Skip to main content

Ex2700 Firmware

7 CVEs product

Monthly

CVE-2021-45658 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by server-side injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Code Injection Netgear Dm200 Firmware R8900 Firmware R9000 Firmware +29
NVD
CVSS 3.1
9.8
EPSS
0.8%
CVE-2021-45603 Dec 26, 01:15 MEDIUM PATCH This Month

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear R8900 Firmware R9000 Firmware Rax120v2 Firmware +15
NVD
CVSS 3.1
5.5
EPSS
0.6%
CVE-2021-45602 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.

Command Injection Netgear R8900 Firmware R9000 Firmware Rax120v2 Firmware +15
NVD
CVSS 3.1
7.8
EPSS
0.7%
CVE-2021-45548 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Command Injection Netgear Dm200 Firmware R8900 Firmware R9000 Firmware +25
NVD
CVSS 3.1
8.8
EPSS
1.0%
CVE-2021-38514 Aug 11, 00:15 LOW Monitor

Certain NETGEAR devices are affected by authentication bypass. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Netgear D6400 Firmware Ex3700 Firmware Ex6100 Firmware +71
NVD
CVSS 3.1
2.7
EPSS
0.7%
CVE-2020-35800 Dec 30, 00:15 CRITICAL Act Now

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated critical severity (CVSS 9.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear D6400 Firmware Dm200 Firmware Ex3110 Firmware +124
NVD
CVSS 3.1
9.4
EPSS
1.9%
CVE-2020-35799 Dec 30, 00:15 CRITICAL Act Now

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Netgear Dm200 Firmware R6230 Firmware +44
NVD
CVSS 3.1
9.8
EPSS
1.2%
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by server-side injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Code Injection Netgear Dm200 Firmware +31
NVD
EPSS 1% CVSS 5.5
MEDIUM PATCH This Month

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear R8900 Firmware +17
NVD
EPSS 1% CVSS 7.8
HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.

Command Injection Netgear R8900 Firmware +17
NVD
EPSS 1% CVSS 8.8
HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Command Injection Netgear Dm200 Firmware +27
NVD
EPSS 1% CVSS 2.7
LOW Monitor

Certain NETGEAR devices are affected by authentication bypass. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Netgear D6400 Firmware +73
NVD
EPSS 2% CVSS 9.4
CRITICAL Act Now

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated critical severity (CVSS 9.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear D6400 Firmware +126
NVD
EPSS 1% CVSS 9.8
CRITICAL Act Now

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Netgear +46
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy