Description (CNA)
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| NETGEAR / LBR1020 | affected 0 before V2.6.4.60 |
| NETGEAR / LBR20 | affected 0 before V2.7.6.8 |
| NETGEAR / R6700AX | affected 0 through * |
| NETGEAR / R7800 | affected 0 before V1.0.4.96 |
| NETGEAR / R9000 | affected 0 before V1.0.6.46 |
| NETGEAR / RAX10 | affected 0 before V1.0.5.50 |
| NETGEAR / RAX10v2 | affected 0 before V1.0.5.50 |
| NETGEAR / RAX120 | affected 0 before V1.2.10.56 |
| NETGEAR / RAX120v1 | affected 0 before V1.2.10.56 |
| NETGEAR / RAX120v2 | affected 0 before V1.2.10.56 |
| NETGEAR / RAX36S | affected 0 before V1.0.5.50 |
| NETGEAR / RAX70 | affected 0 before V1.0.19.172 |
| NETGEAR / RAX78 | affected 0 before V1.0.19.172 |
| NETGEAR / RBR10 | affected 0 through 2.7.6.6 |
| NETGEAR / RBR20 | affected 0 through 2.7.6.6 |
| NETGEAR / RBR350 | affected 0 before V4.4.2.1 |
| NETGEAR / RBR40 | affected 0 through 2.7.6.6 |
| NETGEAR / RBR50 | affected 0 through 2.7.6.6 |
| NETGEAR / RBS10 | affected 0 through 2.7.6.6 |
| NETGEAR / RBS20 | affected 0 through 2.7.6.6 |
| NETGEAR / RBS350 | affected 0 before V4.4.2.1 |
| NETGEAR / RBS40 | affected 0 through 2.7.6.6 |
| NETGEAR / RBS50 | affected 0 through 2.7.6.6 |
| NETGEAR / XR450 | affected 0 before V2.3.3.136 |
| NETGEAR / XR500 | affected 0 before v2.3.3.136 |
CWE
CWE-306, CWE-20
References
- https://www.netgear.com/support/product/lbr20/
- https://www.netgear.com/support/product/lbr1020/
- https://www.netgear.com/support/product/r6700ax/
- https://www.netgear.com/support/product/r9000/
- https://www.netgear.com/support/product/r7800/
- https://www.netgear.com/support/product/rax10/
- https://www.netgear.com/support/product/rax120/
- https://www.netgear.com/support/product/rax78/
- https://www.netgear.com/support/product/rax120v2/
- https://www.netgear.com/support/product/rax70/
- https://www.netgear.com/support/product/rbr10/
- https://www.netgear.com/support/product/rbr350/
- https://www.netgear.com/support/product/rbr40/
- https://www.netgear.com/support/product/rbr50/
- https://www.netgear.com/support/product/rbs10/
- https://www.netgear.com/support/product/rbs20/
- https://www.netgear.com/support/product/rax36s/
- https://www.netgear.com/support/product/rbr20/
- https://www.netgear.com/support/product/rbs50/
- https://www.netgear.com/support/product/rbs350/
- https://www.netgear.com/support/product/xr500/
- https://www.netgear.com/support/product/rbs40/
- https://www.netgear.com/support/product/xr450/
- https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
ADP enrichment
No English description supplied.
No references supplied.