Skip to content
OpenAdvisories

Vendor

NETGEAR

219 known vulnerabilities.

25 results · Clear filters · Feed

  • Low 3.5

    Insufficient input validation vulnerability exists in certain NETGEAR RAX Models

    An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A …

  • Low 1.9

    Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers

    A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.

  • Low 1.9

    Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models

    A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.

  • Low 1.1

    Device administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.

    A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.

  • Low 1.1

    Buffer overflow vulnerability in some NETGEAR Nighthawk routers

    A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.

  • Low 1.9

    Insufficient input validation in certain NETGEAR routers

    Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

  • Low 1.1

    Insufficient input validation in NETGEAR Orbi routers

    An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.

  • Low 2.4

    Improper input validation in NETGEAR Nighthawk router R7000P

    An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router…

  • Low 0.5

    Credentials recorded in logs in NETGEAR WAX610 and WAX610Y

    Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y (AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access Points). An user having access to the syslog server can read the logs containing …

  • Low 2.7

    Netgear DG834Gv5 Web Management Interface cleartext storage

    A vulnerability classified as problematic was found in Netgear DG834Gv5 1.6.01.34. This vulnerability affects unknown code of the component Web Management Interface. The manipulation leads to cleartext storage of sensitive information. The attack can be initi…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation of the argument wanName leads to cross site scriptin…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file scgi-bin/platform.cgi?page=dmz_setup.htm of the component Web Management Interface. The man…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. Affected is an unknown function of the file scgi-bin/platform.cgi?page=time_zone.htm of the component Web Management Interface. The manipulation of the argument…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=time_zone.htm of the component Web Management Interface. The manipulation of the argume…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability has been found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This vulnerability affects unknown code of the file scgi-bin/platform.cgi?page=time_zone.htm of the component Web Management Interface. The manipulation of the argu…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipulation of the ar…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability, which was classified as problematic, has been found in Netgear SRX5308 up to 4.3.5-3. Affected by this issue is some unknown functionality of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interfac…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. Affected by this vulnerability is an unknown functionality of the file scgi-bin/platform.cgi?page=dmz_setup.htm of the component Web Management Interface. The manipulation o…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. Affected is an unknown function of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipulation of the argume…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=ike_policies.htm of the component Web Management Interface. The manipulation of the…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as problematic. This vulnerability affects unknown code of the file scgi-bin/platform.cgi?page=dmz_setup.htm of the component Web Management Interface. The manipulation of the ar…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. This affects an unknown part of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipulation of the a…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. Affected by this issue is some unknown functionality of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipu…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability has been found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file scgi-bin/platform.cgi?page=bandwidth_profile.htm of the component Web Management Interface. T…

  • Low 2.7

    Netgear WNDR3700v2 Web Interface denial of service

    A vulnerability was found in Netgear WNDR3700v2 1.0.1.14 and classified as problematic. This issue affects some unknown processing of the component Web Interface. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit h…