deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-11780
Published: 2020-04-15
Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000061750/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2018-0528; https://kb.netgear.com/000061750/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2018-0528
CVE: CVE-2020-11781
Published: 2020-04-15
Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000061749/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0529; https://kb.netgear.com/000061749/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0529
CVE: CVE-2020-11782
Published: 2020-04-15
Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000061748/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2018-0530; https://kb.netgear.com/000061748/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2018-0530
CVE: CVE-2020-11783
Published: 2020-04-15
Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000061747/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2018-0531; https://kb.netgear.com/000061747/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2018-0531
CVE: CVE-2020-4268
Published: 2020-04-15
Description: IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-ForceID: 175841.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/175841; https://www.ibm.com/support/pages/node/6189639; https://exchange.xforce.ibmcloud.com/vulnerabilities/175841
CVE: CVE-2020-4269
Published: 2020-04-15
Description: IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-ForceID: 175845.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: http://packetstormsecurity.com/files/157328/QRadar-Community-Edition-7.3.1.6-Default-Credentials.html; http://seclists.org/fulldisclosure/2020/Apr/34; https://exchange.xforce.ibmcloud.com/vulnerabilities/175845
CVE: CVE-2020-4270
Published: 2020-04-15
Description: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions. IBM X-ForceID: 175846.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: http://packetstormsecurity.com/files/157335/QRadar-Community-Edition-7.3.1.6-Insecure-File-Permissions.html; http://seclists.org/fulldisclosure/2020/Apr/38; https://exchange.xforce.ibmcloud.com/vulnerabilities/175846
CVE: CVE-2020-4271
Published: 2020-04-15
Description: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user. IBM X-ForceID: 175897.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-502
References: http://packetstormsecurity.com/files/157336/QRadar-Community-Edition-7.3.1.6-PHP-Object-Injection.html; http://seclists.org/fulldisclosure/2020/Apr/39; https://exchange.xforce.ibmcloud.com/vulnerabilities/175897
CVE: CVE-2020-4272
Published: 2020-04-15
Description: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted request specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-ForceID: 175898.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-502
References: http://packetstormsecurity.com/files/157337/QRadar-Community-Edition-7.3.1.6-Arbitrary-Object-Instantiation.html; http://seclists.org/fulldisclosure/2020/Apr/40; https://exchange.xforce.ibmcloud.com/vulnerabilities/175898
CVE: CVE-2020-4274
Published: 2020-04-15
Description: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform unauthorized actions due to inadequate permission checks. IBM X-ForceID: 175980.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-276
References: http://packetstormsecurity.com/files/157338/QRadar-Community-Edition-7.3.1.6-Authorization-Bypass.html; http://seclists.org/fulldisclosure/2020/Apr/41; https://exchange.xforce.ibmcloud.com/vulnerabilities/175980
CVE: CVE-2020-4294
Published: 2020-04-15
Description: IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-ForceID: 176404.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: http://packetstormsecurity.com/files/157329/QRadar-Community-Edition-7.3.1.6-Server-Side-Request-Forgery.html; http://seclists.org/fulldisclosure/2020/Apr/35; https://exchange.xforce.ibmcloud.com/vulnerabilities/176404
CVE: CVE-2020-8948
Published: 2020-04-15
Description: The Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build 5043 allows an unprivileged user to overwrite arbitrary files in arbitrary folders using hard links. An unprivileged user could leverage this vulnerability to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://danishcyberdefence.dk/blog/sierra_wireless; https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---swi-psa-2020-002-cve-2020-8948/#sthash.ByZB8ifG.dpbs; https://danishcyberdefence.dk/blog/sierra_wireless
CVE: CVE-2019-19390
Published: 2020-04-15
Description: The Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2.2765 and below accepts unfiltered parameters that lead to multiple reflected XSS issues.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://seclists.org/fulldisclosure/2020/Apr/10; https://seclists.org/fulldisclosure/2020/Apr/10
CVE: CVE-2020-0547
Published: 2020-04-15
Description: Incorrect default permissions in the installer for Intel(R) Data Migration Software versions 3.3 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00327.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00327.html
CVE: CVE-2020-0557
Published: 2020-04-15
Description: Insecure inherited permissions in Intel(R) PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00338.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00338.html
CVE: CVE-2020-0558
Published: 2020-04-15
Description: Improper buffer restrictions in kernel mode driver for Intel(R) PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an unprivileged user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00338.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00338.html
CVE: CVE-2020-0568
Published: 2020-04-15
Description: Race condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00344.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00344.html
CVE: CVE-2020-0576
Published: 2020-04-15
Description: Buffer overflow in Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00351.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00351.html
CVE: CVE-2020-0577
Published: 2020-04-15
Description: Insufficient control flow for Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00351.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00351.html
CVE: CVE-2020-0578
Published: 2020-04-15
Description: Improper conditions check for Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00351.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00351.html
CVE: CVE-2020-0598
Published: 2020-04-15
Description: Uncontrolled search path in the installer for the Intel(R) Binary Configuration Tool for Windows, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00359.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00359.html
CVE: CVE-2020-0600
Published: 2020-04-15
Description: Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00363.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00363.html
CVE: CVE-2020-10637
Published: 2020-04-15
Description: Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could trigger an out-of-bounds read when loaded by the affected product.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.us-cert.gov/ics/advisories/icsa-20-105-01; https://www.us-cert.gov/ics/advisories/icsa-20-105-01
CVE: CVE-2020-10639
Published: 2020-04-15
Description: Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-120
References: https://www.us-cert.gov/ics/advisories/icsa-20-105-01; https://www.us-cert.gov/ics/advisories/icsa-20-105-01
CVE: CVE-2020-11784
Published: 2020-04-15
Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000061746/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0532; https://kb.netgear.com/000061746/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0532
CVE: CVE-2020-11785
Published: 2020-04-15
Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000061745/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0534; https://kb.netgear.com/000061745/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0534
CVE: CVE-2020-11786
Published: 2020-04-15
Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000061744/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0535; https://kb.netgear.com/000061744/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0535
CVE: CVE-2020-6992
Published: 2020-04-15
Description: A local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product v10.0 and prior. If exploited, this vulnerability could allow an adversary to modify the system, leading to the arbitrary execution of code. This vulnerability is only exploitable if an attacker has access to an authenticated session. GE Digital CIMPLICITY v11.0, released January 2020, contains mitigation for this local privilege escalation vulnerability. GE Digital recommends all users upgrade to GE CIMPLICITY v11.0 or newer.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-269, CWE-269
References: https://www.us-cert.gov/ics/advisories/icsa-20-098-02; https://www.us-cert.gov/ics/advisories/icsa-20-098-02
CVE: CVE-2019-20638
Published: 2020-04-15
Description: NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of administrative credentials.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://kb.netgear.com/000061506/Security-Advisory-for-Admin-Credential-Disclosure-on-MR1100-PSV-2019-0008; https://kb.netgear.com/000061506/Security-Advisory-for-Admin-Credential-Disclosure-on-MR1100-PSV-2019-0008
CVE: CVE-2019-20639
Published: 2020-04-15
Description: Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000061505/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-WiFi-Systems-PSV-2018-0543; https://kb.netgear.com/000061505/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-WiFi-Systems-PSV-2018-0543
CVE: CVE-2019-20640
Published: 2020-04-15
Description: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.32, D7000 before 1.0.1.68, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.38, R6050 before 1.0.1.18, R6080 before 1.0.0.38, R6120 before 1.0.0.46, R6220 before 1.1.0.80, R6260 before 1.1.0.40, R6700v2 before 1.2.0.36, R6800 before 1.2.0.36, R6900v2 before 1.2.0.36, WNR2020 before 1.1.0.62, and XR500 before 2.3.2.32.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://kb.netgear.com/000061504/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2018-0304; https://kb.netgear.com/000061504/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2018-0304
CVE: CVE-2019-20641
Published: 2020-04-15
Description: NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level.
CVSS Score: 8.8 (HIGH)
References: https://kb.netgear.com/000061501/Security-Advisory-for-Missing-Function-Level-Access-Control-on-RAX40-PSV-2019-0285; https://kb.netgear.com/000061501/Security-Advisory-for-Missing-Function-Level-Access-Control-on-RAX40-PSV-2019-0285
CVE: CVE-2019-20642
Published: 2020-04-15
Description: NETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass.
CVSS Score: 8.0 (HIGH)
References: https://kb.netgear.com/000061500/Security-Advisory-for-Authentication-Bypass-on-RAX40-PSV-2019-0266; https://kb.netgear.com/000061500/Security-Advisory-for-Authentication-Bypass-on-RAX40-PSV-2019-0266
CVE: CVE-2019-20643
Published: 2020-04-15
Description: NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information.
CVSS Score: 7.5 (HIGH)
References: https://kb.netgear.com/000061499/Security-Advisory-for-Sensitive-Information-Disclosure-on-RAX40-PSV-2019-0247; https://kb.netgear.com/000061499/Security-Advisory-for-Sensitive-Information-Disclosure-on-RAX40-PSV-2019-0247
CVE: CVE-2019-20644
Published: 2020-04-15
Description: NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000061498/Security-Advisory-for-Stored-Cross-Site-Scripting-on-RAX40-PSV-2019-0246; https://kb.netgear.com/000061498/Security-Advisory-for-Stored-Cross-Site-Scripting-on-RAX40-PSV-2019-0246
CVE: CVE-2019-20645
Published: 2020-04-15
Description: NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000061497/Security-Advisory-for-Stored-Cross-Site-Scripting-on-RAX40-PSV-2019-0243; https://kb.netgear.com/000061497/Security-Advisory-for-Stored-Cross-Site-Scripting-on-RAX40-PSV-2019-0243
CVE: CVE-2019-20646
Published: 2020-04-15
Description: NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://kb.netgear.com/000061496/Security-Advisory-for-Admin-Credential-Disclosure-on-RAX40-PSV-2019-0237; https://kb.netgear.com/000061496/Security-Advisory-for-Admin-Credential-Disclosure-on-RAX40-PSV-2019-0237
CVE: CVE-2019-20647
Published: 2020-04-15
Description: NETGEAR RAX40 devices before 1.0.3.64 are affected by denial of service.
CVSS Score: 5.7 (MEDIUM)
References: https://kb.netgear.com/000061495/Security-Advisory-for-Denial-of-Service-on-RAX40-PSV-2019-0210; https://kb.netgear.com/000061495/Security-Advisory-for-Denial-of-Service-on-RAX40-PSV-2019-0210
CVE: CVE-2019-20648
Published: 2020-04-15
Description: NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings.
CVSS Score: 3.5 (LOW)
References: https://kb.netgear.com/000061494/Security-Advisory-for-Security-Misconfiguration-on-RN42400-PSV-2019-0205; https://kb.netgear.com/000061494/Security-Advisory-for-Security-Misconfiguration-on-RN42400-PSV-2019-0205
CVE: CVE-2019-20649
Published: 2020-04-15
Description: NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of sensitive information.
CVSS Score: 7.5 (HIGH)
References: https://kb.netgear.com/000061493/Security-Advisory-for-Sensitive-Information-Disclosure-on-MR1100-PSV-2019-0204; https://kb.netgear.com/000061493/Security-Advisory-for-Sensitive-Information-Disclosure-on-MR1100-PSV-2019-0204
CVE: CVE-2019-20650
Published: 2020-04-15
Description: Certain NETGEAR devices are affected by denial of service. This affects R8900 before 1.0.5.2, R9000 before 1.0.5.2, XR500 before 2.3.2.56, and XR700 before 1.0.1.20.
CVSS Score: 7.5 (HIGH)
References: https://kb.netgear.com/000061492/Security-Advisory-for-Denial-of-Service-on-Some-Routers-PSV-2019-0197; https://kb.netgear.com/000061492/Security-Advisory-for-Denial-of-Service-on-Some-Routers-PSV-2019-0197
CVE: CVE-2020-11787
Published: 2020-04-15
Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK40 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000061743/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0553; https://kb.netgear.com/000061743/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0553
CVE: CVE-2020-11788
Published: 2020-04-15
Description: Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.34, D7000 before 1.0.1.68, PR2000 before 1.0.0.28, R6050 before 1.0.1.18, JR6150 before 1.0.1.18, R6120 before 1.0.0.46, R6220 before 1.1.0.80, R6230 before 1.1.0.80, R6260 before 1.1.0.64, R6700v2 before 1.2.0.36, R6800 before 1.2.0.36, and R6900v2 before 1.2.0.36.
CVSS Score: 8.8 (HIGH)
References: https://kb.netgear.com/000061742/Security-Advisory-for-Authentication-Bypass-on-Some-Gateways-and-Routers-PSV-2018-0570; https://kb.netgear.com/000061742/Security-Advisory-for-Authentication-Bypass-on-Some-Gateways-and-Routers-PSV-2018-0570
CVE: CVE-2020-11789
Published: 2020-04-15
Description: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700 before 1.0.2.8, R6700v3 before 1.0.4.84, R6900 before 1.0.2.8, and R7900 before 1.0.3.10.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://kb.netgear.com/000061741/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-PSV-2019-0051; https://kb.netgear.com/000061741/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-PSV-2019-0051
CVE: CVE-2020-11790
Published: 2020-04-15
Description: NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers.
CVSS Score: 9.8 (CRITICAL)
References: https://kb.netgear.com/000061740/Security-Advisory-for-Unauthenticated-Remote-Code-Execution-on-R7800-PSV-2019-0076; https://kb.netgear.com/000061740/Security-Advisory-for-Unauthenticated-Remote-Code-Execution-on-R7800-PSV-2019-0076
CVE: CVE-2020-11791
Published: 2020-04-15
Description: NETGEAR JGS516PE devices before 2.6.0.43 are affected by reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000061739/Security-Advisory-for-Reflected-Cross-Site-Scripting-on-JGS516PE-PSV-2019-0194; https://kb.netgear.com/000061739/Security-Advisory-for-Reflected-Cross-Site-Scripting-on-JGS516PE-PSV-2019-0194