Wnr2020 Firmware (Netgear) - vulnerabilities (CVEs)

56 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2021-12-26. Vendor: Netgear.

CVEs of Wnr2020 Firmware

CVE-2021-45657 - CVSS 7.8 (high), 2021-12-26: Certain NETGEAR devices are affected by server-side injection. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, R6020 before 1.0.0.48, R6080 before…
CVE-2021-45641 - CVSS 8.8 (high), 2021-12-26: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before…
CVE-2021-45640 - CVSS 7.2 (high), 2021-12-26: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before…
CVE-2021-45551 - CVSS 8.8 (high), 2021-12-26: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before…
CVE-2021-38534 - CVSS 4.8 (medium), 2021-08-11: Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6100 before 1.0.0.60, D6200 before 1.1.00.36,…
CVE-2021-38514 - CVSS 2.7 (low), 2021-08-11: Certain NETGEAR devices are affected by authentication bypass. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6100 before 1.0.0.63, D6200 before…
CVE-2020-35842 - CVSS 6.9 (medium), 2020-12-30: Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before…
CVE-2020-35841 - CVSS 7.6 (high), 2020-12-30: Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before…
CVE-2020-35840 - CVSS 6.9 (medium), 2020-12-30: Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before…
CVE-2020-35799 - CVSS 9.8 (critical), 2020-12-30: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before…
CVE-2020-17409 - CVSS 6.5 (medium), 2020-10-13: This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020,…
CVE-2020-26927 - CVSS 9.8 (critical), 2020-10-09: Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.42, R6080 before…
CVE-2020-26916 - CVSS 6.3 (medium), 2020-10-09: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150…
CVE-2020-26914 - CVSS 7.1 (high), 2020-10-09: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150 before…
CVE-2020-26908 - CVSS 9.8 (critical), 2020-10-09: Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 before 1.0.0.30, R6020…
CVE-2020-26912 - CVSS 8.8 (high), 2020-10-09: Certain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150 before 1.0.1.24, R6020 before 1.0.0.42, R6050…
CVE-2020-26911 - CVSS 8.8 (high), 2020-10-09: Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150…
CVE-2018-21226 - CVSS 8.8 (high), 2020-04-28: Certain NETGEAR devices are affected by authentication bypass. This affects JNR1010v2 before 1.1.0.48, JWNR2010v5 before 1.1.0.48, WNR1000v4 before 1.1.0.48,…
CVE-2016-11057 - CVSS 7.5 (high), 2020-04-28: Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618 before…
CVE-2018-21209 - CVSS 4.8 (medium), 2020-04-28: Certain NETGEAR devices are affected by reflected XSS. This affects JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.46, PR2000…
CVE-2018-21169 - CVSS 8.8 (high), 2020-04-27: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7000 before 2018-03-01, D7800 before 1.0.1.31, D8500…
CVE-2018-21168 - CVSS 7.5 (high), 2020-04-27: Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D7000 before 1.0.1.52, D7800 before 1.0.1.31, D8500 before 1.0.3.36,…
CVE-2018-21231 - CVSS 5.4 (medium), 2020-04-24: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before…
CVE-2018-21230 - CVSS 5.4 (medium), 2020-04-24: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before…
CVE-2017-18703 - CVSS 8.8 (high), 2020-04-24: Certain NETGEAR devices are affected by CSRF. This affects D1500 before 1.0.0.25, D500 before 1.0.0.25, D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800…
CVE-2018-21139 - CVSS 7.5 (high), 2020-04-23: Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.58,…
CVE-2017-18737 - CVSS 8.8 (high), 2020-04-23: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10,…
CVE-2017-18734 - CVSS 8.8 (high), 2020-04-23: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10,…
CVE-2017-18749 - CVSS 8.8 (high), 2020-04-23: Certain NETGEAR devices are affected by CSRF. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44, R6050 before…
CVE-2017-18764 - CVSS 8.8 (high), 2020-04-22: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800…
CVE-2017-18763 - CVSS 8.8 (high), 2020-04-22: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JNR1010v2 before 1.1.0.42, JR6150 before 1.0.1.10,…
CVE-2017-18786 - CVSS 8.4 (high), 2020-04-22: Certain NETGEAR devices are affected by command injection. This affects D6200 before 1.1.00.24, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JWNR2010v5…
CVE-2017-18787 - CVSS 8.4 (high), 2020-04-22: Certain NETGEAR devices are affected by command injection. This affects D6200 before 1.1.00.24, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JWNR2010v5…
CVE-2017-18776 - CVSS 8.4 (high), 2020-04-22: Certain NETGEAR devices are affected by authentication bypass. This affects D6100 before V1.0.0.55, D7000 before V1.0.1.50, D7800 before V1.0.1.24, JNR1010v2…
CVE-2017-18780 - CVSS 6.2 (medium), 2020-04-22: Certain NETGEAR devices are affected by denial of service. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JR6150…
CVE-2017-18783 - CVSS 6.1 (medium), 2020-04-22: Certain NETGEAR devices are affected by XSS. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12,…
CVE-2017-18779 - CVSS 8.4 (high), 2020-04-22: Certain NETGEAR devices are affected by a buffer overflow. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JR6150…
CVE-2017-18782 - CVSS 8.8 (high), 2020-04-22: Certain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JR6150 before 1.0.1.12, JNR1010v2 before 1.1.0.44,…
CVE-2017-18785 - CVSS 4.8 (medium), 2020-04-22: Certain NETGEAR devices are affected by XSS. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, D6200 before 1.1.00.24, D6220…
CVE-2017-18778 - CVSS 8.4 (high), 2020-04-22: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6220 before 1.0.0.28, D6400 before 1.0.0.60, D7000 before…
CVE-2017-18781 - CVSS 8.8 (high), 2020-04-22: Certain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JWNR2010v5 before…
CVE-2017-18784 - CVSS 6.1 (medium), 2020-04-22: Certain NETGEAR devices are affected by XSS. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JWNR2010v5 before…
CVE-2017-18788 - CVSS 6.7 (medium), 2020-04-22: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before…
CVE-2017-18791 - CVSS 8.8 (high), 2020-04-21: Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 before 1.1.0.50, WNDR3700v5 before…
CVE-2019-20738 - CVSS 5.4 (medium), 2020-04-16: Certain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.58, D7800 before 1.0.1.34, JNR1010v2 before 1.1.0.50, JWNR2010v5 before…
CVE-2019-20685 - CVSS 8.8 (high), 2020-04-16: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.75, D6000 before…
CVE-2019-20690 - CVSS 8.8 (high), 2020-04-16: Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.30, D7000 before 1.0.1.66, R6020 before 1.0.0.34, R6080 before…
CVE-2019-20684 - CVSS 8.8 (high), 2020-04-16: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.75, D6000 before…
CVE-2019-20687 - CVSS 7.5 (high), 2020-04-16: Certain NETGEAR devices are affected by denial of service. This affects D6200 before 1.1.00.34, D7000 before 1.0.1.70, JR6150 before 1.0.1.18, R6050 before…
CVE-2019-20686 - CVSS 8.8 (high), 2020-04-16: Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, JR6150…
CVE-2019-20682 - CVSS 8.8 (high), 2020-04-16: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before…
CVE-2019-20683 - CVSS 8.8 (high), 2020-04-16: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before…
CVE-2019-20657 - CVSS 8 (high), 2020-04-15: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 before…
CVE-2019-20656 - CVSS 8.8 (high), 2020-04-15: Certain NETGEAR devices are affected by a hardcoded password. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 before 1.0.0.30, R6020 before…
CVE-2019-20640 - CVSS 8.8 (high), 2020-04-15: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before…
CVE-2016-10174 - CVSS 9.8 (critical), 2017-01-30: The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer…