnr2050
CVE-2017-18735 (published 2020-04-23)
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JR6150 before 1.0.1.10, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, and R6900v2 before 1.2.0.4.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-74
Affected vendors: netgear
Affected products: jr6150, jr6150_firmware, pr2000, pr2000_firmware, r6050, r6050_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18736 (published 2020-04-23)
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JR6150 before 1.0.1.10, R6050 before 1.0.1.10, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, R6900v2 before 1.2.0.4, and WNDR3700v5 before 1.1.0.48.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-74
Affected vendors: netgear
Affected products: jr6150, jr6150_firmware, r6050, r6050_firmware, r6220, r6220_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware, wndr3700, wndr3700_firmware
CVE-2017-18737 (published 2020-04-23)
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, R6900v2 before 1.2.0.4, WNDR3700v5 before 1.1.0.48, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-74
Affected vendors: netgear
Affected products: jnr1010, jnr1010_firmware, jr6150, jr6150_firmware, jwnr2010, jwnr2010_firmware, pr2000, pr2000_firmware, r6050, r6050_firmware, r6220, r6220_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware, wndr3700, wndr3700_firmware, wnr1000, wnr1000_firmware, wnr2020, wnr2020_firmware, wnr2050
CVE-2017-18738 (published 2020-04-23)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects EX6150v2 before 1.0.1.54, R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.10, R7000P before 1.2.0.22, R6900P before 1.2.0.22, R7100LG before 1.0.0.32, R7300DST before 1.0.0.54, R7900 before 1.0.1.18, R8000 before 1.0.3.48, R8300 before 1.0.2.106, R8500 before 1.0.2.106, R6100 before 1.0.1.16, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.58.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: ex6150, ex6150_firmware, r6100, r6100_firmware, r6400, r6400_firmware, r6700, r6700_firmware, r6900, r6900_firmware, r6900p, r6900p_firmware, r7000, r7000_firmware, r7000p, r7000p_firmware, r7100lg, r7100lg_firmware, r7300dst, r7300dst_firmware, r7900, r7900_firmware, r8000, r8000_firmware, r8300
CVE-2017-18739 (published 2020-04-23)
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6220 before V1.1.0.50, R7800 before V1.0.2.36, WNDR3400v3 before 1.0.1.14, and WNDR3700v5 before V1.1.0.48.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: netgear
Affected products: r6220, r6220_firmware, r7800, r7800_firmware, wndr3400, wndr3400_firmware, wndr3700, wndr3700_firmware
CVE-2017-18740 (published 2020-04-23)
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.61, D6000 before 1.0.0.61, D6100 before 1.0.0.55, D7800 before 1.0.1.28, R6100 before 1.0.1.16, R7500 before 1.0.0.112, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R9000 before 1.0.2.40, WNDR3700v4 before 1.0.2.88, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.58.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Affected vendors: netgear
Affected products: d3600, d3600_firmware, d6000, d6000_firmware, d6100, d6100_firmware, d7800, d7800_firmware, r6100, r6100_firmware, r7500, r7500_firmware, r7800, r7800_firmware, r9000, r9000_firmware, wndr3700, wndr3700_firmware, wndr4300, wndr4300_firmware, wndr4500, wndr4500_firmware, wnr2000, wnr2000_firmware
CVE-2017-18741 (published 2020-04-23)
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6250 before 1.0.4.8, R6300v2 before 1.0.4.8, R6700 before 1.0.1.20, R7000 before 1.0.7.10, R7000P before 1.0.0.58, R6900P before 1.0.0.58, R7100LG before 1.0.0.32, R7900 before 1.0.1.14, R8000 before 1.0.3.22, and R8500 before 1.0.2.94.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: netgear
Affected products: r6250, r6250_firmware, r6300, r6300_firmware, r6700, r6700_firmware, r6900p, r6900p_firmware, r7000, r7000_firmware, r7000p, r7000p_firmware, r7100lg, r7100lg_firmware, r7900, r7900_firmware, r8000, r8000_firmware, r8500, r8500_firmware
CVE-2017-18742 (published 2020-04-23)
Certain NETGEAR devices are affected by CSRF. This affects JR6150 before 1.0.1.10, R6050 before 1.0.1.10, R6250 before 1.0.4.12, R6300v2 before 1.0.4.8, R6700 before 1.0.1.16, R6900 before 1.0.1.16, R7300DST before 1.0.0.54, R7900 before 1.0.1.12, R8000 before 1.0.3.32, and R8500 before 1.0.2.74.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: netgear
Affected products: jr6150, jr6150_firmware, r6050, r6050_firmware, r6250, r6250_firmware, r6300, r6300_firmware, r6700, r6700_firmware, r6900, r6900_firmware, r7300dst, r7300dst_firmware, r7900, r7900_firmware, r8000, r8000_firmware, r8500, r8500_firmware
CVE-2017-18743 (published 2020-04-23)
Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, R6400 before 1.0.1.20, R6700 before 1.0.1.20, R6900 before 1.0.1.20, R7000 before 1.0.7.10, R7100LG before V1.0.0.32, R7300DST before 1.0.0.52, R7900 before 1.0.1.16, R8000 before 1.0.3.36, R8300 before 1.0.2.94, R8500 before 1.0.2.94, WNDR3400v3 before 1.0.1.12, and WNR3500Lv2 before 1.2.0.40.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: netgear
Affected products: r6300, r6300_firmware, r6400, r6400_firmware, r6700, r6700_firmware, r6900, r6900_firmware, r7000, r7000_firmware, r7100lg, r7100lg_firmware, r7300dst, r7300dst_firmware, r7900, r7900_firmware, r8000, r8000_firmware, r8300, r8300_firmware, r8500, r8500_firmware, wndr3400, wndr3400_firmware, wnr3500l
CVE-2017-18744 (published 2020-04-23)
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6250 before 1.0.4.12, R6300v2 before 1.0.4.12, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7900 before 1.0.1.12, R8000 before 1.0.3.24, and R8500 before 1.0.2.74.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: netgear
Affected products: r6250, r6250_firmware, r6300, r6300_firmware, r6700, r6700_firmware, r6900, r6900_firmware, r7000, r7000_firmware, r7900, r7900_firmware, r8000, r8000_firmware, r8500, r8500_firmware
CVE-2017-18745 (published 2020-04-23)
Certain NETGEAR devices are affected by stored XSS. This affects R6400 before 1.0.1.14, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7100LG before 1.0.0.32, R7300DST before 1.0.0.56, R7900 before 1.0.1.12, R8000 before 1.0.3.24, and R8500 before 1.0.2.74.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: netgear
Affected products: r6400, r6400_firmware, r6700, r6700_firmware, r6900, r6900_firmware, r7000, r7000_firmware, r7100lg, r7100lg_firmware, r7300dst, r7300dst_firmware, r7900, r7900_firmware, r8000, r8000_firmware, r8500, r8500_firmware
CVE-2017-18746 (published 2020-04-23)
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6000 before 1.0.0.24, EX6130 before 1.0.0.16, EX6400 before 1.0.1.60, EX7000 before 1.0.0.50, EX7300 before 1.0.1.60, and WN2500RPv2 before 1.0.1.46.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: netgear
Affected products: ex3700, ex3700_firmware, ex3800, ex3800_firmware, ex6000, ex6000_firmware, ex6130, ex6130_firmware, ex6400, ex6400_firmware, ex7000, ex7000_firmware, ex7300, ex7300_firmware, wn2500rp, wn2500rp_firmware
CVE-2017-18747 (published 2020-04-23)
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6000 before 1.0.0.24, EX6130 before 1.0.0.16, EX6400 before 1.0.1.60, EX7000 before 1.0.0.50, EX7300 before 1.0.1.60, and WN2500RPv2 before 1.0.1.46.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-20
Affected vendors: netgear
Affected products: ex3700, ex3700_firmware, ex3800, ex3800_firmware, ex6000, ex6000_firmware, ex6130, ex6130_firmware, ex6400, ex6400_firmware, ex7000, ex7000_firmware, ex7300, ex7300_firmware, wn2500rp, wn2500rp_firmware
CVE-2017-18748 (published 2020-04-23)
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX6200v2 before 1.0.1.44, R6100 before 1.0.1.12, R7500 before 1.0.0.108, R7500v2 before 1.0.3.10, R7800 before 1.0.2.28, R9000 before 1.0.2.30, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: netgear
Affected products: ex6200, ex6200_firmware, r6100, r6100_firmware, r7500, r7500_firmware, r7800, r7800_firmware, r9000, r9000_firmware, wndr4300, wndr4300_firmware, wndr4500, wndr4500_firmware
CVE-2017-18749 (published 2020-04-23)
Certain NETGEAR devices are affected by CSRF. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44, R6050 before 1.0.1.10, R6100 before 1.0.1.16, R6220 before 1.1.0.50, R7500 before 1.0.0.112, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R9000 before 1.0.2.40, WNDR3700v4 before 1.0.2.88, WNDR3700v5 before 1.1.0.48, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, WNR1000v4 before 1.1.0.44, WNR2000v5 before 1.0.0.58, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: netgear
Affected products: jnr1010, jnr1010_firmware, jr6150, jr6150_firmware, jwnr2010, jwnr2010_firmware, r6050, r6050_firmware, r6100, r6100_firmware, r6220, r6220_firmware, r7500, r7500_firmware, r7800, r7800_firmware, r9000, r9000_firmware, wndr3700, wndr3700_firmware, wndr4300, wndr4300_firmware, wndr4500, wndr4500_firmware, wnr1000
CVE-2017-18750 (published 2020-04-23)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: d6200, d6200_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18751 (published 2020-04-23)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D7800 before 1.0.1.28, R6100 before 1.0.1.16, R7500 before 1.0.0.112, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.88, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: d7800, d7800_firmware, r6100, r6100_firmware, r7500, r7500_firmware, r7800, r7800_firmware, r9000, r9000_firmware, wndr3700, wndr3700_firmware, wndr4300, wndr4300_firmware, wndr4500, wndr4500_firmware
CVE-2017-18752 (published 2020-04-22)
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6120 before 1.0.0.32, EX6130 before 1.0.0.16, R6300v2 before 1.0.4.12, R6700 before 1.0.1.26, R6900 before 1.0.1.22, R7000 before 1.0.9.6, R7300DST before 1.0.0.52, R7900 before 1.0.1.12, R8000 before 1.0.3.24, and R8500 before 1.0.2.94.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: netgear
Affected products: ex3700, ex3700_firmware, ex3800, ex3800_firmware, ex6120, ex6120_firmware, ex6130, ex6130_firmware, r6300, r6300_firmware, r6700, r6700_firmware, r6900, r6900_firmware, r7000, r7000_firmware, r7300dst, r7300dst_firmware, r7900, r7900_firmware, r8000, r8000_firmware, r8500, r8500_firmware
CVE-2017-18754 (published 2020-04-22)
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WNDR3700v4 before 1.0.2.88, WNDR4300v1 before 1.0.2.90, and WNR2000v5 before 1.0.0.58.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-74
Affected vendors: netgear
Affected products: wndr3700, wndr3700_firmware, wndr4300, wndr4300_firmware, wnr2000, wnr2000_firmware
CVE-2017-18755 (published 2020-04-22)
Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.4.8, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000P before 1.0.0.86, R6900P before 1.0.0.56, R7300 before 1.0.0.54, R8300 before 1.0.2.106, R8500 before 1.0.2.106, DGN2200v4 before 1.0.0.86, DGND2200Bv4 before 1.0.0.86, R6050 before 1.0.0.86, JR6150 before 1.0.1.10, R6220 before 1.1.0.50, and WNDR3700v5 before V1.1.0.48.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: netgear
Affected products: dgn2200, dgn2200_firmware, dgnd2200b, dgnd2200b_firmware, jr6150, jr6150_firmware, r6050, r6050_firmware, r6220, r6220_firmware, r6300, r6300_firmware, r6400, r6400_firmware, r6700, r6700_firmware, r6900, r6900_firmware, r6900p, r6900p_firmware, r7000p, r7000p_firmware, r7300, r7300_firmware, r8300
CVE-2017-18756 (published 2020-04-22)
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6220 before 1.0.0.32, D6400 before 1.0.0.66, D8500 before 1.0.3.35, DGN2200Bv4 before 1.0.0.94, DGN2200v4 before 1.0.0.94, R6250 before 1.0.4.14, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.30, R6900P before 1.3.0.8, R7000 before 1.0.9.14, R7000P before 1.3.0.8, R7100LG before 1.0.0.34, R7900 before 1.0.2.4, R8000 before 1.0.4.2, WN2500RPv2 before 1.0.1.50, WNDR3400v3 before 1.0.1.14, and WNDR4000 before 1.0.2.10.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: netgear
Affected products: d6220, d6220_firmware, d6400, d6400_firmware, d8500, d8500_firmware, dgn2200, dgn2200_firmware, dgn2200b, dgn2200b_firmware, r6250, r6250_firmware, r6300, r6300_firmware, r6400, r6400_firmware, r6700, r6700_firmware, r6900, r6900_firmware, r6900p, r6900p_firmware, r7000, r7000_firmware, r7000p
CVE-2017-18757 (published 2020-04-22)
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.30, R6100 before 1.0.1.16, R7500 before 1.0.0.116, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R9000 before 1.0.2.40, WNDR4300v2 before 1.0.0.48, WNDR4300v1 before 1.0.2.90, and WNDR4500v3 before 1.0.0.48.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Affected vendors: netgear
Affected products: d7800, d7800_firmware, r6100, r6100_firmware, r7500, r7500_firmware, r7800, r7800_firmware, r9000, r9000_firmware, wndr4300, wndr4300_firmware, wndr4500, wndr4500_firmware
CVE-2017-18758 (published 2020-04-22)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware
CVE-2017-18759 (published 2020-04-22)
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: r8300, r8300_firmware, r8500, r8500_firmware
CVE-2017-18761 (published 2020-04-22)
NETGEAR R8000 devices before 1.0.4.2 are affected by a stack-based buffer overflow by an authenticated user.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: netgear
Affected products: r8000, r8000_firmware
CVE-2017-18762 (published 2020-04-22)
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D3600 before 1.0.0.68, D6000 before 1.0.0.68, D6100 before 1.0.0.57, R6100 before 1.0.1.16, R6900P before 1.2.0.22, R7000 before 1.0.9.10, R7000P before 1.2.0.22, R7100LG before 1.0.0.40, WNDR3700v4 before 1.0.2.88, WNDR4300v1 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.58.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-74
Affected vendors: netgear
Affected products: d3600, d3600_firmware, d6000, d6000_firmware, d6100, d6100_firmware, r6100, r6100_firmware, r6900p, r6900p_firmware, r7000, r7000_firmware, r7000p, r7000p_firmware, r7100lg, r7100lg_firmware, wndr3700, wndr3700_firmware, wndr4300, wndr4300_firmware, wndr4500, wndr4500_firmware, wnr2000, wnr2000_firmware
CVE-2017-18763 (published 2020-04-22)
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JNR1010v2 before 1.1.0.42, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.42, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6120 before 1.0.0.30, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, R6900v2 before 1.2.0.4, WNDR3700v5 before 1.1.0.48, WNR1000v4 before 1.1.0.42, WNR2020 before 1.1.0.42, and WNR2050 before 1.1.0.42.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-20
Affected vendors: netgear
Affected products: jnr1010, jnr1010_firmware, jr6150, jr6150_firmware, jwnr2010, jwnr2010_firmware, pr2000, pr2000_firmware, r6050, r6050_firmware, r6120, r6120_firmware, r6220, r6220_firmware, r6700, r6700_firmware, r6800, r6800_firmware, r6900, r6900_firmware, wndr3700, wndr3700_firmware, wnr1000, wnr1000_firmware, wnr2020
CVE-2017-18764 (published 2020-04-22)
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800 before 1.0.1.28, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6100 before 1.0.1.14, R6120 before 1.0.0.30, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, R6900v2 before 1.2.0.4, R7500 before 1.0.0.110, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R9000 before 1.0.2.52, WN3000RPv3 before 1.0.2.50, WNDR3700v4 before 1.0.2.88, WNDR3700v5 before 1.1.0.48, WNDR4300v1 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, WNR1000v4 before 1.1.0.44, WNR2000v5 before 1.0.0.58, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-74
Affected vendors: netgear
Affected products: d6100, d6100_firmware, d7000, d7000_firmware, d7800, d7800_firmware, jnr1010, jnr1010_firmware, jr6150, jr6150_firmware, jwnr2010, jwnr2010_firmware, pr2000, pr2000_firmware, r6050, r6050_firmware, r6100, r6100_firmware, r6120, r6120_firmware, r6220, r6220_firmware, r6700, r6700_firmware, r6800
CVE-2017-18765 (published 2020-04-22)
Certain NETGEAR devices are affected by denial of service. This affects R6300v2 before 1.0.4.8, R6400 before 1.0.1.22, R6400v2 before 1.0.2.32, R6700 before 1.0.1.20, R6900 before 1.0.1.20, WNR3500Lv2 before 1.2.0.44, and WNR2000v2 before 1.2.0.8.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: netgear
Affected products: r6300, r6300_firmware, r6400, r6400_firmware, r6700, r6700_firmware, r6900, r6900_firmware, wnr2000, wnr2000_firmware, wnr3500l, wnr3500l_firmware
CVE-2017-18766 (published 2020-04-22)
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects DST6501 before 1.1.0.6 and WNR2000v2 before 1.2.0.8.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: netgear
Affected products: dst6501, dst6501_firmware, wnr2000, wnr2000_firmware
CVE-2017-18767 (published 2020-04-22)
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, D8500 before 1.0.3.39, R6400 before 1.0.1.14, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7100LG before 1.0.0.32, R7300 before 1.0.0.56, R7800 before 1.0.2.36, R7900 before 1.0.2.10, R8000 before 1.0.3.24, R8300 before 1.0.2.74, and R8500 before 1.0.2.74.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-74
Affected vendors: netgear
Affected products: d7800, d7800_firmware, d8500, d8500_firmware, r6400, r6400_firmware, r6700, r6700_firmware, r6900, r6900_firmware, r7000, r7000_firmware, r7100lg, r7100lg_firmware, r7300, r7300_firmware, r7800, r7800_firmware, r7900, r7900_firmware, r8000, r8000_firmware, r8300, r8300_firmware, r8500
CVE-2017-18768 (published 2020-04-22)
Certain NETGEAR devices are affected by CSRF. This affects EX6100 before 1.0.2.16_1.1.130, EX6100v2 before 1.0.1.70, EX6150v2 before 1.0.1.54, EX6200v2 before 1.0.1.50, EX6400 before 1.0.1.60, EX7300 before 1.0.1.60, and WN3000RPv3 before 1.0.2.44.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: netgear
Affected products: ex6100, ex6100_firmware, ex6150, ex6150_firmware, ex6200, ex6200_firmware, ex6400, ex6400_firmware, ex7300, ex7300_firmware, wn3000rp, wn3000rp_firmware