Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618 before 2017-01-06, JWNR2000v5 before 2017-01-06, WNR2020 before 2017-01-06, JWNR2010v5 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2020v2 before 2017-01-06, R6220 before 2017-01-06, and WNDR3700v5 before 2017-01-06.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NNetgear Jnr1010
HWNetgearv2Netgear Jnr1010 Firmware
OSNetgear< 2017-01-06Netgear Jwnr2000
HWNetgearv5Netgear Jwnr2000 Firmware
OSNetgear< 2017-01-06Netgear Jwnr2010
HWNetgearv5Netgear Jwnr2010 Firmware
OSNetgear< 2017-01-06Netgear R6220
HWNetgearall versionsNetgear R6220 Firmware
OSNetgear< 2017-01-06Netgear Wndr3700
HWNetgearv5Netgear Wndr3700 Firmware
OSNetgear< 2017-01-06Netgear Wnr1000
HWNetgearv4Netgear Wnr1000 Firmware
OSNetgear< 2017-01-06Netgear Wnr2020
HWNetgearv2Netgear Wnr2020 Firmware
OSNetgear< 2017-01-06Netgear Wnr614
HWNetgearall versionsNetgear Wnr614 Firmware
OSNetgear< 2017-01-06Netgear Wnr618
HWNetgearall versionsNetgear Wnr618 Firmware
OSNetgear< 2017-01-06
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth Bypass
CWE
Related vulnerabilities
CVE-2016-10174CRITICAL9.8⚠ KEVPL ✓same product
Buffer overflow w routerze NETGEAR WNR2000v5 umożliwiający RCE bez uwierzytelnienia
CVE-2021-45501CRITICAL9.4PL ✓same product
Authentication Bypass w urządzeniach NETGEAR — wiele modeli routerów
CVE-2021-38516CRITICAL10.0PL ✓same product
Brak kontroli dostępu na poziomie funkcji w urządzeniach NETGEAR
CVE-2021-29068CRITICAL9.9PL ✓same product
NETGEAR — buffer overflow po uwierzytelnieniu w dziesiątkach modeli routerów
CVE-2020-35800CRITICAL9.4PL ✓same product
Nieprawidłowa konfiguracja zabezpieczeń w urządzeniach NETGEAR