Gs110tup Firmware (Netgear) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2021-12-26. Vendor: Netgear.

CVEs of Gs110tup Firmware

• CVE-2021-45557 - CVSS 8.8 (high), 2021-12-26: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3…
• CVE-2021-41314 - CVSS 8.8 (high), 2021-09-16: Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several faulty aspects of the authentication…
• CVE-2021-40867 - CVSS 7.8 (high), 2021-09-13: Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenticated attacker who uses the same…
• CVE-2021-40866 - CVSS 9.8 (critical), 2021-09-13: Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (disabled by default) /sqfs/bin/sccd…
• CVE-2021-33514 - CVSS 9.8 (critical), 2021-05-21: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/libsal.so.0.0 library used by a CGI…