Dc112A Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2021-08-11	CVE-2021-38534	Cross-site Scripting vulnerability in Netgear products Certain NETGEAR devices are affected by stored XSS. network low complexity netgear CWE-79	4.8
2021-08-11	CVE-2021-38514	Unspecified vulnerability in Netgear products Certain NETGEAR devices are affected by authentication bypass. network low complexity netgear	2.7
2021-08-11	CVE-2021-38516	Unspecified vulnerability in Netgear products Certain NETGEAR devices are affected by lack of access control at the function level. network low complexity netgear critical	9.8
2021-03-29	CVE-2021-27239	Stack-based Buffer Overflow vulnerability in Netgear products This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers. low complexity netgear CWE-121	8.8
2020-12-30	CVE-2020-35800	Unspecified vulnerability in Netgear products Certain NETGEAR devices are affected by incorrect configuration of security settings. network low complexity netgear critical	9.4
2020-12-30	CVE-2020-35796	Classic Buffer Overflow vulnerability in Netgear products Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. network low complexity netgear CWE-120 critical	9.8
2020-04-23	CVE-2018-21139	Information Exposure vulnerability in Netgear products Certain NETGEAR devices are affected by disclosure of sensitive information. network low complexity netgear CWE-200	7.5
2020-04-16	CVE-2019-20730	SQL Injection vulnerability in Netgear products Certain NETGEAR devices are affected by SQL injection. network low complexity netgear CWE-89 critical	9.8
2019-10-09	CVE-2019-17372	Improper Authentication vulnerability in Netgear products Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. network high complexity netgear CWE-287	8.1