Netgear Wnr1000V3 Firmware vulnerabilities

4 known vulnerabilities affecting netgear/wnr1000v3_firmware.

Total CVEs
4
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL2HIGH2

Vulnerabilities

Page 1 of 1
CVE-2020-35796CRITICALCVSS 9.8fixed in 1.0.2.782020-12-30
CVE-2020-35796 [CRITICAL] CWE-120 CVE-2020-35796: Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affec Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, DC112A before 1.0.0.48, DGN2200v4 before 1.0.0.114, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX3700 before 1.0.0.84, EX3800
nvd
CVE-2020-35800CRITICALCVSS 9.4fixed in 1.0.2.782020-12-30
CVE-2020-35800 [CRITICAL] CVE-2020-35800: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects A Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D6000 before 1.0.0.80, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D7800 before 1.0.3.48, D8500 before 1.0.3.50,
nvd
CVE-2017-5521HIGHCVSS 8.1KEVPoCv1.0.2.68_60.0.932017-01-17
CVE-2017-5521 [HIGH] CVE-2017-5521: An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. They are prone to password disclosure via simple crafted requests to the web management server. The bug is exploitable remotely if the remote management option is set, and can also be exploited given access to th
nvd
CVE-2015-8263HIGHCVSS 8.6v1.0.2.682015-12-27
CVE-2015-8263 [HIGH] CVE-2015-8263: NETGEAR WNR1000v3 devices with firmware 1.0.2.68 use the same source port number for every DNS query NETGEAR WNR1000v3 devices with firmware 1.0.2.68 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port.
nvd