Approved changes feed: RSS · Atom

cpe:2.3:a:netgear:r7000:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetgear (99700297-c207-56f4-abd0-97ab0c8bf3ab)
ProductR7000 (5886d02d-3cc5-5be8-9dcb-4bad9fa91285)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1431 vulnerable 2026-06-08 06:25:40.054568 Netgear R7000 Web Management Interface debuginfo.htm information disclosure
MEDIUM (4.3)
A vulnerability was found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this issue is some unknown functionality of the file /debuginfo.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may be used. VDB-253382 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-02-11T02:31:04.685Z
Updated: 2024-08-01T18:40:21.093Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1430 vulnerable 2026-06-08 06:25:40.052702 Netgear R7000 Web Management Interface currentsetting.htm information disclosure
MEDIUM (4.3)
A vulnerability has been found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /currentsetting.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-02-11T00:31:04.302Z
Updated: 2024-08-25T05:52:59.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34977 vulnerable 2026-06-08 05:32:17.255913 Details available
HIGH (8.8)
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116_10.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results from the lack of proper authentication verification before performing a password reset. An attacker can leverage this vulnerability to reset the admin password. Was ZDI-CAN-13483.
Published: 2022-01-13T21:44:31.000Z
Updated: 2024-08-04T00:26:55.730Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.