Wnr1000 Firmware (Netgear) - vulnerabilities (CVEs)

36 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2020-04-28. Vendor: Netgear.

CVEs of Wnr1000 Firmware

CVE-2018-21226 - CVSS 8.8 (high), 2020-04-28: Certain NETGEAR devices are affected by authentication bypass. This affects JNR1010v2 before 1.1.0.48, JWNR2010v5 before 1.1.0.48, WNR1000v4 before 1.1.0.48,…
CVE-2016-11059 - CVSS 7.5 (high), 2020-04-28: Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 before 2017-01-06, D1500…
CVE-2016-11057 - CVSS 7.5 (high), 2020-04-28: Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618 before…
CVE-2018-21209 - CVSS 4.8 (medium), 2020-04-28: Certain NETGEAR devices are affected by reflected XSS. This affects JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.46, PR2000…
CVE-2018-21169 - CVSS 8.8 (high), 2020-04-27: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7000 before 2018-03-01, D7800 before 1.0.1.31, D8500…
CVE-2018-21168 - CVSS 7.5 (high), 2020-04-27: Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D7000 before 1.0.1.52, D7800 before 1.0.1.31, D8500 before 1.0.3.36,…
CVE-2018-21231 - CVSS 5.4 (medium), 2020-04-24: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before…
CVE-2018-21230 - CVSS 5.4 (medium), 2020-04-24: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before…
CVE-2017-18703 - CVSS 8.8 (high), 2020-04-24: Certain NETGEAR devices are affected by CSRF. This affects D1500 before 1.0.0.25, D500 before 1.0.0.25, D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800…
CVE-2018-21139 - CVSS 7.5 (high), 2020-04-23: Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.58,…
CVE-2017-18737 - CVSS 8.8 (high), 2020-04-23: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10,…
CVE-2017-18734 - CVSS 8.8 (high), 2020-04-23: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10,…
CVE-2017-18749 - CVSS 8.8 (high), 2020-04-23: Certain NETGEAR devices are affected by CSRF. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44, R6050 before…
CVE-2017-18764 - CVSS 8.8 (high), 2020-04-22: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800…
CVE-2017-18763 - CVSS 8.8 (high), 2020-04-22: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JNR1010v2 before 1.1.0.42, JR6150 before 1.0.1.10,…
CVE-2017-18786 - CVSS 8.4 (high), 2020-04-22: Certain NETGEAR devices are affected by command injection. This affects D6200 before 1.1.00.24, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JWNR2010v5…
CVE-2017-18787 - CVSS 8.4 (high), 2020-04-22: Certain NETGEAR devices are affected by command injection. This affects D6200 before 1.1.00.24, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JWNR2010v5…
CVE-2017-18780 - CVSS 6.2 (medium), 2020-04-22: Certain NETGEAR devices are affected by denial of service. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JR6150…
CVE-2017-18783 - CVSS 6.1 (medium), 2020-04-22: Certain NETGEAR devices are affected by XSS. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12,…
CVE-2017-18779 - CVSS 8.4 (high), 2020-04-22: Certain NETGEAR devices are affected by a buffer overflow. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JR6150…
CVE-2017-18782 - CVSS 8.8 (high), 2020-04-22: Certain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JR6150 before 1.0.1.12, JNR1010v2 before 1.1.0.44,…
CVE-2017-18785 - CVSS 4.8 (medium), 2020-04-22: Certain NETGEAR devices are affected by XSS. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, D6200 before 1.1.00.24, D6220…
CVE-2017-18778 - CVSS 8.4 (high), 2020-04-22: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6220 before 1.0.0.28, D6400 before 1.0.0.60, D7000 before…
CVE-2017-18781 - CVSS 8.8 (high), 2020-04-22: Certain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JWNR2010v5 before…
CVE-2017-18784 - CVSS 6.1 (medium), 2020-04-22: Certain NETGEAR devices are affected by XSS. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JWNR2010v5 before…
CVE-2017-18776 - CVSS 8.4 (high), 2020-04-22: Certain NETGEAR devices are affected by authentication bypass. This affects D6100 before V1.0.0.55, D7000 before V1.0.1.50, D7800 before V1.0.1.24, JNR1010v2…
CVE-2017-18788 - CVSS 6.7 (medium), 2020-04-22: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before…
CVE-2017-18791 - CVSS 8.8 (high), 2020-04-21: Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 before 1.1.0.50, WNDR3700v5 before…
CVE-2019-20738 - CVSS 5.4 (medium), 2020-04-16: Certain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.58, D7800 before 1.0.1.34, JNR1010v2 before 1.1.0.50, JWNR2010v5 before…
CVE-2019-20486 - CVSS 6.1 (medium), 2020-03-02: An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple pages (setup.cgi and adv_index.htm) within the web management console are vulnerable…
CVE-2019-20489 - CVSS 9.8 (critical), 2020-03-02: An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. The web management interface (setup.cgi) has an authentication bypass and other problems that…
CVE-2019-20488 - CVSS 9.8 (critical), 2020-03-02: An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the web management interface (setup.cgi) are vulnerable to command…
CVE-2019-20487 - CVSS 8.8 (high), 2020-03-02: An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the WNR1000V4 web management console are vulnerable to an…
CVE-2013-3317 - CVSS 9.8 (critical), 2020-01-29: Netgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass via the NtgrBak key.
CVE-2013-3316 - CVSS 9.8 (critical), 2020-01-29: Netgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass due to the server skipping checks for URLs containing a ".jpg".
CVE-2019-17372 - CVSS 8.1 (high), 2019-10-09: Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for…