D3600 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2020-04-22	CVE-2018-21111	Out-of-bounds Write vulnerability in Netgear products Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. low complexity netgear CWE-787	6.8
2020-04-22	CVE-2017-18785	Cross-site Scripting vulnerability in Netgear products Certain NETGEAR devices are affected by XSS. network low complexity netgear CWE-79	4.8
2020-04-22	CVE-2017-18788	Injection vulnerability in Netgear products Certain NETGEAR devices are affected by command injection by an authenticated user. local low complexity netgear CWE-74	6.7
2020-04-21	CVE-2018-21140	Improper Input Validation vulnerability in Netgear D3600 Firmware and D6000 Firmware Certain NETGEAR devices are affected by incorrect configuration of security settings. low complexity netgear CWE-20	6.5
2020-04-16	CVE-2019-20752	Cross-site Scripting vulnerability in Netgear products Certain NETGEAR devices are affected by stored XSS. network low complexity netgear CWE-79	4.8
2020-04-16	CVE-2019-20746	Cross-site Scripting vulnerability in Netgear products Certain NETGEAR devices are affected by reflected XSS. network low complexity netgear CWE-79	4.8
2020-04-16	CVE-2019-20735	Out-of-bounds Write vulnerability in Netgear products Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. low complexity netgear CWE-787	6.8
2020-04-16	CVE-2019-20730	SQL Injection vulnerability in Netgear products Certain NETGEAR devices are affected by SQL injection. network low complexity netgear CWE-89 critical	9.8
2020-04-16	CVE-2019-20726	Command Injection vulnerability in Netgear products Certain NETGEAR devices are affected by command injection by an authenticated user. low complexity netgear CWE-77	6.8
2020-04-16	CVE-2019-20725	Out-of-bounds Write vulnerability in Netgear products Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. low complexity netgear CWE-787	6.8