GCVE - cpe:2.3:o:netgear:mr1100_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:netgear:mr1100_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Netgear (`99700297-c207-56f4-abd0-97ab0c8bf3ab`)
Product	Mr1100 Firmware (`d0155599-7181-5abd-94eb-b1b600ae36fa`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-20679`	vulnerable	2026-06-08 05:13:41.048497	Details available HIGH (7.3) NETGEAR MR1100 devices before 12.06.08.00 are affected by lack of access control at the function level. Published: 2020-04-15T19:51:59.000Z Updated: 2024-08-05T02:46:10.332Z Open on db.gcve.eu Reference links https://kb.netgear.com/000061460/Security-Advisory-for-Missing-Function-Level-Access-Control-on-MR1100-PSV-2018-0537	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-20649`	vulnerable	2026-06-08 05:13:40.934926	Details available MEDIUM (6.9) NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of sensitive information. Published: 2020-04-15T17:27:51.000Z Updated: 2024-08-05T02:46:10.442Z Open on db.gcve.eu Reference links https://kb.netgear.com/000061493/Security-Advisory-for-Sensitive-Information-Disclosure-on-MR1100-PSV-2019-0204	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-20638`	vulnerable	2026-06-08 05:13:40.886457	Details available HIGH (7) NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of administrative credentials. Published: 2020-04-15T17:10:33.000Z Updated: 2024-08-05T02:46:10.357Z Open on db.gcve.eu Reference links https://kb.netgear.com/000061506/Security-Advisory-for-Admin-Credential-Disclosure-on-MR1100-PSV-2019-0008	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-14527`	vulnerable	2026-06-08 05:12:54.941781	Details available An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. System commands can be executed, via the web interface, after authentication. Published: 2019-08-14T20:51:37.000Z Updated: 2024-08-05T00:19:41.210Z Open on db.gcve.eu Reference links https://www.pentestpartners.com/security-blog/how-not-to-do-cross-site-request-forgery-protection-the-netgear-nighthawk-m1/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-14526`	vulnerable	2026-06-08 05:12:54.940448	Details available An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. The web-interface Cross-Site Request Forgery token is stored in a dynamically generated JavaScript file, and therefore can be embedded in third party pages, and re-used against the Nighthawk web interface. This entirely bypasses the intended security benefits of the use of a CSRF-protection token. Published: 2019-08-14T20:50:12.000Z Updated: 2024-08-05T00:19:41.298Z Open on db.gcve.eu Reference links https://www.pentestpartners.com/security-blog/how-not-to-do-cross-site-request-forgery-protection-the-netgear-nighthawk-m1/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.