Vulnerabilities > Netgear > R6900 Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-04-27 CVE-2018-21157 OS Command Injection vulnerability in Netgear products
Certain NETGEAR devices are affected by command injection by an authenticated user.
low complexity
netgear CWE-78
6.8
2020-04-24 CVE-2018-21231 Unspecified vulnerability in Netgear products
Certain NETGEAR devices are affected by incorrect configuration of security settings.
low complexity
netgear
5.4
2020-04-24 CVE-2018-21230 Unspecified vulnerability in Netgear products
Certain NETGEAR devices are affected by incorrect configuration of security settings.
low complexity
netgear
5.4
2020-04-24 CVE-2018-21227 Injection vulnerability in Netgear products
Certain NETGEAR devices are affected by command injection by an authenticated user.
low complexity
netgear CWE-74
6.8
2020-04-24 CVE-2017-18704 Information Exposure vulnerability in Netgear products
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files.
low complexity
netgear CWE-200
6.5
2020-04-24 CVE-2017-18701 Cross-site Scripting vulnerability in Netgear R6700 Firmware and R6900 Firmware
Certain NETGEAR devices are affected by reflected XSS.
network
low complexity
netgear CWE-79
6.1
2020-04-24 CVE-2017-18700 Cross-site Scripting vulnerability in Netgear products
Certain NETGEAR devices are affected by stored XSS.
network
low complexity
netgear CWE-79
6.1
2020-04-24 CVE-2017-18713 Information Exposure vulnerability in Netgear products
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files.
low complexity
netgear CWE-200
6.5
2020-04-23 CVE-2017-18745 Cross-site Scripting vulnerability in Netgear products
Certain NETGEAR devices are affected by stored XSS.
network
low complexity
netgear CWE-79
6.1
2020-04-22 CVE-2017-18752 Information Exposure vulnerability in Netgear products
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files.
low complexity
netgear CWE-200
6.5