Skip to main content
CVE-2021-45608 Dec 26, 01:15 CRITICAL POC PATCH Act Now

Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Integer Overflow D-Link TP-Link Netgear +4
NVD
CVSS 3.1
9.8
EPSS
2.5%
CVE-2021-45511 Dec 26, 01:15 CRITICAL POC PATCH THREAT Act Now

Certain NETGEAR devices are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear R6230 Firmware R6260 Firmware R6850 Firmware +14
NVD
CVSS 3.1
9.8
EPSS
17.6%
CVE-2021-45678 Dec 26, 01:15 CRITICAL Act Now

NETGEAR RAX200 devices before 1.0.5.132 are affected by insecure code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear Rax200 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.3%
CVE-2021-45658 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by server-side injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Code Injection Netgear Dm200 Firmware R8900 Firmware R9000 Firmware +29
NVD
CVSS 3.1
9.8
EPSS
0.8%
CVE-2021-45645 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Netgear Srk60 Firmware Srr60 Firmware Srs60 Firmware +5
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2021-45644 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Netgear R6230 Firmware R6260 Firmware R6850 Firmware +13
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2021-45638 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Netgear D6400 Firmware R7000 Firmware +12
NVD
CVSS 3.1
9.8
EPSS
1.5%
CVE-2021-45637 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Netgear R6260 Firmware Ac2400 Firmware +6
NVD
CVSS 3.1
9.8
EPSS
1.2%
CVE-2021-45630 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware Rbr750 Firmware Rbr850 Firmware +5
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-45627 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware Rbr850 Firmware Rbs850 Firmware +1
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-45625 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear Xr300 Firmware R7000P Firmware R6900P Firmware
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-45624 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear R7000 Firmware Xr300 Firmware R7100Lg Firmware +8
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-45623 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear R9000 Firmware R7800 Firmware Xr500 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-45622 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware R7000 Firmware Rbr750 Firmware +37
NVD
CVSS 3.1
9.8
EPSS
2.4%
CVE-2021-45621 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware Ex3700 Firmware R7000 Firmware +45
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-45620 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware R7000 Firmware Rbr750 Firmware +39
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-45619 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +39
NVD
CVSS 3.1
9.8
EPSS
2.5%
CVE-2021-45618 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +33
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-45617 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear R7000 Firmware Rbr750 Firmware Rbr850 Firmware +30
NVD
CVSS 3.1
9.8
EPSS
2.1%
CVE-2021-45616 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware R7000 Firmware Rbr750 Firmware +29
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-45614 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Rbr750 Firmware Rbr850 Firmware Rbs750 Firmware +19
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-45613 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware Rbr750 Firmware Rbr850 Firmware +23
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-45612 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware R7000 Firmware Rbr750 Firmware +36
NVD
CVSS 3.1
9.8
EPSS
2.5%
CVE-2021-45611 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Netgear Xr300 Firmware Dc112A Firmware R6400 Firmware +6
NVD
CVSS 3.1
9.8
EPSS
1.2%
CVE-2021-45610 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Netgear D6400 Firmware R7000 Firmware Xr300 Firmware +25
NVD
CVSS 3.1
9.8
EPSS
1.4%
CVE-2021-45609 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Netgear R7000 Firmware Xr300 Firmware R6250 Firmware +7
NVD
CVSS 3.1
9.8
EPSS
1.2%
CVE-2021-45527 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Netgear D6400 Firmware R7000 Firmware Rbr750 Firmware +33
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2021-45512 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by weak cryptography. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear Ex3700 Firmware R7000 Firmware Xr300 Firmware +18
NVD
CVSS 3.1
9.8
EPSS
0.5%
CVE-2021-45509 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear Rbr750 Firmware Rbr850 Firmware Rbs750 Firmware +4
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2021-45508 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear Cbr750 Firmware Rbr750 Firmware Rbr850 Firmware +4
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2021-45507 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear Cbr750 Firmware Rbr750 Firmware Rbr850 Firmware +7
NVD
CVSS 3.1
9.8
EPSS
1.4%
CVE-2021-45504 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear Cbr750 Firmware Rbr850 Firmware Rbs850 Firmware +2
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2021-45501 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear R6230 Firmware R6260 Firmware R6850 Firmware +16
NVD
CVSS 3.1
9.8
EPSS
1.9%
CVE-2021-45498 Dec 26, 01:15 CRITICAL PATCH Act Now

NETGEAR R6700v2 devices before 1.2.0.88 are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear R6700V2 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.6%
CVE-2021-45497 Dec 26, 01:15 CRITICAL PATCH Act Now

NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear D7000 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.9%
CVE-2021-45496 Dec 26, 01:15 CRITICAL PATCH Act Now

NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear D7000 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-45495 Dec 26, 01:15 CRITICAL PATCH Act Now

NETGEAR D7000 devices before 1.0.1.68 are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear D7000 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.6%
CVE-2021-45513 Dec 26, 01:15 CRITICAL Act Now

NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Xr1000 Firmware
NVD
CVSS 3.1
9.6
EPSS
0.8%
CVE-2021-45524 Dec 26, 01:15 CRITICAL Act Now

NETGEAR R8000 devices before 1.0.4.62 are affected by a buffer overflow by an authenticated user. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Netgear R8000 Firmware
NVD
CVSS 3.1
9.1
EPSS
1.2%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy