R6400 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2020-04-22	CVE-2017-18755	Cross-Site Request Forgery (CSRF) vulnerability in Netgear products Certain NETGEAR devices are affected by CSRF. network low complexity netgear CWE-352	8.8
2020-04-22	CVE-2017-18767	Injection vulnerability in Netgear products Certain NETGEAR devices are affected by command injection by an authenticated user. low complexity netgear CWE-74	6.8
2020-04-22	CVE-2017-18765	Unspecified vulnerability in Netgear products Certain NETGEAR devices are affected by denial of service. low complexity netgear	6.5
2020-04-22	CVE-2017-18785	Cross-site Scripting vulnerability in Netgear products Certain NETGEAR devices are affected by XSS. network low complexity netgear CWE-79	4.8
2020-04-22	CVE-2017-18778	Improper Input Validation vulnerability in Netgear products Certain NETGEAR devices are affected by incorrect configuration of security settings. local low complexity netgear CWE-20	5.5
2020-04-22	CVE-2017-18777	Insufficiently Protected Credentials vulnerability in Netgear products Certain NETGEAR devices are affected by administrative password disclosure. local low complexity netgear CWE-522	7.8
2020-04-22	CVE-2017-18769	Information Exposure vulnerability in Netgear products Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. low complexity netgear CWE-200	4.6
2020-04-22	CVE-2017-18789	Information Exposure vulnerability in Netgear products Certain NETGEAR devices are affected by disclosure of sensitive information. local low complexity netgear CWE-200	5.5
2020-04-22	CVE-2017-18788	Injection vulnerability in Netgear products Certain NETGEAR devices are affected by command injection by an authenticated user. local low complexity netgear CWE-74	6.7
2020-04-21	CVE-2017-18797	Information Exposure vulnerability in Netgear products Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. local low complexity netgear CWE-200	6.2