CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
Nighthawk_x10-r9000_firmware, Nighthawk_x10-r9000, Cg3700b_firmware, Cg3700b, Wndr3400v3_firmware, Wndr3400v3, Mr1100_firmware, Mr1100, Srx5308_firmware, Srx5308
2020-05-04
N/A
9.8 CRITICAL
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, and WND930 before 2.1.5.
Nighthawk_x10-r9000_firmware, Nighthawk_x10-r9000, Cg3700b_firmware, Cg3700b, Wndr3400v3_firmware, Wndr3400v3, Mr1100_firmware, Mr1100, Srx5308_firmware, Srx5308
2020-05-04
N/A
7.4 HIGH
Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.
Nighthawk_x10-r9000_firmware, Nighthawk_x10-r9000, Cg3700b_firmware, Cg3700b, Wndr3400v3_firmware, Wndr3400v3, Mr1100_firmware, Mr1100, Srx5308_firmware, Srx5308
2020-04-27
N/A
4.3 MEDIUM
Certain NETGEAR devices are affected by stored XSS. This affects SRR60 before 2.2.1.210 and SRS60 before 2.2.1.210.
Nighthawk_x10-r9000_firmware, Nighthawk_x10-r9000, Cg3700b_firmware, Cg3700b, Wndr3400v3_firmware, Wndr3400v3, Mr1100_firmware, Mr1100, Srx5308_firmware, Srx5308
2020-05-04
N/A
7.3 HIGH
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.
Nighthawk_x10-r9000_firmware, Nighthawk_x10-r9000, Cg3700b_firmware, Cg3700b, Wndr3400v3_firmware, Wndr3400v3, Mr1100_firmware, Mr1100, Srx5308_firmware, Srx5308
2020-05-04
N/A
8.8 HIGH
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D8500 before 1.0.3.42, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, EX6000 before 1.0.0.30, EX6100 before 1.0.2.24, EX6120 before 1.0.0.40, EX6130 before 1.0.0.22, EX6150 before 1.0.0.42, EX6200 before 1.0.3.88, EX7000 before 1.0.0.66, R6250 before 1.0.4.26, R6300-2CXNAS before 1.0.3.60, R6300v2 before 1.0.4.28, R6400 before 1.0.1.36, R6400v2 before 1.0.2.52, R6700 before 1.0.1.46, R6900 before 1.0.1.46, R7000 before 1.0.9.28, R7000P before 1.3.1.44, R6900P before 1.3.1.44, R7100LG before 1.0.0.46, R7300 before 1.0.0.68, R7900 before 1.0.2.10, R8000 before 1.0.4.18, R8000P before 1.3.0.10, R7900P before 1.3.0.10, R8500 before 1.0.2.122, R8300 before 1.0.2.122, RBW30 before 2.1.2.6, WN2500RPv2 before 1.0.0.54, and WNR3500Lv2 before 1.2.0.56.
An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. A crafted AT command may be sent by the DeviceTest application via an NFC tag. The Samsung ID is SVE-2017-10885 (January 2018).
An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. Telecom has a System Crash via abnormal exception handling. The Samsung ID is SVE-2017-10906 (January 2018).
An issue was discovered on Samsung mobile devices with software through 2017-11-03 (S.LSI modem chipsets). The Exynos modem chipset has a baseband buffer overflow. The Samsung ID is SVE-2017-10745 (January 2018).
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.