NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

53 records in D6220 Firmware · all components

TI-2016-05377 CVE-2016-6277 · GHSA-pxpc-qfm6-wwp4

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before…

CRITICAL 97KEV

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 b…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.99803 Published 2016-12-14 No fix listed CWE-352

TI-2017-03537 CVE-2017-5521 · GHSA-6cqf-r56h-g5xf

An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2…

CRITICAL 94KEV

An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.89353 Published 2017-01-17 No fix listed

TI-2023-16567 CVE-2023-33533 · GHSA-6hv6-62gq-jmq6

Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700…

HIGH 73

Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are vulnerable to Command Injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03096 Published 2023-06-06 No fix listed CWE-77

TI-2022-10624 CVE-2022-27643 · GHSA-h8wj-xxvx-cv2r

Buffer overflow in NETGEAR R6700v3

MEDIUM 61

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.25439 Published 2023-03-29 No fix listed CWE-120

TI-2021-13978 CVE-2021-34991 · GHSA-4fwh-3qpr-42ff

Stack-based buffer overflow in NETGEAR R6400v2

MEDIUM 47

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.05714 Published 2021-11-15 No fix listed CWE-121

TI-2021-16116 CVE-2021-38516 · GHSA-73gm-85xf-8699

Certain NETGEAR devices are affected by lack of access control at the function level.

MEDIUM 46

Certain NETGEAR devices are affected by lack of access control at the function level.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01349 Published 2021-08-11 No fix listed

TI-2021-20725 CVE-2021-45638 · GHSA-ffgh-6q37-4pj7

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

MEDIUM 45

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01598 Published 2021-12-26 No fix listed CWE-787

TI-2021-20697 CVE-2021-45610 · GHSA-m3x6-j75p-546g

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01495 Published 2021-12-26 No fix listed CWE-120

TI-2020-18240 CVE-2020-35796 · GHSA-c585-qfhx-g68f

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01299 Published 2020-12-29 No fix listed CWE-120

TI-2018-15096 CVE-2018-21134 · GHSA-f6mj-xf48-98pp

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

MEDIUM 45

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01296 Published 2020-04-23 No fix listed CWE-787

TI-2021-20614 CVE-2021-45527 · GHSA-h529-hgpf-hm97

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

MEDIUM 44

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01176 Published 2021-12-26 No fix listed CWE-120

TI-2020-18244 CVE-2020-35800 · GHSA-3w6j-54mg-5cr4

Certain NETGEAR devices are affected by incorrect configuration of security settings.

MEDIUM 44

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.01628 Published 2020-12-29 No fix listed

TI-2019-14950 CVE-2019-20730 · GHSA-wch4-qfc4-9f6m

Certain NETGEAR devices are affected by SQL injection.

MEDIUM 44

Certain NETGEAR devices are affected by SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00909 Published 2020-04-16 No fix listed CWE-89

TI-2021-20618 CVE-2021-45531 · GHSA-8jx3-84v7-hf92

NETGEAR D6220 devices before 1.0.0.76 are affected by command injection by an authenticated user.

MEDIUM 41

NETGEAR D6220 devices before 1.0.0.76 are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01276 Published 2021-12-26 No fix listed CWE-77

TI-2021-13972 CVE-2021-34982 · GHSA-3g79-p8hq-4qgp

Stack-based buffer overflow in NETGEAR Multiple Routers

MEDIUM 41

NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00581 Published 2024-05-07 No fix listed CWE-121

TI-2020-09447 CVE-2020-11770 · GHSA-mfv5-mqr7-9qvw

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01599 Published 2020-04-15 No fix listed CWE-77

TI-2021-20728 CVE-2021-45641 · GHSA-9j28-327w-4vrh

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 39

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00718 Published 2021-12-26 No fix listed

TI-2021-08779 CVE-2021-27239 · GHSA-hqww-3wrx-q5gv

Stack-based buffer overflow in NETGEAR Multiple Routers

LOW 39

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00772 Published 2021-03-29 No fix listed CWE-121

TI-2019-14973 CVE-2019-20753 · GHSA-52f4-cjg2-mpf2

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 39

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00565 Published 2020-04-16 No fix listed CWE-787

TI-2019-14954 CVE-2019-20734 · GHSA-45r5-vh4c-92vx

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

LOW 39

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00478 Published 2020-04-16 No fix listed CWE-120

TI-2017-13909 CVE-2017-18756 · GHSA-645r-m8hj-xrhv

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 39

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00546 Published 2020-04-22 No fix listed

TI-2017-13887 CVE-2017-18733 · GHSA-4h9q-5577-5432

Certain NETGEAR devices are affected by authentication bypass.

LOW 39

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00603 Published 2020-04-23 No fix listed CWE-287

TI-2017-13998 CVE-2017-18850 · GHSA-gxw4-x2rm-fgmv

Certain NETGEAR devices are affected by authentication bypass.

LOW 36

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00355 Published 2020-04-20 No fix listed CWE-287

TI-2017-13997 CVE-2017-18849 · GHSA-cxhv-qfhw-63ww

Certain NETGEAR devices are affected by command injection.

LOW 36

Certain NETGEAR devices are affected by command injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00887 Published 2020-04-20 No fix listed CWE-74

TI-2018-15101 CVE-2018-21139 · GHSA-87jj-5mq8-98pw

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 35

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01188 Published 2020-04-23 No fix listed CWE-200

Open these records in search →

Critical	217
High	591
Medium	535
Low	22
No CVSS	0