Approved changes feed: RSS · Atom
cpe:2.3:a:netgear:ex3700:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Netgear (99700297-c207-56f4-abd0-97ab0c8bf3ab) |
|---|---|
| Product | Ex3700 (04fca830-8149-56fd-807a-3a436d7f6ffc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-11730 |
vulnerable | 2026-11-03 10:15:32.102506 |
Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models
MEDIUM (5.4)
Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.
Published: 2026-10-13T14:38:16.110Z
Updated: 2026-10-19T19:02:53.835Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9210 |
vulnerable | 2026-07-29 01:09:06.798665 |
Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
Published: 2026-06-09T15:50:48.947Z
Updated: 2026-06-11T05:38:03.646Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5934 |
vulnerable | 2026-06-08 07:37:26.099769 |
Netgear EX3700 mtd sub_41619C stack-based overflow
HIGH (8.8)
A vulnerability was found in Netgear EX3700 up to 1.0.0.88. It has been classified as critical. Affected is the function sub_41619C of the file /mtd. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.0.98 is able to address this issue. It is recommended to upgrade the affected component. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-06-10T03:31:08.622Z
Updated: 2025-06-10T13:11:09.832Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.