Nighthawk X10-r9000 Firmware (Netgear) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2020-02-24. Vendor: Netgear.

CVEs of Nighthawk X10-r9000 Firmware

• CVE-2019-12513 - CVSS 6.1 (medium), 2020-02-24: In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, by sending a DHCP discover request containing a malicious hostname field, an attacker may execute stored XSS…
• CVE-2019-12512 - CVSS 6.1 (medium), 2020-02-24: In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, an attacker may execute stored XSS attacks against this device by supplying a malicious X-Forwarded-For…
• CVE-2019-12511 - CVSS 9.8 (critical), 2020-02-24: In NETGEAR Nighthawk X10-R9000 prior to 1.0.4.26, an attacker may execute arbitrary system commands as root by sending a specially-crafted MAC address to the…
• CVE-2019-12510 - CVSS 9.1 (critical), 2020-02-24: In NETGEAR Nighthawk X10-R900 prior to 1.0.4.26, an attacker may bypass all authentication checks on the device's "NETGEAR Genie" SOAP API ("/soap/server_sa")…