CVE-2020-35783

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and JGS524PE before 2.6.0.48.

Source: CVE-2020-35783

CVE-2020-35784

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and GS116Ev2 before 2.6.0.48.

Source: CVE-2020-35784

CVE-2020-35781

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.

Source: CVE-2020-35781

CVE-2020-35780

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.

Source: CVE-2020-35780

CVE-2020-35785

NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication (aka PSV-2020-0363, PSV-2020-0364, and PSV-2020-0365).

Source: CVE-2020-35785

CVE-2020-35779

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.

Source: CVE-2020-35779

CVE-2020-35778

Certain NETGEAR devices are affected by CSRF. This affects GS716Tv3 before 6.3.1.36 and GS724Tv4 before 6.3.1.36.

Source: CVE-2020-35778

CVE-2020-10206

Use of a Hard-coded Password in VNCserver in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows local attackers to view and interact with the video output of the device.

Source: CVE-2020-10206

CVE-2020-35777

NETGEAR DGN2200v1 devices before v1.0.0.58 are affected by command injection.

Source: CVE-2020-35777

CVE-2020-10208

Command Injection in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows authenticated remote attackers to execute arbitrary commands with root user privileges.

Source: CVE-2020-10208