Netgear D3600 Firmware vulnerabilities
65 known vulnerabilities affecting netgear/d3600_firmware.
Total CVEs
65
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH40MEDIUM21LOW1
Vulnerabilities
Page 3 of 4
CVE-2019-20682HIGHCVSS 8.8fixed in 1.0.0.762020-04-16
CVE-2019-20682 [HIGH] CWE-787 CVE-2019-20682: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.32, D7000 before 1.0.1.68, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.38, R6050 before 1.0.1.18, R6080 before 1.0.0.38, R6120 before 1.0.0.46, R6220
nvd
CVE-2019-20704HIGHCVSS 8.0fixed in 1.0.0.762020-04-16
CVE-2019-20704 [HIGH] CWE-77 CVE-2019-20704: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D36
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32.
nvd
CVE-2019-20705HIGHCVSS 8.0fixed in 1.0.0.762020-04-16
CVE-2019-20705 [HIGH] CWE-77 CVE-2019-20705: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D36
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32.
nvd
CVE-2019-20710HIGHCVSS 8.0fixed in 1.0.0.762020-04-16
CVE-2019-20710 [HIGH] CWE-77 CVE-2019-20710: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D36
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32.
nvd
CVE-2019-20683HIGHCVSS 8.8fixed in 1.0.0.762020-04-16
CVE-2019-20683 [HIGH] CWE-787 CVE-2019-20683: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.32, D7000 before 1.0.1.68, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.38, R6050 before 1.0.1.18, R6080 before 1.0.0.38, R6120 before 1.0.0.46, R6220
nvd
CVE-2019-20691HIGHCVSS 8.8fixed in 1.0.0.722020-04-16
CVE-2019-20691 [HIGH] CWE-352 CVE-2019-20691: Certain NETGEAR devices are affected by CSRF. This affects D3600 before 1.0.0.72, D6000 before 1.0.0
Certain NETGEAR devices are affected by CSRF. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, EX6000 before 1.0.0.30, EX6100 before 1.0.2.24, EX6120 before 1.0.0.40, EX6130 before 1.0.0.22, EX6150v1 before 1.0.0.42, EX6200 before 1.0.3.88, EX7000 before 1.0.0.66, and WN2500RPv2 before 1.0.1.54
nvd
CVE-2019-20708HIGHCVSS 8.0fixed in 1.0.0.762020-04-16
CVE-2019-20708 [HIGH] CWE-77 CVE-2019-20708: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D36
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32.
nvd
CVE-2019-20685HIGHCVSS 8.8fixed in 1.0.0.752020-04-16
CVE-2019-20685 [HIGH] CWE-787 CVE-2019-20685: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D6200 before 1.1.00.32, D7000 before 1.0.1.68, DM200 before 1.0.0.58, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.38, R6050 before 1.0.1.18, R6080 before 1.0.0.38, R6120
nvd
CVE-2019-20684HIGHCVSS 8.8fixed in 1.0.0.752020-04-16
CVE-2019-20684 [HIGH] CWE-787 CVE-2019-20684: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D6200 before 1.1.00.32, D7000 before 1.0.1.68, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.38, R6050 before 1.0.1.18, R6080 before 1.0.0.38, R6120 before 1.0.0.46, R6220
nvd
CVE-2019-20720MEDIUMCVSS 4.8fixed in 1.0.0.762020-04-16
CVE-2019-20720 [MEDIUM] CWE-79 CVE-2019-20720: Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before
Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D7800 before 1.0.1.47, R7500v2 before 1.0.3.38, R7800 before 1.0.2.52, R8900 before 1.0.4.12, R9000 before 1.0.4.12, WN2000RPTv3 before 1.0.1.32, WN3000RPv3 before 1.0.2.70, and WN3100RPv2 before 1.0.0.66.
nvd
CVE-2019-20752MEDIUMCVSS 4.8fixed in 1.0.0.752020-04-16
CVE-2019-20752 [MEDIUM] CWE-79 CVE-2019-20752: Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.75, D6000 before
Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, DM200 before 1.0.0.58, R7800 before 1.0.2.58, R8900 before 1.0.4.12, R9000 before 1.0.4.12, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK40 before 2.3.0.28, RBS40 before 2.3.0.28, RBK50 befor
nvd
CVE-2019-20723MEDIUMCVSS 6.8fixed in 1.0.0.752020-04-16
CVE-2019-20723 [MEDIUM] CWE-787 CVE-2019-20723: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D6100 before 1.0.0.63, DM200 before 1.0.0.58, EX2700 before 1.0.1.48, EX6100v2 before 1.0.1.76, EX6150v2 before 1.0.1.76, EX6200v2 before 1.0.1.72, EX6400 before 1.0.2.136, EX7300 before 1.0.2.136
nvd
CVE-2019-20725MEDIUMCVSS 6.8fixed in 1.0.0.752020-04-16
CVE-2019-20725 [MEDIUM] CWE-787 CVE-2019-20725: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D6100 before 1.0.0.63, R7800 before 1.0.2.52, R8900 before 1.0.4.2, R9000 before 1.0.4.2, WNDR3700v4 before 1.0.2.102, WNDR4300v1 before 1.0.2.104, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.
nvd
CVE-2019-20715MEDIUMCVSS 4.8fixed in 1.0.0.762020-04-16
CVE-2019-20715 [MEDIUM] CWE-79 CVE-2019-20715: Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before
Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6100 before 1.0.0.63, D7800 before 1.0.1.47, DM200 before 1.0.0.61, R7500v2 before 1.0.3.40, R7800 before 1.0.2.60, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, and RBS50 before 2.3.0.32.
nvd
CVE-2019-20735MEDIUMCVSS 6.8fixed in 1.0.0.752020-04-16
CVE-2019-20735 [MEDIUM] CWE-787 CVE-2019-20735: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.75, D6000 before V1.0.0.75, D6100 before V1.0.0.63, R7800 before v1.0.2.52, R8900 before v1.0.4.2, R9000 before v1.0.4.2, RBK50 before v2.3.0.32, RBR50 before v2.3.0.32, RBS50 before v2.3.0.32, WNDR3700v4 before V1.0.2.102,
nvd
CVE-2019-20746MEDIUMCVSS 4.8fixed in 1.0.0.752020-04-16
CVE-2019-20746 [MEDIUM] CWE-79 CVE-2019-20746: Certain NETGEAR devices are affected by reflected XSS. This affects D3600 before 1.0.0.75, D6000 bef
Certain NETGEAR devices are affected by reflected XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, DM200 before 1.0.0.58, R7800 before 1.0.2.58, R8900 before 1.0.4.12, R9000 before 1.0.4.8, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK40 before 2.3.0.28, RBS40 before 2.3.0.28, RBK50 bef
nvd
CVE-2019-20724MEDIUMCVSS 6.8fixed in 1.0.0.752020-04-16
CVE-2019-20724 [MEDIUM] CWE-77 CVE-2019-20724: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D36
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D6100 before 1.0.0.63, D7800 before 1.0.1.44, R7500v2 before 1.0.3.38, R7800 before 1.0.2.52, R8900 before 1.0.4.2, R9000 before 1.0.4.2, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RB
nvd
CVE-2019-20714MEDIUMCVSS 4.8fixed in 1.0.0.752020-04-16
CVE-2019-20714 [MEDIUM] CWE-79 CVE-2019-20714: Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.75, D6000 before
Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, DM200 before 1.0.0.58, R7500v2 before 1.0.3.40, R7800 before 1.0.2.60, R8900 before 1.0.4.12, R9000 before 1.0.4.12, RBK20 before 2.3.0.22, RBR20 before 2.3.0.22, RBS20 before 2.3.0.22, RBK50 before 2.3.0.22, RBR50 bef
nvd
CVE-2019-20717MEDIUMCVSS 6.5fixed in 1.0.0.752020-04-16
CVE-2019-20717 [MEDIUM] CVE-2019-20717: Certain NETGEAR devices are affected by denial of service. This affects D3600 before 1.0.0.75, D6000
Certain NETGEAR devices are affected by denial of service. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, EX2700 before 1.0.1.52, EX6200v2 before 1.0.1.74, EX8000 before 1.0.1.180, R7500v2 before 1.0.3.38, R7800 before 1.0.2.58, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK50 before 2.3.0.32, RBR
nvd
CVE-2019-20688MEDIUMCVSS 6.8fixed in 1.0.0.752020-04-16
CVE-2019-20688 [MEDIUM] CWE-77 CVE-2019-20688: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D36
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D6100 before 1.0.0.63, EX2700 before 1.0.1.48, EX6100v2 before 1.0.1.76, EX6150v2 before 1.0.1.76, EX6200v2 before 1.0.1.72, EX6400 before 1.0.2.136, EX7300 before 1.0.2.136, EX8000 before 1.0.1.180, R7800 bef
nvd