Skip to main content
CVE-2021-37566 Dec 26, 00:15 HIGH This Week

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Netgear Mediatek Mt7603E Firmware +8
NVD
CVSS 3.1
8.8
EPSS
1.3%
CVE-2021-37563 Dec 26, 00:15 HIGH This Week

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Netgear Mediatek Mt7603E Firmware +9
NVD
CVSS 3.1
8.8
EPSS
1.2%
CVE-2021-37561 Dec 26, 00:15 HIGH This Week

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Netgear Mediatek Mt7603E Firmware +9
NVD
CVSS 3.1
8.8
EPSS
1.2%
CVE-2021-37560 Dec 26, 00:15 HIGH This Week

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Netgear Mediatek Mt7603E Firmware +9
NVD
CVSS 3.1
8.8
EPSS
1.2%
CVE-2021-35055 Dec 26, 00:15 HIGH This Week

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Netgear Mediatek Mt7603E Firmware +9
NVD
CVSS 3.1
8.8
EPSS
1.2%
CVE-2021-45584 Dec 26, 01:15 HIGH This Week

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated high severity (CVSS 8.4), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Netgear Rbr750 Firmware Rbr850 Firmware Rbs750 Firmware +3
NVD
CVSS 3.1
8.4
EPSS
0.6%
CVE-2021-45540 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated high severity (CVSS 8.4), this vulnerability is low attack complexity.

Command Injection Netgear R7000 Firmware Rax50 Firmware R7900 Firmware +10
NVD
CVSS 3.1
8.4
EPSS
0.6%
CVE-2021-44078 Dec 26, 05:15 HIGH PATCH This Week

An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. Rated high severity (CVSS 8.1), this vulnerability is no authentication required.

RCE Unicorn Engine
NVD GitHub
CVSS 3.1
8.1
EPSS
0.5%
CVE-2021-45661 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by server-side injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Code Injection Netgear Rbr20 Firmware Rbs20 Firmware Rbk20 Firmware +7
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-45660 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by server-side injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Code Injection Netgear Rbr20 Firmware Rbs20 Firmware Rbk20 Firmware +7
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-45659 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by server-side injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Code Injection Netgear Rbr20 Firmware Rbs20 Firmware Rbk20 Firmware +7
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-45657 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by server-side injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Code Injection Netgear R6230 Firmware R6260 Firmware Rbr20 Firmware +25
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-45656 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by server-side injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Code Injection Netgear R6230 Firmware R6260 Firmware Rbr20 Firmware +24
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-45602 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.

Command Injection Netgear R8900 Firmware R9000 Firmware Rax120v2 Firmware +15
NVD
CVSS 3.1
7.8
EPSS
0.7%
CVE-2021-45534 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Command Injection Netgear R6230 Firmware R6260 Firmware R6850 Firmware +14
NVD
CVSS 3.1
7.8
EPSS
1.1%
CVE-2021-45532 Dec 26, 01:15 HIGH This Week

NETGEAR R8000 devices before 1.0.4.76 are affected by command injection by an authenticated user. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Netgear R8000 Firmware
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-45654 Dec 26, 01:15 HIGH PATCH This Week

NETGEAR XR1000 devices before 1.0.0.58 are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear Xr1000 Firmware
NVD
CVSS 3.1
7.5
EPSS
1.0%
CVE-2021-45653 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear Rbk352 Firmware Rbr350 Firmware Rbs350 Firmware
NVD
CVSS 3.1
7.5
EPSS
1.4%
CVE-2021-45652 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear Rbk352 Firmware Rbr350 Firmware Rbs350 Firmware
NVD
CVSS 3.1
7.5
EPSS
1.0%
CVE-2021-45651 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear Rbr50 Firmware Rbs50 Firmware Rbk50 Firmware
NVD
CVSS 3.1
7.5
EPSS
0.6%
CVE-2021-45650 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear R7000 Firmware R7900 Firmware R8000 Firmware +5
NVD
CVSS 3.1
7.5
EPSS
1.0%
CVE-2021-45648 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear Rbr50 Firmware Rbk50 Firmware Ex6400 Firmware +15
NVD
CVSS 3.1
7.5
EPSS
0.8%
CVE-2021-45647 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear R6230 Firmware R6260 Firmware R7000 Firmware +31
NVD
CVSS 3.1
7.5
EPSS
1.3%
CVE-2021-45646 Dec 26, 01:15 HIGH PATCH This Week

NETGEAR R7000 devices before 1.0.11.116 are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear R7000 Firmware
NVD
CVSS 3.1
7.5
EPSS
0.9%
CVE-2021-45493 Dec 26, 01:15 HIGH This Week

Certain NETGEAR devices are affected by disclosure of administrative credentials. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear Rax35 Firmware Rax38 Firmware Rax40 Firmware
NVD
CVSS 3.1
7.5
EPSS
0.8%
CVE-2021-41788 Dec 26, 00:15 HIGH This Week

MediaTek microchips, as used in NETGEAR devices through 2021-12-13 and other devices, mishandle attempts at Wi-Fi authentication flooding. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear Mediatek Mt7603E Firmware Mt7612 Firmware +6
NVD
CVSS 3.1
7.5
EPSS
2.0%
CVE-2021-37572 Dec 26, 00:15 HIGH This Week

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Netgear Mediatek Mt7603E Firmware Mt7613 Firmware +5
NVD
CVSS 3.1
7.5
EPSS
1.0%
CVE-2021-37570 Dec 26, 00:15 HIGH This Week

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Netgear Mediatek Mt7603E Firmware +6
NVD
CVSS 3.1
7.5
EPSS
1.1%
CVE-2021-37567 Dec 26, 00:15 HIGH This Week

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Netgear Mediatek Mt7603E Firmware +6
NVD
CVSS 3.1
7.5
EPSS
1.1%
CVE-2021-37565 Dec 26, 00:15 HIGH This Week

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Netgear Mediatek Mt7603E Firmware +6
NVD
CVSS 3.1
7.5
EPSS
1.1%
CVE-2021-37564 Dec 26, 00:15 HIGH This Week

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Netgear Mediatek Mt7603E Firmware +6
NVD
CVSS 3.1
7.5
EPSS
1.1%
CVE-2021-37562 Dec 26, 00:15 HIGH This Week

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Netgear Mediatek Mt7603E Firmware +9
NVD
CVSS 3.1
7.5
EPSS
1.1%
CVE-2021-32469 Dec 26, 00:15 HIGH This Week

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Netgear Mediatek Mt7603E Firmware +9
NVD
CVSS 3.1
7.5
EPSS
1.0%
CVE-2021-32468 Dec 26, 00:15 HIGH This Week

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Netgear Mediatek Mt7603E Firmware +9
NVD
CVSS 3.1
7.5
EPSS
1.2%
CVE-2021-32467 Dec 26, 00:15 HIGH This Week

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Netgear Mediatek Mt7603E Firmware +8
NVD
CVSS 3.1
7.5
EPSS
1.0%
CVE-2021-45679 Dec 26, 01:15 HIGH This Week

Certain NETGEAR devices are affected by privilege escalation. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Netgear R7000 Firmware R7000P Firmware R6900P Firmware +1
NVD
CVSS 3.1
7.2
EPSS
1.0%
CVE-2021-45642 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +26
NVD
CVSS 3.1
7.2
EPSS
0.9%
CVE-2021-45640 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netgear D6400 Firmware Dm200 Firmware Ex3700 Firmware +48
NVD
CVSS 3.1
7.2
EPSS
0.6%
CVE-2021-45600 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

Command Injection Netgear Cbr750 Firmware Rbr850 Firmware Rbs850 Firmware +1
NVD
CVSS 3.1
7.2
EPSS
1.5%
CVE-2021-45552 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

Command Injection Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +4
NVD
CVSS 3.1
7.2
EPSS
1.2%
CVE-2021-45529 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Netgear R7000 Firmware R6400 Firmware R7900 Firmware +7
NVD
CVSS 3.1
7.2
EPSS
0.5%
CVE-2021-45528 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Netgear R7000 Firmware R6400 Firmware R6900 Firmware +8
NVD
CVSS 3.1
7.2
EPSS
0.5%
CVE-2021-45655 Dec 26, 01:15 MEDIUM PATCH This Month

NETGEAR R6400 devices before 1.0.1.70 are affected by server-side injection. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity.

Code Injection Netgear R6400 Firmware
NVD
CVSS 3.1
6.8
EPSS
0.4%
CVE-2021-45594 Dec 26, 01:15 MEDIUM This Month

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Netgear Rbr20 Firmware Rbs20 Firmware Rbk20 Firmware +7
NVD
CVSS 3.1
6.8
EPSS
0.8%
CVE-2021-45593 Dec 26, 01:15 MEDIUM This Month

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Netgear Rbr20 Firmware Rbs20 Firmware Rbk20 Firmware +5
NVD
CVSS 3.1
6.8
EPSS
0.8%
CVE-2021-45592 Dec 26, 01:15 MEDIUM This Month

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Netgear Rbr750 Firmware Rbr850 Firmware Rbs750 Firmware +3
NVD
CVSS 3.1
6.8
EPSS
0.6%
CVE-2021-45591 Dec 26, 01:15 MEDIUM This Month

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Netgear Rbr750 Firmware Rbr850 Firmware Rbs750 Firmware +3
NVD
CVSS 3.1
6.8
EPSS
0.8%
CVE-2021-45590 Dec 26, 01:15 MEDIUM This Month

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Netgear Rbr750 Firmware Rbr850 Firmware Rbs750 Firmware +3
NVD
CVSS 3.1
6.8
EPSS
0.7%
CVE-2021-45589 Dec 26, 01:15 MEDIUM This Month

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Netgear Rbr750 Firmware Rbr850 Firmware Rbs750 Firmware +3
NVD
CVSS 3.1
6.8
EPSS
0.6%
CVE-2021-45588 Dec 26, 01:15 MEDIUM This Month

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Netgear Rbr750 Firmware Rbr850 Firmware Rbs750 Firmware +3
NVD
CVSS 3.1
6.8
EPSS
0.6%
Prev Page 3 of 5 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy