Skip to main content

Rax120 Firmware

69 CVEs product

Monthly

CVE-2022-40620 Jan 28, 19:16 HIGH POC This Week

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism. [CVSS 7.7 HIGH]

TLS Netgear R6230 Firmware R6260 Firmware R7000 Firmware +7
NVD
CVSS 3.1
7.7
EPSS
0.1%
CVE-2022-40619 Jan 28, 19:16 HIGH POC This Week

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices. This interface is vulnerable to unauthenticated arbitrary command injection through the funjsq_access_token parameter. [CVSS 7.7 HIGH]

Command Injection Netgear R6230 Firmware R6260 Firmware R7000 Firmware +7
NVD
CVSS 3.1
7.7
EPSS
0.8%
CVE-2021-45658 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by server-side injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Code Injection Netgear Dm200 Firmware R8900 Firmware R9000 Firmware +29
NVD
CVSS 3.1
9.8
EPSS
0.8%
CVE-2021-45642 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +26
NVD
CVSS 3.1
7.2
EPSS
0.9%
CVE-2021-45619 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +39
NVD
CVSS 3.1
9.8
EPSS
2.5%
CVE-2021-45618 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +33
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-45552 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

Command Injection Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +4
NVD
CVSS 3.1
7.2
EPSS
1.2%
CVE-2021-45548 Dec 26, 01:15 HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Command Injection Netgear Dm200 Firmware R8900 Firmware R9000 Firmware +25
NVD
CVSS 3.1
8.8
EPSS
1.0%
CVE-2021-38538 Aug 11, 00:17 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +12
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2021-38516 Aug 11, 00:15 CRITICAL Act Now

Certain NETGEAR devices are affected by lack of access control at the function level. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear D6400 Firmware R6230 Firmware R6260 Firmware +56
NVD
CVSS 3.1
9.8
EPSS
1.3%
CVE-2021-29068 Mar 23, 07:15 HIGH This Week

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Netgear R6230 Firmware R6260 Firmware R7000 Firmware +77
NVD
CVSS 3.1
8.8
EPSS
1.1%
CVE-2020-35839 Dec 30, 00:15 HIGH This Week

Certain NETGEAR devices are affected by Stored XSS. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
8.1
EPSS
0.7%
CVE-2020-35838 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35837 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.7%
CVE-2020-35836 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35835 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35834 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35833 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +14
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35832 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +14
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35831 Dec 30, 00:15 HIGH This Week

Certain NETGEAR devices are affected by stored XSS. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +8
NVD
CVSS 3.1
8.1
EPSS
0.9%
CVE-2020-35830 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +14
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35829 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +13
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35828 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +14
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35827 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +7
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35826 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +8
NVD
CVSS 3.1
4.8
EPSS
0.7%
CVE-2020-35825 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +8
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35824 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +8
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35823 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +14
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35822 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35821 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +12
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35820 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +8
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35819 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +8
NVD
CVSS 3.1
4.8
EPSS
0.7%
CVE-2020-35818 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +14
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35817 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +8
NVD
CVSS 3.1
4.8
EPSS
0.7%
CVE-2020-35816 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +14
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35815 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +12
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35814 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +13
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35813 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +14
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35812 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +14
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35811 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +14
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35810 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +14
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35809 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +8
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35807 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear Rax120 Firmware Rbr20 Firmware Rbs20 Firmware +10
NVD
CVSS 3.1
4.8
EPSS
0.5%
CVE-2020-35806 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear Rax120 Firmware Rbr20 Firmware Rbs20 Firmware +11
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2020-35805 Dec 30, 00:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +14
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-35800 Dec 30, 00:15 CRITICAL Act Now

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated critical severity (CVSS 9.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear D6400 Firmware Dm200 Firmware Ex3110 Firmware +124
NVD
CVSS 3.1
9.4
EPSS
1.9%
CVE-2020-35795 Dec 30, 00:15 CRITICAL Act Now

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Netgear R6230 Firmware R6260 Firmware R7000 Firmware +74
NVD
CVSS 3.1
9.8
EPSS
1.2%
CVE-2020-26915 Oct 09, 07:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +8
NVD
CVSS 3.1
4.8
EPSS
0.5%
CVE-2020-13245 May 28, 19:15 MEDIUM POC This Month

Certain NETGEAR devices are affected by Missing SSL Certificate Validation. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Netgear R9000 Firmware Rax120 Firmware Rbr20 Firmware +11
NVD
CVSS 3.1
5.9
EPSS
0.5%
CVE-2020-11792 Apr 15, 18:15 HIGH This Week

NETGEAR R8900, R9000, RAX120, and XR700 devices before 2020-01-20 are affected by Transport Layer Security (TLS) certificate private key disclosure. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +1
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2020-11787 Apr 15, 18:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +14
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2020-11786 Apr 15, 17:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +8
NVD
CVSS 3.1
4.8
EPSS
0.5%
CVE-2020-11785 Apr 15, 17:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +8
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2020-11784 Apr 15, 17:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +8
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2020-11783 Apr 15, 16:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.5%
CVE-2020-11782 Apr 15, 16:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.5%
CVE-2020-11781 Apr 15, 16:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +8
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2020-11780 Apr 15, 16:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.5%
CVE-2020-11779 Apr 15, 16:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2020-11778 Apr 15, 14:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.5%
CVE-2020-11777 Apr 15, 14:15 MEDIUM This Month

Certain NETGEAR devices are affected by Stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.5%
CVE-2020-11776 Apr 15, 14:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-11775 Apr 15, 14:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +14
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-11774 Apr 15, 14:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-11773 Apr 15, 14:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-11772 Apr 15, 14:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.5%
CVE-2020-11771 Apr 15, 14:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +5
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-11769 Apr 15, 14:15 MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +13
NVD
CVSS 3.1
4.8
EPSS
0.5%
CVE-2020-11768 Apr 15, 14:15 MEDIUM This Month

Certain NETGEAR devices are affected by Stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +14
NVD
CVSS 3.1
4.8
EPSS
0.5%
EPSS 0% CVSS 7.7
HIGH POC This Week

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism. [CVSS 7.7 HIGH]

TLS Netgear R6230 Firmware +9
NVD
EPSS 1% CVSS 7.7
HIGH POC This Week

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices. This interface is vulnerable to unauthenticated arbitrary command injection through the funjsq_access_token parameter. [CVSS 7.7 HIGH]

Command Injection Netgear R6230 Firmware +9
NVD
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by server-side injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Code Injection Netgear Dm200 Firmware +31
NVD
EPSS 1% CVSS 7.2
HIGH PATCH This Week

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netgear R8900 Firmware +28
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear R8900 Firmware +41
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear R8900 Firmware +35
NVD
EPSS 1% CVSS 7.2
HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

Command Injection Netgear R8900 Firmware +6
NVD
EPSS 1% CVSS 8.8
HIGH PATCH This Week

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Command Injection Netgear Dm200 Firmware +27
NVD
EPSS 0% CVSS 6.1
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +14
NVD
EPSS 1% CVSS 9.8
CRITICAL Act Now

Certain NETGEAR devices are affected by lack of access control at the function level. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear D6400 Firmware +58
NVD
EPSS 1% CVSS 8.8
HIGH This Week

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Netgear R6230 Firmware +79
NVD
EPSS 1% CVSS 8.1
HIGH This Week

Certain NETGEAR devices are affected by Stored XSS. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +16
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +16
NVD
EPSS 1% CVSS 8.1
HIGH This Week

Certain NETGEAR devices are affected by stored XSS. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +10
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +16
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +15
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +16
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +9
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +10
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +10
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +10
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +16
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +14
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +10
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +10
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +16
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +10
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +16
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +14
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +15
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +16
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +16
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +16
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +16
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +10
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear Rax120 Firmware +12
NVD
EPSS 0% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear Rax120 Firmware +13
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +16
NVD
EPSS 2% CVSS 9.4
CRITICAL Act Now

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated critical severity (CVSS 9.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear D6400 Firmware +126
NVD
EPSS 1% CVSS 9.8
CRITICAL Act Now

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Netgear R6230 Firmware +76
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +10
NVD
EPSS 0% CVSS 5.9
MEDIUM POC This Month

Certain NETGEAR devices are affected by Missing SSL Certificate Validation. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Netgear R9000 Firmware +13
NVD
EPSS 1% CVSS 7.5
HIGH This Week

NETGEAR R8900, R9000, RAX120, and XR700 devices before 2020-01-20 are affected by Transport Layer Security (TLS) certificate private key disclosure. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear R8900 Firmware +3
NVD
EPSS 0% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +16
NVD
EPSS 0% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +10
NVD
EPSS 0% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +10
NVD
EPSS 0% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +10
NVD
EPSS 0% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 0% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 0% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +10
NVD
EPSS 0% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 0% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by Stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +16
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +7
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +15
NVD
EPSS 1% CVSS 4.8
MEDIUM This Month

Certain NETGEAR devices are affected by Stored XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Netgear R8900 Firmware +16
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy