Vulnerabilities > Netgear > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-03-10 CVE-2020-35225 Classic Buffer Overflow vulnerability in Netgear Gs116E Firmware and Jgs516Pe Firmware
The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was not properly validating the length of string parameters sent in write requests, potentially allowing denial of service attacks.
low complexity
netgear CWE-120
6.8
2021-03-10 CVE-2020-35224 Classic Buffer Overflow vulnerability in Netgear Gs116E Firmware and Jgs516Pe Firmware
A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote unauthenticated attackers to force a device reboot.
low complexity
netgear CWE-120
6.5
2021-03-05 CVE-2021-27257 Unspecified vulnerability in Netgear products
This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware version 1.0.2.76.
low complexity
netgear
6.5
2021-02-12 CVE-2020-27867 Unspecified vulnerability in Netgear products
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers.
low complexity
netgear
6.8
2021-02-04 CVE-2020-27873 Incorrect Authorization vulnerability in Netgear products
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers.
low complexity
netgear CWE-863
6.5
2020-12-30 CVE-2020-35842 Cross-site Scripting vulnerability in Netgear products
Certain NETGEAR devices are affected by stored XSS.
network
low complexity
netgear CWE-79
5.4
2020-12-30 CVE-2020-35840 Cross-site Scripting vulnerability in Netgear products
Certain NETGEAR devices are affected by stored XSS.
network
low complexity
netgear CWE-79
5.4
2020-12-30 CVE-2020-35838 Cross-site Scripting vulnerability in Netgear products
Certain NETGEAR devices are affected by stored XSS.
network
low complexity
netgear CWE-79
4.8
2020-12-30 CVE-2020-35837 Cross-site Scripting vulnerability in Netgear products
Certain NETGEAR devices are affected by stored XSS.
network
low complexity
netgear CWE-79
4.8
2020-12-30 CVE-2020-35836 Cross-site Scripting vulnerability in Netgear products
Certain NETGEAR devices are affected by stored XSS.
network
low complexity
netgear CWE-79
4.8