Priority LOW 27
netgear wnap320 router WNAP320_V2.0.3_firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01296 · Published 2022-06-17 · No fix listed
Priority LOW 32
Certain NETGEAR devices are affected by command execution via a PHP form.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00497 · Published 2020-04-28 · No fix listed CWE-74
Priority MEDIUM 44
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01188 · Published 2020-04-27 · No fix listed CWE-787
Priority LOW 32
Certain NETGEAR devices are affected by CSRF.
CVSS 3.1HIGH 7.4· Adjacent network · Low privileges · User interaction · EPSS 0.00306 · Published 2020-04-27 · No fix listed CWE-352
Priority LOW 34
Certain NETGEAR devices are affected by incorrect configuration of security settings.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.01041 · Published 2020-04-27 · No fix listed
Priority LOW 35
Certain NETGEAR devices are affected by CSRF.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00459 · Published 2020-04-22 · No fix listed CWE-352
Priority LOW 30
Certain NETGEAR devices are affected by command injection.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00555 · Published 2020-04-21 · No fix listed CWE-74
Priority LOW 30
Certain NETGEAR devices are affected by command injection.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00555 · Published 2020-04-21 · No fix listed CWE-74
Priority MEDIUM 47
Netgear WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0 reveal wireless passwords and administrative usernames and passwords over SNMP.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02842 · Published 2017-04-21 · No fix listed CWE-200
Priority LOW 39
Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0; and WND930 before 2.0.11 allows remote attackers to read the wireless WPS PIN or passphrase by visiting unaut…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0346 · Published 2017-04-21 · No fix listed CWE-200
Priority CRITICAL 100KEV
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.98325 · Published 2017-04-21 · No fix listed CWE-77
THREATIST.IORead the docs