Skip to main content

Netgear

779 CVEs vendor

Monthly

CVE-2022-37234 Sep 22, 20:15 HIGH This Week

Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Netgear R7000 Firmware
NVD GitHub
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-38956 Sep 20, 18:15 MEDIUM This Month

An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Netgear Wpn824Ext Firmware
NVD
CVSS 3.1
5.3
EPSS
0.2%
CVE-2022-38955 Sep 20, 18:15 HIGH This Week

An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Authentication Bypass Netgear Wpn824Ext Firmware
NVD
CVSS 3.1
7.5
EPSS
0.3%
CVE-2022-30079 Sep 08, 12:15 HIGH POC THREAT Act Now

Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote authenticated attackers the ability to. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 24.4%.

Command Injection Netgear R6200
NVD GitHub VulDB
CVSS 3.1
8.8
EPSS
24.4%
Threat
4.0
CVE-2022-30078 Sep 07, 19:15 HIGH POC This Week

NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow remote authenticated attackers to execute arbitrary command. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Netgear R6200 Firmware R6300 Firmware
NVD GitHub VulDB
CVSS 3.1
8.8
EPSS
1.8%
CVE-2022-31876 Jun 17, 20:15 MEDIUM POC This Month

netgear wnap320 router WNAP320_V2.0.3_firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Netgear Wnap320 Firmware
NVD GitHub
CVSS 3.1
5.3
EPSS
1.2%
CVE-2022-29383 May 13, 13:15 CRITICAL POC THREAT Act Now

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Netgear Ssl312 Firmware
NVD GitHub
CVSS 3.1
9.8
EPSS
49.0%
CVE-2022-27947 Mar 26, 17:15 HIGH POC This Week

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr, ipv6_lan_ipaddr,. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Netgear R8500 Firmware
NVD GitHub
CVSS 3.1
8.8
EPSS
2.8%
CVE-2022-27946 Mar 26, 17:15 HIGH POC This Week

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Netgear R8500 Firmware
NVD GitHub
CVSS 3.1
8.8
EPSS
3.2%
CVE-2022-27945 Mar 26, 17:15 HIGH POC This Week

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Netgear R8500 Firmware
NVD GitHub
CVSS 3.1
8.8
EPSS
2.9%
CVE-2022-24655 Mar 18, 11:15 HIGH POC This Week

A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution of arbitrary code without authentication. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Memory Corruption Netgear Ex6100 Firmware +3
NVD GitHub
CVSS 3.1
7.8
EPSS
1.1%
CVE-2021-45732 Dec 30, 22:15 HIGH This Week

Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Netgear R6700 Firmware
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2021-45077 Dec 30, 22:15 HIGH This Week

Netgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear R6700 Firmware
NVD
CVSS 3.1
7.5
EPSS
0.6%
CVE-2021-23147 Dec 30, 22:15 MEDIUM This Month

Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Netgear R6700 Firmware
NVD
CVSS 3.1
6.8
EPSS
0.4%
CVE-2021-20175 Dec 30, 22:15 HIGH This Week

Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the SOAP interface. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear R6700 Firmware
NVD
CVSS 3.1
7.5
EPSS
0.6%
CVE-2021-20174 Dec 30, 22:15 HIGH This Week

Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the web interface. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear R6700 Firmware
NVD
CVSS 3.1
7.5
EPSS
0.6%
CVE-2021-20173 Dec 30, 22:15 HIGH POC This Week

Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Netgear R6700 Firmware
NVD
CVSS 3.1
8.8
EPSS
3.2%
CVE-2021-20172 Dec 30, 22:15 HIGH POC This Week

All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Apple Netgear Genie Installer
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-20171 Dec 30, 22:15 MEDIUM This Month

Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Netgear Rax43 Firmware
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2021-20170 Dec 30, 22:15 HIGH This Week

Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Netgear Rax43 Firmware
NVD
CVSS 3.1
8.8
EPSS
0.5%
CVE-2021-20169 Dec 30, 22:15 MEDIUM This Month

Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear Rax43 Firmware
NVD
CVSS 3.1
6.8
EPSS
0.2%
CVE-2021-20168 Dec 30, 22:15 MEDIUM This Month

Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Netgear Rax43 Firmware
NVD
CVSS 3.1
6.8
EPSS
0.3%
CVE-2021-20167 Dec 30, 22:15 HIGH POC This Week

Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. Rated high severity (CVSS 8.0), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Netgear Rax43 Firmware
NVD
CVSS 3.1
8.0
EPSS
8.5%
CVE-2021-20166 Dec 30, 22:15 HIGH This Week

Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Netgear Rax43 Firmware
NVD
CVSS 3.1
8.8
EPSS
2.2%
CVE-2021-45679 Dec 26, 01:15 HIGH This Week

Certain NETGEAR devices are affected by privilege escalation. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Netgear R7000 Firmware R7000P Firmware R6900P Firmware +1
NVD
CVSS 3.1
7.2
EPSS
1.0%
CVE-2021-45678 Dec 26, 01:15 CRITICAL Act Now

NETGEAR RAX200 devices before 1.0.5.132 are affected by insecure code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear Rax200 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.3%
CVE-2021-45677 Dec 26, 01:15 MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Gs108T Firmware Gs110Tp Firmware
NVD
CVSS 3.1
6.1
EPSS
0.6%
CVE-2021-45676 Dec 26, 01:15 MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Rax20 Firmware Rax80 Firmware Rax15 Firmware +2
NVD
CVSS 3.1
4.8
EPSS
0.5%
CVE-2021-45675 Dec 26, 01:15 MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear R6260 Firmware R6850 Firmware Ac2400 Firmware +12
NVD
CVSS 3.1
4.8
EPSS
0.3%
CVE-2021-45674 Dec 26, 01:15 MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear R7000 Firmware R7900 Firmware R8000 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2021-45673 Dec 26, 01:15 MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear R7000 Firmware R7900 Firmware R8000 Firmware +5
NVD
CVSS 3.1
5.4
EPSS
0.5%
CVE-2021-45672 Dec 26, 01:15 MEDIUM PATCH This Month

Certain NETGEAR devices are affected by Stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear R6230 Firmware R6260 Firmware R6850 Firmware +17
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2021-45671 Dec 26, 01:15 MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Rbr750 Firmware Rbr850 Firmware Rbs750 Firmware +19
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2021-45670 Dec 26, 01:15 MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Ex3700 Firmware R7000 Firmware Rbr750 Firmware +27
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2021-45669 Dec 26, 01:15 MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Rbr750 Firmware Rbr850 Firmware Rbs750 Firmware +12
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2021-45668 Dec 26, 01:15 MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Ex3700 Firmware Ex6120 Firmware Rax50 Firmware +14
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2021-45667 Dec 26, 01:15 MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Ex3700 Firmware Rbr750 Firmware Rbr850 Firmware +25
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2021-45666 Dec 26, 01:15 MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Ex3700 Firmware Rbr750 Firmware Rbr850 Firmware +12
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2021-45665 Dec 26, 01:15 MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Ex3700 Firmware Rbr750 Firmware Rbr850 Firmware +12
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2021-45664 Dec 26, 01:15 MEDIUM PATCH This Month

NETGEAR R7000 devices before 1.0.11.126 are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear R7000 Firmware
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2021-45663 Dec 26, 01:15 MEDIUM PATCH This Month

NETGEAR R7000 devices before 1.0.11.126 are affected by stored XSS. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear R7000 Firmware
NVD
CVSS 3.1
5.4
EPSS
0.5%
CVE-2021-45662 Dec 26, 01:15 MEDIUM PATCH This Month

NETGEAR R7000 devices before 1.0.9.88 are affected by stored XSS. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear R7000 Firmware
NVD
CVSS 3.1
5.4
EPSS
0.5%
CVE-2021-45661 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by server-side injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Code Injection Netgear Rbr20 Firmware Rbs20 Firmware Rbk20 Firmware +7
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-45660 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by server-side injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Code Injection Netgear Rbr20 Firmware Rbs20 Firmware Rbk20 Firmware +7
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-45659 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by server-side injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Code Injection Netgear Rbr20 Firmware Rbs20 Firmware Rbk20 Firmware +7
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-45658 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by server-side injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Code Injection Netgear Dm200 Firmware R8900 Firmware R9000 Firmware +29
NVD
CVSS 3.1
9.8
EPSS
0.8%
CVE-2021-45657 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by server-side injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Code Injection Netgear R6230 Firmware R6260 Firmware Rbr20 Firmware +25
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-45656 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by server-side injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Code Injection Netgear R6230 Firmware R6260 Firmware Rbr20 Firmware +24
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-45655 Dec 26, 01:15 MEDIUM PATCH This Month

NETGEAR R6400 devices before 1.0.1.70 are affected by server-side injection. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity.

Code Injection Netgear R6400 Firmware
NVD
CVSS 3.1
6.8
EPSS
0.4%
CVE-2021-45654 Dec 26, 01:15 HIGH PATCH This Week

NETGEAR XR1000 devices before 1.0.0.58 are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear Xr1000 Firmware
NVD
CVSS 3.1
7.5
EPSS
1.0%
CVE-2021-45653 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear Rbk352 Firmware Rbr350 Firmware Rbs350 Firmware
NVD
CVSS 3.1
7.5
EPSS
1.4%
CVE-2021-45652 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear Rbk352 Firmware Rbr350 Firmware Rbs350 Firmware
NVD
CVSS 3.1
7.5
EPSS
1.0%
CVE-2021-45651 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear Rbr50 Firmware Rbs50 Firmware Rbk50 Firmware
NVD
CVSS 3.1
7.5
EPSS
0.6%
CVE-2021-45650 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear R7000 Firmware R7900 Firmware R8000 Firmware +5
NVD
CVSS 3.1
7.5
EPSS
1.0%
CVE-2021-45649 Dec 26, 01:15 MEDIUM PATCH This Month

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear R7000 Firmware R7000P Firmware R6900P Firmware +2
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2021-45648 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear Rbr50 Firmware Rbk50 Firmware Ex6400 Firmware +15
NVD
CVSS 3.1
7.5
EPSS
0.8%
CVE-2021-45647 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear R6230 Firmware R6260 Firmware R7000 Firmware +31
NVD
CVSS 3.1
7.5
EPSS
1.3%
CVE-2021-45646 Dec 26, 01:15 HIGH PATCH This Week

NETGEAR R7000 devices before 1.0.11.116 are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear R7000 Firmware
NVD
CVSS 3.1
7.5
EPSS
0.9%
CVE-2021-45645 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Netgear Srk60 Firmware Srr60 Firmware Srs60 Firmware +5
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2021-45644 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Netgear R6230 Firmware R6260 Firmware R6850 Firmware +13
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2021-45643 Dec 26, 01:15 MEDIUM PATCH This Month

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated medium severity (CVSS 6.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Netgear R6400V2 Firmware R6700V3 Firmware Xr1000 Firmware
NVD
CVSS 3.1
6.5
EPSS
0.5%
CVE-2021-45642 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +26
NVD
CVSS 3.1
7.2
EPSS
0.9%
CVE-2021-45641 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netgear D6400 Firmware Dm200 Firmware Ex3700 Firmware +46
NVD
CVSS 3.1
8.8
EPSS
0.7%
CVE-2021-45640 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netgear D6400 Firmware Dm200 Firmware Ex3700 Firmware +48
NVD
CVSS 3.1
7.2
EPSS
0.6%
CVE-2021-45639 Dec 26, 01:15 MEDIUM This Month

Certain NETGEAR devices are affected by reflected XSS. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Netgear Ex3700 Firmware R7000 Firmware Rbr750 Firmware +30
NVD
CVSS 3.1
6.1
EPSS
0.6%
CVE-2021-45638 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Netgear D6400 Firmware R7000 Firmware +12
NVD
CVSS 3.1
9.8
EPSS
1.5%
CVE-2021-45637 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Netgear R6260 Firmware Ac2400 Firmware +6
NVD
CVSS 3.1
9.8
EPSS
1.2%
CVE-2021-45636 Dec 26, 01:15 HIGH PATCH This Week

NETGEAR D7000 devices before 1.0.1.82 are affected by a stack-based buffer overflow by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Netgear D7000 Firmware
NVD
CVSS 3.1
8.8
EPSS
0.5%
CVE-2021-45635 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware Rbr750 Firmware Rbr850 Firmware +4
NVD
CVSS 3.1
8.8
EPSS
0.9%
CVE-2021-45634 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware Rbr750 Firmware Rbr850 Firmware +4
NVD
CVSS 3.1
8.8
EPSS
1.1%
CVE-2021-45633 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware Rbr750 Firmware Rbr850 Firmware +4
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2021-45632 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware Rbr750 Firmware Rbr850 Firmware +4
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2021-45631 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware Rbr750 Firmware Rbr850 Firmware +5
NVD
CVSS 3.1
8.8
EPSS
1.0%
CVE-2021-45630 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware Rbr750 Firmware Rbr850 Firmware +5
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-45629 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware Rbr750 Firmware Rbr850 Firmware +4
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2021-45628 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware Rbr750 Firmware Rbr850 Firmware +7
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2021-45627 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware Rbr850 Firmware Rbs850 Firmware +1
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-45626 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

Command Injection Netgear Rbr20 Firmware Rbs20 Firmware Rbk20 Firmware +7
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2021-45625 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear Xr300 Firmware R7000P Firmware R6900P Firmware
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-45624 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear R7000 Firmware Xr300 Firmware R7100Lg Firmware +8
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-45623 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear R9000 Firmware R7800 Firmware Xr500 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-45622 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware R7000 Firmware Rbr750 Firmware +37
NVD
CVSS 3.1
9.8
EPSS
2.4%
CVE-2021-45621 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware Ex3700 Firmware R7000 Firmware +45
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-45620 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware R7000 Firmware Rbr750 Firmware +39
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-45619 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +39
NVD
CVSS 3.1
9.8
EPSS
2.5%
CVE-2021-45618 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +33
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-45617 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear R7000 Firmware Rbr750 Firmware Rbr850 Firmware +30
NVD
CVSS 3.1
9.8
EPSS
2.1%
CVE-2021-45616 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware R7000 Firmware Rbr750 Firmware +29
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-45615 Dec 26, 01:15 HIGH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware Rbr750 Firmware Rbr850 Firmware +10
NVD
CVSS 3.1
8.8
EPSS
1.0%
CVE-2021-45614 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Rbr750 Firmware Rbr850 Firmware Rbs750 Firmware +19
NVD
CVSS 3.1
9.8
EPSS
2.0%
EPSS 1% CVSS 7.8
HIGH This Week

Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Netgear +1
NVD GitHub
EPSS 0% CVSS 5.3
MEDIUM This Month

An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Netgear Wpn824Ext Firmware
NVD
EPSS 0% CVSS 7.5
HIGH This Week

An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Authentication Bypass Netgear Wpn824Ext Firmware
NVD
EPSS 24% 4.0 CVSS 8.8
HIGH POC THREAT Act Now

Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote authenticated attackers the ability to. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 24.4%.

Command Injection Netgear R6200
NVD GitHub VulDB
EPSS 2% CVSS 8.8
HIGH POC This Week

NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow remote authenticated attackers to execute arbitrary command. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Netgear R6200 Firmware +1
NVD GitHub VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

netgear wnap320 router WNAP320_V2.0.3_firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Netgear +1
NVD GitHub
EPSS 49% CVSS 9.8
CRITICAL POC THREAT Act Now

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Netgear Ssl312 Firmware
NVD GitHub
EPSS 3% CVSS 8.8
HIGH POC This Week

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr, ipv6_lan_ipaddr,. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Netgear R8500 Firmware
NVD GitHub
EPSS 3% CVSS 8.8
HIGH POC This Week

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Netgear R8500 Firmware
NVD GitHub
EPSS 3% CVSS 8.8
HIGH POC This Week

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Netgear R8500 Firmware
NVD GitHub
EPSS 1% CVSS 7.8
HIGH POC This Week

A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution of arbitrary code without authentication. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Memory Corruption +5
NVD GitHub
EPSS 1% CVSS 8.8
HIGH This Week

Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Netgear R6700 Firmware
NVD
EPSS 1% CVSS 7.5
HIGH This Week

Netgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear R6700 Firmware
NVD
EPSS 0% CVSS 6.8
MEDIUM This Month

Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Netgear R6700 Firmware
NVD
EPSS 1% CVSS 7.5
HIGH This Week

Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the SOAP interface. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear R6700 Firmware
NVD
EPSS 1% CVSS 7.5
HIGH This Week

Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the web interface. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear R6700 Firmware
NVD
EPSS 3% CVSS 8.8
HIGH POC This Week

Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Netgear R6700 Firmware
NVD
EPSS 0% CVSS 7.8
HIGH POC This Week

All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Apple Netgear +1
NVD
EPSS 0% CVSS 5.5
MEDIUM This Month

Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Netgear Rax43 Firmware
NVD
EPSS 0% CVSS 8.8
HIGH This Week

Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Netgear Rax43 Firmware
NVD
EPSS 0% CVSS 6.8
MEDIUM This Month

Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear Rax43 Firmware
NVD
EPSS 0% CVSS 6.8
MEDIUM This Month

Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Netgear Rax43 Firmware
NVD
EPSS 9% CVSS 8.0
HIGH POC This Week

Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. Rated high severity (CVSS 8.0), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Netgear Rax43 Firmware
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Netgear Rax43 Firmware
NVD
EPSS 1% CVSS 7.2
HIGH This Week

Certain NETGEAR devices are affected by privilege escalation. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Netgear R7000 Firmware +3
NVD
EPSS 1% CVSS 9.8
CRITICAL Act Now

NETGEAR RAX200 devices before 1.0.5.132 are affected by insecure code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear Rax200 Firmware
NVD
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Gs108T Firmware +1
NVD
EPSS 0% CVSS 4.8
MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Rax20 Firmware +4
NVD
EPSS 0% CVSS 4.8
MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear R6260 Firmware +14
NVD
EPSS 0% CVSS 4.8
MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear R7000 Firmware +7
NVD
EPSS 0% CVSS 5.4
MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear R7000 Firmware +7
NVD
EPSS 0% CVSS 4.8
MEDIUM PATCH This Month

Certain NETGEAR devices are affected by Stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear R6230 Firmware +19
NVD
EPSS 0% CVSS 4.8
MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Rbr750 Firmware +21
NVD
EPSS 0% CVSS 4.8
MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Ex3700 Firmware +29
NVD
EPSS 0% CVSS 4.8
MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Rbr750 Firmware +14
NVD
EPSS 0% CVSS 4.8
MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Ex3700 Firmware +16
NVD
EPSS 0% CVSS 4.8
MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Ex3700 Firmware +27
NVD
EPSS 0% CVSS 4.8
MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Ex3700 Firmware +14
NVD
EPSS 0% CVSS 4.8
MEDIUM PATCH This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear Ex3700 Firmware +14
NVD
EPSS 1% CVSS 4.8
MEDIUM PATCH This Month

NETGEAR R7000 devices before 1.0.11.126 are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear R7000 Firmware
NVD
EPSS 1% CVSS 5.4
MEDIUM PATCH This Month

NETGEAR R7000 devices before 1.0.11.126 are affected by stored XSS. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear R7000 Firmware
NVD
EPSS 1% CVSS 5.4
MEDIUM PATCH This Month

NETGEAR R7000 devices before 1.0.9.88 are affected by stored XSS. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Netgear R7000 Firmware
NVD
EPSS 0% CVSS 7.8
HIGH PATCH This Week

Certain NETGEAR devices are affected by server-side injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Code Injection Netgear Rbr20 Firmware +9
NVD
EPSS 0% CVSS 7.8
HIGH PATCH This Week

Certain NETGEAR devices are affected by server-side injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Code Injection Netgear Rbr20 Firmware +9
NVD
EPSS 0% CVSS 7.8
HIGH PATCH This Week

Certain NETGEAR devices are affected by server-side injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Code Injection Netgear Rbr20 Firmware +9
NVD
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by server-side injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Code Injection Netgear Dm200 Firmware +31
NVD
EPSS 0% CVSS 7.8
HIGH PATCH This Week

Certain NETGEAR devices are affected by server-side injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Code Injection Netgear R6230 Firmware +27
NVD
EPSS 0% CVSS 7.8
HIGH PATCH This Week

Certain NETGEAR devices are affected by server-side injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Code Injection Netgear R6230 Firmware +26
NVD
EPSS 0% CVSS 6.8
MEDIUM PATCH This Month

NETGEAR R6400 devices before 1.0.1.70 are affected by server-side injection. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity.

Code Injection Netgear R6400 Firmware
NVD
EPSS 1% CVSS 7.5
HIGH PATCH This Week

NETGEAR XR1000 devices before 1.0.0.58 are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear Xr1000 Firmware
NVD
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear Rbk352 Firmware +2
NVD
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear Rbk352 Firmware +2
NVD
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear Rbr50 Firmware +2
NVD
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear R7000 Firmware +7
NVD
EPSS 0% CVSS 5.5
MEDIUM PATCH This Month

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear R7000 Firmware +4
NVD
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear Rbr50 Firmware +17
NVD
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear R6230 Firmware +33
NVD
EPSS 1% CVSS 7.5
HIGH PATCH This Week

NETGEAR R7000 devices before 1.0.11.116 are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Netgear R7000 Firmware
NVD
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Netgear Srk60 Firmware +7
NVD
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Netgear R6230 Firmware +15
NVD
EPSS 0% CVSS 6.5
MEDIUM PATCH This Month

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated medium severity (CVSS 6.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Netgear R6400V2 Firmware +2
NVD
EPSS 1% CVSS 7.2
HIGH PATCH This Week

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netgear R8900 Firmware +28
NVD
EPSS 1% CVSS 8.8
HIGH PATCH This Week

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netgear D6400 Firmware +48
NVD
EPSS 1% CVSS 7.2
HIGH PATCH This Week

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netgear D6400 Firmware +50
NVD
EPSS 1% CVSS 6.1
MEDIUM This Month

Certain NETGEAR devices are affected by reflected XSS. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Netgear Ex3700 Firmware +32
NVD
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Netgear +14
NVD
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Netgear +8
NVD
EPSS 0% CVSS 8.8
HIGH PATCH This Week

NETGEAR D7000 devices before 1.0.1.82 are affected by a stack-based buffer overflow by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Netgear +1
NVD
EPSS 1% CVSS 8.8
HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware +6
NVD
EPSS 1% CVSS 8.8
HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware +6
NVD
EPSS 1% CVSS 8.8
HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware +6
NVD
EPSS 1% CVSS 8.8
HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware +6
NVD
EPSS 1% CVSS 8.8
HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware +7
NVD
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware +7
NVD
EPSS 1% CVSS 8.8
HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware +6
NVD
EPSS 1% CVSS 8.8
HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware +9
NVD
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware +3
NVD
EPSS 1% CVSS 8.8
HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

Command Injection Netgear Rbr20 Firmware +9
NVD
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear Xr300 Firmware +2
NVD
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear R7000 Firmware +10
NVD
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear R9000 Firmware +2
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware +39
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware +47
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware +41
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear R8900 Firmware +41
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear R8900 Firmware +35
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear R7000 Firmware +32
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware +31
NVD
EPSS 1% CVSS 8.8
HIGH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware +12
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Rbr750 Firmware +21
NVD
Prev Page 4 of 9 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy