NETGEAR Nighthawk X10-R9000 Firmware
4 CVEs affecting NETGEAR Nighthawk X10-R9000 Firmware. Latest disclosed: 2020-02-24. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-12511 | Critical | 9.8 | 2020-02-24 | In NETGEAR Nighthawk X10-R9000 prior to 1.0.4.26, an attacker may execute arbitrary system commands as root by sending a specially-crafted MAC address to the "… |
CVE-2019-12510 | Critical | 9.1 | 2020-02-24 | In NETGEAR Nighthawk X10-R900 prior to 1.0.4.26, an attacker may bypass all authentication checks on the device's "NETGEAR Genie" SOAP API ("/soap/server_sa")… |
CVE-2019-12513 | Medium | 6.1 | 2020-02-24 | In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, by sending a DHCP discover request containing a malicious hostname field, an attacker may execute stored XSS a… |
CVE-2019-12512 | Medium | 6.1 | 2020-02-24 | In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, an attacker may execute stored XSS attacks against this device by supplying a malicious X-Forwarded-For header… |