Xr500 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2020-10-09	CVE-2020-26915	Cross-site Scripting vulnerability in Netgear products Certain NETGEAR devices are affected by stored XSS. network low complexity netgear CWE-79	4.8
2020-10-09	CVE-2020-26913	Out-of-bounds Write vulnerability in Netgear products Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. low complexity netgear CWE-787	6.8
2020-05-28	CVE-2020-13245	Improper Certificate Validation vulnerability in Netgear products Certain NETGEAR devices are affected by Missing SSL Certificate Validation. network high complexity netgear CWE-295	5.9
2020-04-22	CVE-2018-21118	Improper Authentication vulnerability in Netgear Xr500 Firmware 2.3.2.22 NETGEAR XR500 devices before 2.3.2.32 are affected by authentication bypass. low complexity netgear CWE-287	8.8
2020-04-22	CVE-2018-21117	Unspecified vulnerability in Netgear Xr500 Firmware 2.3.2.22 NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler. low complexity netgear	8.8
2020-04-22	CVE-2018-21116	Unspecified vulnerability in Netgear Xr500 Firmware 2.3.2.22 NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers. low complexity netgear	8.8
2020-04-22	CVE-2018-21115	Improper Input Validation vulnerability in Netgear Xr500 Firmware 2.3.2.22 NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers. low complexity netgear CWE-20	8.8
2020-04-16	CVE-2019-20736	Out-of-bounds Write vulnerability in Netgear products Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. low complexity netgear CWE-787	6.8
2020-04-16	CVE-2019-20735	Out-of-bounds Write vulnerability in Netgear products Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. low complexity netgear CWE-787	6.8
2020-04-16	CVE-2019-20727	Command Injection vulnerability in Netgear products Certain NETGEAR devices are affected by command injection by an authenticated user. low complexity netgear CWE-77	6.8