Description:

NETGEAR has released security updates to address several vulnerabilities in the following products:

• WAC104, running firmware versions prior to 1.0.4.15
• GC108P, running firmware versions prior to 1.0.7.3
• GC108PP, running firmware versions prior to 1.0.7.3
• GS108Tv3, running firmware versions prior to 7.0.6.3
• GS110TPP, running firmware versions prior to 7.0.6.3
• GS110TPv3, running firmware versions prior to 7.0.6.3
• GS110TUP, running firmware versions prior to 1.0.4.3
• GS710TUP, running firmware versions prior to 1.0.4.3
• GS716TP, running firmware versions prior to 1.0.2.3
• GS716TPP, running firmware versions prior to 1.0.2.3
• GS724TPP, running firmware versions prior to 2.0.4.3
• GS724TPv2, running firmware versions prior to 2.0.4.3
• GS728TPPv2, running firmware versions prior to 6.0.6.3
• GS728TPv2, running firmware versions prior to 6.0.6.3
• GS752TPPv1, running firmware versions prior to 6.0.6.3
• GS752TPv2, running firmware versions prior to 6.0.6.3
• MS510TXM, running firmware versions prior to 1.0.2.3
• MS510TXUP, running firmware versions prior to 1.0.2.3
• RAX200, running firmware versions prior to 1.0.4.120
• RAX75, running firmware versions prior to 1.0.4.120
• RAX80, running firmware versions prior to 1.0.4.120
• RBK852, running firmware versions prior to 3.2.17.12
• RBR850, running firmware versions prior to 3.2.17.12
• RBS850, running firmware versions prior to 3.2.17.12
• RAX35, running firmware versions prior to 1.0.3.94
• RAX38, running firmware versions prior to 1.0.3.94
• RAX40, running firmware versions prior to 1.0.3.94
• D8500, running firmware versions prior to 1.0.3.58
• R6900P, running firmware versions prior to 1.3.2.132
• R7000P, running firmware versions prior to 1.3.2.132
• R7100LG, running firmware versions prior to 1.0.0.64
• WNDR3400v3, running firmware versions prior to 1.0.1.38
• XR300, running firmware versions prior to 1.0.3.56
• D6220, running firmware versions prior to 1.0.0.48
• D6400, running firmware versions prior to 1.0.0.82
• D7000v2, running firmware versions prior to 1.0.0.52
• D7800, running firmware versions prior to 1.0.1.44
• D8500, running firmware versions prior to 1.0.3.43
• DC112A, running firmware versions prior to 1.0.0.40
• DGN2200v4, running firmware versions prior to 1.0.0.108
• RBK50, running firmware versions prior to 2.3.0.32
• RBR50, running firmware versions prior to 2.3.0.32
• RBS50, running firmware versions prior to 2.3.0.32
• RBK20, running firmware versions prior to 2.3.0.28
• RBR20, running firmware versions prior to 2.3.0.28
• RBS20, running firmware versions prior to 2.3.0.28
• RBK40, running firmware versions prior to 2.3.0.28
• RBR40, running firmware versions prior to 2.3.0.28
• RBS40, running firmware versions prior to 2.3.0.28
• R6020, running firmware versions prior to 1.0.0.34
• R6080, running firmware versions prior to 1.0.0.34
• R6120, running firmware versions prior to 1.0.0.44
• R6220, running firmware versions prior to 1.1.0.80
• R6230, running firmware versions prior to 1.1.0.80
• R6250, running firmware versions prior to 1.0.4.34
• R6260, running firmware versions prior to 1.1.0.40
• R6850, running firmware versions prior to 1.1.0.40
• R6350, running firmware versions prior to 1.1.0.40
• R6400v2, running firmware versions prior to 1.0.2.62
• R6700v3, running firmware versions prior to 1.0.2.62
• R6700v2, running firmware versions prior to 1.2.0.36
• R6800, running firmware versions prior to 1.2.0.36
• R6900v2, running firmware versions prior to 1.2.0.36
• R7000, running firmware versions prior to 1.0.9.34
• R6900P, running firmware versions prior to 1.3.1.44
• R7000P, running firmware versions prior to 1.3.1.44
• R7100LG, running firmware versions prior to 1.0.0.48
• R7200, running firmware versions prior to 1.2.0.48
• R7350, running firmware versions prior to 1.2.0.48
• R7400, running firmware versions prior to 1.2.0.48
• R7450, running firmware versions prior to 1.2.0.36
• AC2100, running firmware versions prior to 1.2.0.36
• AC2400, running firmware versions prior to 1.2.0.36
• AC2600, running firmware versions prior to 1.2.0.36
• R7500v2, running firmware versions prior to 1.0.3.38
• R7800, running firmware versions prior to 1.0.2.58
• R7900, running firmware versions prior to 1.0.3.8
• R7960P, running firmware versions prior to 1.4.1.44
• R8000, running firmware versions prior to 1.0.4.28
• R7900P, running firmware versions prior to 1.4.1.30
• R8000P, running firmware versions prior to 1.4.1.30
• R8900, running firmware versions prior to 1.0.4.2
• R9000, running firmware versions prior to 1.0.4.2
• RAX120, running firmware versions prior to 1.0.0.74
• RBK752, running firmware versions prior to 3.2.16.6
• RBR750, running firmware versions prior to 3.2.16.6
• RBS750, running firmware versions prior to 3.2.16.6
• RBK852, running firmware versions prior to 3.2.16.6
• RBR850, running firmware versions prior to 3.2.16.6
• RBS850, running firmware versions prior to 3.2.16.6
• WNR3500Lv2, running firmware versions prior to 1.2.0.56
• XR450, running firmware versions prior to 2.3.2.32
• XR500, running firmware versions prior to 2.3.2.32
• MK62, running firmware versions prior to 1.0.6.110
• MR60, running firmware versions prior to 1.0.6.110
• MS60, running firmware versions prior to 1.0.6.110
• RAX15, running firmware versions prior to 1.0.2.82
• RAX20, running firmware versions prior to 1.0.2.82
• RAX200, running firmware versions prior to 1.0.3.106
• RAX45, running firmware versions prior to 1.0.2.32
• RAX50, running firmware versions prior to 1.0.2.32
• RAX75, running firmware versions prior to 1.0.3.106
• RAX80, running firmware versions prior to 1.0.3.106
• CBR40, running firmware versions prior to 2.5.0.14
• EX6100v2, running firmware versions prior to 1.0.1.98
• EX6150v2, running firmware versions prior to 1.0.1.98
• EX6250, running firmware versions prior to 1.0.0.132
• EX6400, running firmware versions prior to 1.0.2.158
• EX6400v2, running firmware versions prior to 1.0.0.132
• EX6410, running firmware versions prior to 1.0.0.132
• EX6420, running firmware versions prior to 1.0.0.132
• EX7300, running firmware versions prior to 1.0.2.158
• EX7300v2, running firmware versions prior to 1.0.0.132
• EX7320, running firmware versions prior to 1.0.0.132
• EX7700, running firmware versions prior to 1.0.0.216
• EX8000, running firmware versions prior to 1.0.1.232
• R7800, running firmware versions prior to 1.0.2.78
• RBK12, running firmware versions prior to 2.6.1.44
• RBR10, running firmware versions prior to 2.6.1.44
• RBS10, running firmware versions prior to 2.6.1.44
• RBK20, running firmware versions prior to 2.6.1.38
• RBR20, running firmware versions prior to 2.6.1.36
• RBS20, running firmware versions prior to 2.6.1.38
• RBK40, running firmware versions prior to 2.6.1.38
• RBR40, running firmware versions prior to 2.6.1.36
• RBS40, running firmware versions prior to 2.6.1.38
• RBK50, running firmware versions prior to 2.6.1.40
• RBR50, running firmware versions prior to 2.6.1.40
• RBS50, running firmware versions prior to 2.6.1.40
• RBS40V, running firmware versions prior to 2.6.2.4
• RBS50Y, running firmware versions prior to 2.6.1.40
• RBW30, running firmware versions prior to 2.6.2.2
• XR500, running firmware versions prior to 2.3.2.114
• RBK852, running firmware versions prior to 3.2.10.11
• RBR850, running firmware versions prior to 3.2.10.11
• RBS850, running firmware versions prior to 3.2.10.11
• CBR40, running firmware versions prior to 2.5.0.10
• EAX20, running firmware versions prior to 1.0.0.48
• RBK752, running firmware versions prior to 3.2.10.10
• RBR750, running firmware versions prior to 3.2.10.10
• RBS750, running firmware versions prior to 3.2.10.10
• RAX40, running firmware versions prior to 1.0.3.64
• D6200, running firmware versions prior to 1.1.00.40
• D7000, running firmware versions prior to 1.0.1.78
• R6020, running firmware versions prior to 1.0.0.48
• R6080, running firmware versions prior to 1.0.0.48
• R6120, running firmware versions prior to 1.0.0.66
• R6260, running firmware versions prior to 1.1.0.78
• R6700v2, running firmware versions prior to 1.2.0.76
• R6800, running firmware versions prior to 1.2.0.76
• R6900v2, running firmware versions prior to 1.2.0.76
• R6850, running firmware versions prior to 1.1.0.78
• R7200, running firmware versions prior to 1.2.0.76
• R7350, running firmware versions prior to 1.2.0.76
• R7400, running firmware versions prior to 1.2.0.76
• R7450, running firmware versions prior to 1.2.0.76
• AC2100, running firmware versions prior to 1.2.0.76
• AC2400, running firmware versions prior to 1.2.0.76
• AC2600, running firmware versions prior to 1.2.0.76
• RAX40, running firmware versions prior to 1.0.3.62
• RAX35, running firmware versions prior to 1.0.3.62
• R6120, running firmware versions prior to 1.0.0.76
• R6400, running firmware versions prior to 1.0.1.70
• XR300, running firmware versions prior to 1.0.3.50
• RBK40, running firmware versions prior to 2.5.1.16
• RBR40, running firmware versions prior to 2.5.1.16
• RBS40, running firmware versions prior to 2.5.1.16
• RBK20, running firmware versions prior to 2.5.1.16
• RBR20, running firmware versions prior to 2.5.1.16
• RBS20, running firmware versions prior to 2.5.1.16
• RBK50, running firmware versions prior to 2.5.1.16
• RBR50, running firmware versions prior to 2.5.1.16
• RBS50, running firmware versions prior to 2.5.1.16
• R6020, running firmware versions prior to 1.0.0.42
• R6080, running firmware versions prior to 1.0.0.42
• R6400v2, running firmware versions prior to 1.0.4.98
• R6700v3, running firmware versions prior to 1.0.4.98
• R7900, running firmware versions prior to 1.0.3.18
• R8000, running firmware versions prior to 1.0.4.46
• R6400, running firmware versions prior to 1.0.1.52
• D7800, running firmware versions prior to 1.0.1.56
• R7800, running firmware versions prior to 1.0.2.68
• R8900, running firmware versions prior to 1.0.4.26
• R9000, running firmware versions prior to 1.0.4.26
• R6400, running firmware versions prior to 1.0.1.50
• R7900P, running firmware versions prior to 1.4.1.50
• R8000P, running firmware versions prior to 1.4.1.50
• RAX75, running firmware versions prior to 1.0.1.62
• RAX80, running firmware versions prior to 1.0.1.62
• R6400v2, running firmware versions prior to 1.0.4.84
• R6700v3, running firmware versions prior to 1.0.4.84
• R6700v2, running firmware versions prior to 1.2.0.62
• R6900v2, running firmware versions prior to 1.2.0.62
• R7000P, running firmware versions prior to 1.3.2.124
• R6250, running firmware versions prior to 1.0.4.36
• R6300v2, running firmware versions prior to 1.0.4.36
• R6400v2, running firmware versions prior to 1.0.2.66
• R6700v3, running firmware versions prior to 1.0.2.66
• R6700, running firmware versions prior to 1.0.2.8
• R6900, running firmware versions prior to 1.0.2.8
• R7000, running firmware versions prior to 1.0.9.88
• R7100LG, running firmware versions prior to 1.0.0.52
• R7900, running firmware versions prior to 1.0.3.10
• RAX80, running firmware versions prior to 1.0.1.40
• RAX120, running firmware versions prior to 1.0.0.78
• RBK20, running firmware versions prior to 2.3.5.26
• RBR20, running firmware versions prior to 2.3.5.26
• RBS20, running firmware versions prior to 2.3.5.26
• RBK40, running firmware versions prior to 2.3.5.30
• RBR40, running firmware versions prior to 2.3.5.30
• RBS40, running firmware versions prior to 2.3.5.30
• RBK50, running firmware versions prior to 2.3.5.30
• RBR50, running firmware versions prior to 2.3.5.30
• RBS50, running firmware versions prior to 2.3.5.30
• XR500, running firmware versions prior to 2.3.2.56
• D8500, running firmware versions prior to 1.0.3.44
• R6700, running firmware versions prior to 1.0.2.6
• R6900, running firmware versions prior to 1.0.2.4
• R6900P, running firmware versions prior to 1.3.2.126
• R7000, running firmware versions prior to 1.0.9.42
• R7000P, running firmware versions prior to 1.3.2.126
• R7100LG, running firmware versions prior to 1.0.0.50
• R7300DST, running firmware versions prior to 1.0.0.70
• R8300, running firmware versions prior to 1.0.2.130
• R8500, running firmware versions prior to 1.0.2.130
• D3600, running firmware versions prior to 1.0.0.76
• D6000, running firmware versions prior to 1.0.0.76
• D6200, running firmware versions prior to 1.1.00.36
• D7000, running firmware versions prior to 1.0.1.70
• EX6200v2, running firmware versions prior to 1.0.1.78
• EX7000, running firmware versions prior to 1.0.1.78
• EX8000, running firmware versions prior to 1.0.1.186
• JR6150, running firmware versions prior to 1.0.1.18
• PR2000, running firmware versions prior to 1.0.0.28
• R6050, running firmware versions prior to 1.0.1.18
• R6120, running firmware versions prior to 1.0.0.46
• R6260, running firmware versions prior to 1.1.0.64
• R6300v2, running firmware versions prior to 1.0.4.34
• R6900P, running firmware versions prior to 1.3.1.64
• R7000P, running firmware versions prior to 1.3.1.64
• R7800, running firmware versions prior to 1.0.2.60
• R8900, running firmware versions prior to 1.0.4.12
• R9000, running firmware versions prior to 1.0.4.12
• XR500, running firmware versions prior to 2.3.2.40
• D6100, running firmware versions prior to 1.0.0.60
• D6220, running firmware versions prior to 1.0.0.52
• D6400, running firmware versions prior to 1.0.0.86
• D7000v2, running firmware versions prior to 1.0.0.53
• DC112A, running firmware versions prior to 1.0.0.42
• DGN2200v4, running firmware versions prior to 1.0.0.110
• DGND2200Bv4, running firmware versions prior to 1.0.0.109
• DM200, running firmware versions prior to 1.0.0.61
• R6400, running firmware versions prior to 1.0.1.46
• R7000, running firmware versions prior to 1.0.9.60
• WNDR3400v3, running firmware versions prior to 1.0.1.24
• WNR2020, running firmware versions prior to 1.1.0.62
• WNR3500Lv2, running firmware versions prior to 1.2.0.62
• XR450, running firmware versions prior to 2.3.2.40
• D3600, running firmware versions prior to 1.0.0.72
• D6000, running firmware versions prior to 1.0.0.72
• D6100, running firmware versions prior to 1.0.0.63
• D6200, running firmware versions prior to 1.1.00.34
• DGND2200Bv4, running firmware versions prior to 1.0.0.108
• EX2700, running firmware versions prior to 1.0.1.48
• EX3700, running firmware versions prior to 1.0.0.76
• EX3800, running firmware versions prior to 1.0.0.76
• EX6000, running firmware versions prior to 1.0.0.38
• EX6100, running firmware versions prior to 1.0.2.24
• EX6100v2, running firmware versions prior to 1.0.1.76
• EX6120, running firmware versions prior to 1.0.0.42
• EX6130, running firmware versions prior to 1.0.0.28
• EX6150v1, running firmware versions prior to 1.0.0.42
• EX6150v2, running firmware versions prior to 1.0.1.76
• EX6200, running firmware versions prior to 1.0.3.88
• EX6200v2, running firmware versions prior to 1.0.1.72
• EX6400, running firmware versions prior to 1.0.2.136
• EX7000, running firmware versions prior to 1.0.0.66
• EX7300, running firmware versions prior to 1.0.2.136
• EX8000, running firmware versions prior to 1.0.1.180
• RBK50, running firmware versions prior to 2.1.4.10
• RBR50, running firmware versions prior to 2.1.4.10
• RBS50, running firmware versions prior to 2.1.4.10
• RBK40, running firmware versions prior to 2.1.4.10
• RBR40, running firmware versions prior to 2.1.4.10
• RBS40, running firmware versions prior to 2.1.4.10
• RBW30, running firmware versions prior to 2.2.1.204
• R6020, running firmware versions prior to 1.0.0.38
• R6080, running firmware versions prior to 1.0.0.38
• R6220, running firmware versions prior to 1.1.0.86
• R6300v2, running firmware versions prior to 1.0.4.32
• R6400, running firmware versions prior to 1.0.1.44
• R6700, running firmware versions prior to 1.0.1.48
• R6900, running firmware versions prior to 1.0.1.48
• R7800, running firmware versions prior to 1.0.2.52
• R8300, running firmware versions prior to 1.0.2.128
• R8500, running firmware versions prior to 1.0.2.128
• R9000, running firmware versions prior to 1.0.3.10
• RBS40V, running firmware versions prior to 2.2.0.58
• RBK50V, running firmware versions prior to 2.2.0.58
• WN2000RPTv3, running firmware versions prior to 1.0.1.32
• WN2500RPv2, running firmware versions prior to 1.0.1.54
• WN3000RPv3, running firmware versions prior to 1.0.2.78
• WN3100RPv2, running firmware versions prior to 1.0.0.66
• WNDR3400v3, running firmware versions prior to 1.0.1.22
• WNDR3700v4, running firmware versions prior to 1.0.2.102
• WNDR4300v1, running firmware versions prior to 1.0.2.104
• WNDR4300v2, running firmware versions prior to 1.0.0.56
• WNDR4500v3, running firmware versions prior to 1.0.0.56
• WNR2000v5 (R2000), running firmware versions prior to 1.0.0.66
• WNR2050, running firmware versions prior to 1.1.0.62
• XR500, running firmware versions prior to 2.3.2.22

Threats:

Attacker could exploit these vulnerabilities by doing the following:

• Authentication bypass
• Code injection
• Buffer overflow
• Cross-site scripting (XSS)

Best practice and Recommendations:

The CERT team encourages users to review NETGEAR security advisory and apply the necessary updates:

• https://kb.netgear.com/000063787/Security-Advisory-for-Security-Misconfiguration-on-WAC104-PSV-2021-0124
• https://kb.netgear.com/000063786/Security-Advisory-for-Authentication-Bypass-on-WAC104-PSV-2021-0106
• https://kb.netgear.com/000063785/Security-Advisory-for-Authentication-Bypass-on-WAC104-PSV-2021-0075
• https://kb.netgear.com/000063784/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Insight-Managed-Switches-and-Smart-Managed-Pro-Switches-PSV-2021-0071
• https://kb.netgear.com/000063783/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-WiFi-Systems-PSV-2020-0528
• https://kb.netgear.com/000063782/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2020-0416
• https://kb.netgear.com/000063781/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Gateways-and-Routers-PSV-2020-0297
• https://kb.netgear.com/000063780/Security-Advisory-for-Missing-Function-Level-Access-Control-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2020-0273
• https://kb.netgear.com/000063779/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-and-WiFi-Systems-PSV-2020-0225
• https://kb.netgear.com/000063778/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Extenders-Routers-and-WiFi-Systems-PSV-2020-0025
• https://kb.netgear.com/000063777/Security-Advisory-for-Authentication-Bypass-on-Some-Extenders-and-WiFi-Systems-PSV-2020-0008
• https://kb.netgear.com/000063776/Security-Advisory-for-Stored-Cross-Site-Scripting-on-RAX40-PSV-2019-0263
• https://kb.netgear.com/000063775/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2019-0245
• https://kb.netgear.com/000063774/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2019-0193
• https://kb.netgear.com/000063773/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2019-0192
• https://kb.netgear.com/000063772/Security-Advisory-for-Out-of-Bounds-Read-and-Write-on-Some-Routers-PSV-2019-0187
• https://kb.netgear.com/000063771/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-R6400-PSV-2019-0166
• https://kb.netgear.com/000063770/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2019-0151
• https://kb.netgear.com/000063769/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Gateways-PSV-2019-0113
• https://kb.netgear.com/000063768/Security-Advisory-for-Denial-of-Service-on-Some-Routers-PSV-2019-0082
• https://kb.netgear.com/000063767/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-R6400-PSV-2019-0058
• https://kb.netgear.com/000063765/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-and-Gateways-PSV-2018-0616
• https://kb.netgear.com/000063764/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-PSV-2018-0566
• https://kb.netgear.com/000063763/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-PSV-2018-0565
• https://kb.netgear.com/000063762/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-PSV-2018-0564
• https://kb.netgear.com/000063761/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0515
• https://kb.netgear.com/000063760/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Routers-and-Gateways-PSV-2018-0385
• https://kb.netgear.com/000063759/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-Gateways-and-Extenders-PSV-2018-0378
• https://kb.netgear.com/000063758/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2018-0244
• https://kb.netgear.com/000063757/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2017-2449