Skip to content
OpenAdvisories

Description

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Affected products

VendorProductAffectedFixed
NETGEAR EX3700 < V1.0.0.100 V1.0.0.100
NETGEAR EX3800 < V1.0.0.100 V1.0.0.100
NETGEAR EX6120 < V1.0.0.72 V1.0.0.72
NETGEAR EX6130 < V1.0.0.54 V1.0.0.54
NETGEAR MR60 < V1.1.7.132 V1.1.7.132
NETGEAR MR70 < V1.0.3.28 V1.0.3.28
NETGEAR MR80 < V1.1.7.14 V1.1.7.14
NETGEAR MS60 < V1.1.7.132 V1.1.7.132
NETGEAR MS70 < V1.0.3.28 V1.0.3.28
NETGEAR MS80 < V1.1.7.14 V1.1.7.14
NETGEAR R6400v2 < V1.0.4.128 V1.0.4.128
NETGEAR R6700v3 < V1.0.4.128 V1.0.4.128
NETGEAR R6900P < V1.3.3.152 V1.3.3.152
NETGEAR R7000 < V1.0.11.216 V1.0.11.216
NETGEAR R7000P < V1.3.3.152 V1.3.3.152
NETGEAR R7960P < V1.4.4.92 V1.4.4.92
NETGEAR R8000P < V1.4.4.92 V1.4.4.92
NETGEAR R8500 ≤ 1.0.2.160 —
NETGEAR RAX20 < V1.0.18.144 V1.0.18.144
NETGEAR RAX35v2 < V1.0.12.118 V1.0.12.118
NETGEAR RAX40v2 < V1.0.12.118 V1.0.12.118
NETGEAR RAX41 < V1.0.12.118 V1.0.12.118
NETGEAR RAX42 < V1.0.12.118 V1.0.12.118
NETGEAR RAX43 < V1.0.12.120 V1.0.12.120
NETGEAR RAX45 < V1.0.12.118 V1.0.12.118
NETGEAR RAX48 < V1.0.12.118 V1.0.12.118
NETGEAR RAX50 < V1.0.12.120 V1.0.12.120
NETGEAR RAX50S < V1.0.12.120 V1.0.12.120
NETGEAR RAXE450 < V1.0.10.86 V1.0.10.86
NETGEAR RAXE500 < V1.0.10.86 V1.0.10.86
NETGEAR XR1000 < V1.0.0.68 V1.0.0.68

References