NETGEAR Gc108pp
5 CVEs affecting NETGEAR Gc108pp. Latest disclosed: 2021-12-26. Critical: 1, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-40866 | Critical | 9.8 | 2021-09-13 | Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (disabled by default) /sqfs/bin/sccd daemo… |
CVE-2021-41314 | High | 8.8 | 2021-09-16 | Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several faulty aspects of the authentication schem… |
CVE-2021-33514 | High | 8.8 | 2021-05-21 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/libsal.so.0.0 library used by a CGI appli… |
CVE-2021-40867 | High | 7.8 | 2021-09-13 | Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenticated attacker who uses the same source… |
CVE-2021-45557 | High | 7.5 | 2021-12-26 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before… |