deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-37565
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).
CVSS Score: 8.2 (HIGH)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-37566
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7610, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write).
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-37567
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).
CVSS Score: 8.2 (HIGH)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-37568
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write).
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-37569
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write).
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-37570
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).
CVSS Score: 8.2 (HIGH)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-37571
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write).
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-37572
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Missing authorization).
CVSS Score: 8.2 (HIGH)
CWE: CWE-862
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-37583
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write).
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-37584
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write).
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-41788
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-12-13 and other devices, mishandle attempts at Wi-Fi authentication flooding. (Affected Chipsets MT7603E, MT7612, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064369/Security-Advisory-for-WiFi-Authentication-Flooding-Vulnerabilities-on-Multiple-Products-PSV-2021-0299-PSV-2021-0301; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-45493
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RAX35 before 1.0.4.102, RAX38 before 1.0.4.102, and RAX40 before 1.0.4.102.
CVSS Score: 7.6 (HIGH)
CWE: CWE-200
References: https://kb.netgear.com/000064453/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-Routers-PSV-2019-0293; https://kb.netgear.com/000064453/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-Routers-PSV-2019-0293
CVE: CVE-2021-45494
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10.
CVSS Score: 8.4 (HIGH)
References: https://kb.netgear.com/000064160/Security-Advisory-for-Arbitrary-File-Read-on-Some-WiFi-Systems-PSV-2021-0044; https://kb.netgear.com/000064160/Security-Advisory-for-Arbitrary-File-Read-on-Some-WiFi-Systems-PSV-2021-0044
CVE: CVE-2021-45495
Published: 2021-12-26
Description: NETGEAR D7000 devices before 1.0.1.68 are affected by authentication bypass.
CVSS Score: 6.5 (MEDIUM)
References: https://kb.netgear.com/000064055/Security-Advisory-for-Authentication-Bypass-on-D7000-PSV-2018-0631; https://kb.netgear.com/000064055/Security-Advisory-for-Authentication-Bypass-on-D7000-PSV-2018-0631
CVE: CVE-2021-45496
Published: 2021-12-26
Description: NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass.
CVSS Score: 9.1 (CRITICAL)
References: https://kb.netgear.com/000064529/Security-Advisory-for-Authentication-Bypass-on-D7000-PSV-2021-0060; https://kb.netgear.com/000064529/Security-Advisory-for-Authentication-Bypass-on-D7000-PSV-2021-0060
CVE: CVE-2021-45497
Published: 2021-12-26
Description: NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass.
CVSS Score: 9.4 (CRITICAL)
References: https://kb.netgear.com/000064533/Security-Advisory-for-Authentication-Bypass-on-D7000-PSV-2021-0155; https://kb.netgear.com/000064533/Security-Advisory-for-Authentication-Bypass-on-D7000-PSV-2021-0155
CVE: CVE-2021-45498
Published: 2021-12-26
Description: NETGEAR R6700v2 devices before 1.2.0.88 are affected by authentication bypass.
CVSS Score: 6.5 (MEDIUM)
References: https://kb.netgear.com/000064054/Security-Advisory-for-Authentication-Bypass-on-R6700v2-PSV-2018-0630; https://kb.netgear.com/000064054/Security-Advisory-for-Authentication-Bypass-on-R6700v2-PSV-2018-0630
CVE: CVE-2021-45499
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by authentication bypass. This affects R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000P before 1.4.2.84, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106.
CVSS Score: 8.2 (HIGH)
References: https://kb.netgear.com/000064445/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2019-0027; https://kb.netgear.com/000064445/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2019-0027
CVE: CVE-2021-45500
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by authentication bypass. This affects R7000P before 1.3.3.140 and R8000 before 1.0.4.68.
CVSS Score: 9.6 (CRITICAL)
References: https://kb.netgear.com/000064070/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2019-0183; https://kb.netgear.com/000064070/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2019-0183
CVE: CVE-2021-45501
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by authentication bypass. This affects AC2400 before 1.1.0.84, AC2600 before 1.1.0.84, D7000 before 1.0.1.82, R6020 before 1.0.0.52, R6080 before 1.0.0.52, R6120 before 1.0.0.80, R6220 before 1.1.0.110, R6230 before 1.1.0.110, R6260 before 1.1.0.84, R6330 before 1.1.0.84, R6350 before 1.1.0.84, R6700v2 before 1.1.0.84, R6800 before 1.1.0.84, R6850 before 1.1.0.84, R6900v2 before 1.1.0.84, R7200 before 1.1.0.84, R7350 before 1.1.0.84, R7400 before 1.1.0.84, and R7450 before 1.1.0.84.
CVSS Score: 9.4 (CRITICAL)
References: https://kb.netgear.com/000064532/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2021-0154; https://kb.netgear.com/000064532/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2021-0154
CVE: CVE-2021-45502
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.
CVSS Score: 9.6 (CRITICAL)
References: https://kb.netgear.com/000064126/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0473; https://kb.netgear.com/000064126/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0473
CVE: CVE-2021-45503
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.
CVSS Score: 9.6 (CRITICAL)
References: https://kb.netgear.com/000064127/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0474; https://kb.netgear.com/000064127/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0474
CVE: CVE-2021-45504
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBR852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.
CVSS Score: 9.6 (CRITICAL)
References: https://kb.netgear.com/000064128/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0475; https://kb.netgear.com/000064128/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0475
CVE: CVE-2021-45505
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.
CVSS Score: 9.6 (CRITICAL)
References: https://kb.netgear.com/000064129/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0477; https://kb.netgear.com/000064129/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0477
CVE: CVE-2021-45506
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.
CVSS Score: 9.6 (CRITICAL)
References: https://kb.netgear.com/000064130/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0483; https://kb.netgear.com/000064130/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0483
CVE: CVE-2021-45507
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBW30 before 2.6.2.2, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, and RBS40V before 2.6.2.8.
CVSS Score: 9.6 (CRITICAL)
References: https://kb.netgear.com/000064131/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0487; https://kb.netgear.com/000064131/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0487
CVE: CVE-2021-45508
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, and RBR850 before 3.2.17.12.
CVSS Score: 9.6 (CRITICAL)
References: https://kb.netgear.com/000064133/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0490; https://kb.netgear.com/000064133/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0490
CVE: CVE-2021-45509
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.
CVSS Score: 9.6 (CRITICAL)
References: https://kb.netgear.com/000064148/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0564; https://kb.netgear.com/000064148/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0564
CVE: CVE-2021-45510
Published: 2021-12-26
Description: NETGEAR XR1000 devices before 1.0.0.58 are affected by authentication bypass.
CVSS Score: 8.2 (HIGH)
References: https://kb.netgear.com/000064150/Security-Advisory-for-Authentication-Bypass-on-XR1000-PSV-2021-0011; https://kb.netgear.com/000064150/Security-Advisory-for-Authentication-Bypass-on-XR1000-PSV-2021-0011
CVE: CVE-2021-45511
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000 before 2021-08-27, R6220 before 2021-08-27, R6230 before 2021-08-27, R6260 before 2021-08-27, R6330 before 2021-08-27, R6350 before 2021-08-27, R6700v2 before 2021-08-27, R6800 before 2021-08-27, R6850 before 2021-08-27, R6900v2 before 2021-08-27, R7200 before 2021-08-27, R7350 before 2021-08-27, R7400 before 2021-08-27, and R7450 before 2021-08-27.
CVSS Score: 6.8 (MEDIUM)
References: https://kb.netgear.com/000063961/Security-Advisory-for-Authentication-Bypass-Vulnerability-on-the-D7000-and-Some-Routers-PSV-2021-0133; https://kb.netgear.com/000063961/Security-Advisory-for-Authentication-Bypass-Vulnerability-on-the-D7000-and-Some-Routers-PSV-2021-0133
CVE: CVE-2021-45512
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, EX3700 before 1.0.0.84, EX3800 before 1.0.0.84, EX6120 before 1.0.0.54, EX6130 before 1.0.0.36, EX7000 before 1.0.1.90, R6250 before 1.0.4.42, R6400v2 before 1.0.4.98, R6700v3 before 1.0.4.98, R6900P before 1.3.2.124, R7000 before 1.0.11.106, R7000P before 1.3.2.124, R7100LG before 1.0.0.56, R7900 before 1.0.4.26, R8000 before 1.0.4.58, R8300 before 1.0.2.134, R8500 before 1.0.2.134, RS400 before 1.5.0.48, WNR3500Lv2 before 1.2.0.62, and XR300 before 1.0.3.50.
CVSS Score: 8.6 (HIGH)
CWE: CWE-327
References: https://kb.netgear.com/000064117/Security-Advisory-for-Broken-Cryptography-on-Some-Routers-and-Extenders-PSV-2020-0134; https://kb.netgear.com/000064117/Security-Advisory-for-Broken-Cryptography-on-Some-Routers-and-Extenders-PSV-2020-0134
CVE: CVE-2021-45513
Published: 2021-12-26
Description: NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-77
References: https://kb.netgear.com/000064149/Security-Advisory-for-Command-Injection-on-XR1000-PSV-2021-0010; https://kb.netgear.com/000064149/Security-Advisory-for-Command-Injection-on-XR1000-PSV-2021-0010
CVE: CVE-2021-45514
Published: 2021-12-26
Description: NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-77
References: https://kb.netgear.com/000064154/Security-Advisory-for-Command-Injection-on-XR1000-PSV-2021-0018; https://kb.netgear.com/000064154/Security-Advisory-for-Command-Injection-on-XR1000-PSV-2021-0018
CVE: CVE-2021-45515
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by denial of service. This affects EX7500 before 1.0.0.72, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, RBRE960 before 6.0.3.68, RBSE960 before 6.0.3.68, RBR750 before 3.2.17.12, RBR850 before 3.2.17.12, RBS750 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, and RBK852 before 3.2.17.12.
CVSS Score: 6.5 (MEDIUM)
References: https://kb.netgear.com/000064484/Security-Advisory-for-Denial-of-Service-on-Some-Extenders-and-WiFi-Systems-PSV-2020-0286; https://kb.netgear.com/000064484/Security-Advisory-for-Denial-of-Service-on-Some-Extenders-and-WiFi-Systems-PSV-2020-0286
CVE: CVE-2021-45516
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by denial of service. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126, R6900P before 1.3.3.140, R7000P before 1.3.3.140, R8000 before 1.0.4.74, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11.
CVSS Score: 6.9 (MEDIUM)
References: https://kb.netgear.com/000064060/Security-Advisory-for-Denial-of-Service-on-Some-Routers-and-WiFi-Systems-PSV-2019-0115; https://kb.netgear.com/000064060/Security-Advisory-for-Denial-of-Service-on-Some-Routers-and-WiFi-Systems-PSV-2019-0115
CVE: CVE-2021-45517
Published: 2021-12-26
Description: NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.
CVSS Score: 6.5 (MEDIUM)
References: https://kb.netgear.com/000064156/Security-Advisory-for-Denial-of-Service-on-XR1000-PSV-2021-0031; https://kb.netgear.com/000064156/Security-Advisory-for-Denial-of-Service-on-XR1000-PSV-2021-0031
CVE: CVE-2021-45518
Published: 2021-12-26
Description: NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.
CVSS Score: 6.5 (MEDIUM)
References: https://kb.netgear.com/000064157/Security-Advisory-for-Denial-of-Service-on-XR1000-PSV-2021-0032; https://kb.netgear.com/000064157/Security-Advisory-for-Denial-of-Service-on-XR1000-PSV-2021-0032
CVE: CVE-2021-45519
Published: 2021-12-26
Description: NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.
CVSS Score: 6.5 (MEDIUM)
References: https://kb.netgear.com/000064158/Security-Advisory-for-Denial-of-Service-on-XR1000-PSV-2021-0033; https://kb.netgear.com/000064158/Security-Advisory-for-Denial-of-Service-on-XR1000-PSV-2021-0033
CVE: CVE-2021-45520
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-798
References: https://kb.netgear.com/000064151/Security-Advisory-for-Hardcoded-Password-on-Some-WiFi-Systems-PSV-2021-0012; https://kb.netgear.com/000064151/Security-Advisory-for-Hardcoded-Password-on-Some-WiFi-Systems-PSV-2021-0012
CVE: CVE-2021-45521
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10.
CVSS Score: 7.4 (HIGH)
CWE: CWE-798
References: https://kb.netgear.com/000064161/Security-Advisory-for-Hardcoded-Password-on-Some-WiFi-Systems-PSV-2021-0045; https://kb.netgear.com/000064161/Security-Advisory-for-Hardcoded-Password-on-Some-WiFi-Systems-PSV-2021-0045
CVE: CVE-2021-45522
Published: 2021-12-26
Description: NETGEAR XR1000 devices before 1.0.0.58 are affected by a hardcoded password.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-798
References: https://kb.netgear.com/000064155/Security-Advisory-for-Hardcoded-Password-on-XR1000-PSV-2021-0030; https://kb.netgear.com/000064155/Security-Advisory-for-Hardcoded-Password-on-XR1000-PSV-2021-0030
CVE: CVE-2021-45523
Published: 2021-12-26
Description: NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-120
References: https://kb.netgear.com/000064442/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-R7000-PSV-2018-0418; https://kb.netgear.com/000064442/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-R7000-PSV-2018-0418
CVE: CVE-2021-45524
Published: 2021-12-26
Description: NETGEAR R8000 devices before 1.0.4.62 are affected by a buffer overflow by an authenticated user.
CVSS Score: 7.6 (HIGH)
CWE: CWE-120
References: https://kb.netgear.com/000064123/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-R8000-PSV-2020-0315; https://kb.netgear.com/000064123/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-R8000-PSV-2020-0315
CVE: CVE-2021-45525
Published: 2021-12-26
Description: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX7000 before 1.0.1.80, R6400 before 1.0.1.50, R6400v2 before 1.0.4.118, R6700 before 1.0.2.8, R6700v3 before 1.0.4.118, R6900 before 1.0.2.8, R6900P before 1.3.2.124, R7000 before 1.0.9.88, R7000P before 1.3.2.124, R7900 before 1.0.3.18, R7900P before 1.4.1.50, R8000 before 1.0.4.46, R8000P before 1.4.1.50, RAX80 before 1.0.1.56, and WNR3500Lv2 before 1.2.0.62.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-120
References: https://kb.netgear.com/000064052/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Routers-and-Extenders-PSV-2018-0618; https://kb.netgear.com/000064052/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Routers-and-Extenders-PSV-2018-0618