Netgear Mr1100 Firmware vulnerabilities

CVE-2019-20679 [CRITICAL] CVE-2019-20679: NETGEAR MR1100 devices before 12.06.08.00 are affected by lack of access control at the function lev NETGEAR MR1100 devices before 12.06.08.00 are affected by lack of access control at the function level.

CVE-2019-20649 [HIGH] CVE-2019-20649: NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of sensitive information. NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of sensitive information.

CVE-2019-20638 [MEDIUM] CWE-200 CVE-2019-20638: NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of administrative credentials. NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of administrative credentials.

CVE-2019-14527 [CRITICAL] CWE-78 CVE-2019-14527: An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. System commands ca An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. System commands can be executed, via the web interface, after authentication.

CVE-2019-14526 [HIGH] CWE-352 CVE-2019-14526: An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. The web-interface An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. The web-interface Cross-Site Request Forgery token is stored in a dynamically generated JavaScript file, and therefore can be embedded in third party pages, and re-used against the Nighthawk web interface. This entirely bypasses the intended security benefits of the use o