NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

92 records in D7000 Firmware · all components

TI-2016-08250 CVE-2016-10174 · GHSA-rgmj-9q73-5phf

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter…

CRITICAL 100KEV

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.83328 Published 2017-01-30 No fix listed CWE-120

TI-2021-20598 CVE-2021-45511 · GHSA-wr8v-6jgr-244v

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 60

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18885 Published 2021-12-26 No fix listed

TI-2021-20588 CVE-2021-45501 · GHSA-hwc2-6cgc-779p

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 46

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0201 Published 2021-12-26 No fix listed

TI-2021-20584 CVE-2021-45497 · GHSA-fx8h-x7h8-p5wp

NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass.

MEDIUM 46

NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0201 Published 2021-12-26 No fix listed

TI-2021-20583 CVE-2021-45496 · GHSA-j2c7-27m6-r852

NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass.

MEDIUM 46

NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01747 Published 2021-12-26 No fix listed

TI-2021-16116 CVE-2021-38516 · GHSA-73gm-85xf-8699

Certain NETGEAR devices are affected by lack of access control at the function level.

MEDIUM 46

Certain NETGEAR devices are affected by lack of access control at the function level.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01349 Published 2021-08-11 No fix listed

TI-2020-16335 CVE-2020-26908 · GHSA-gw77-ghxg-2429

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 46

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02061 Published 2020-10-09 No fix listed

TI-2021-20582 CVE-2021-45495 · GHSA-43w8-ggh3-p5rh

NETGEAR D7000 devices before 1.0.1.68 are affected by authentication bypass.

MEDIUM 45

NETGEAR D7000 devices before 1.0.1.68 are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01613 Published 2021-12-26 No fix listed

TI-2018-15096 CVE-2018-21134 · GHSA-f6mj-xf48-98pp

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

MEDIUM 45

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01296 Published 2020-04-23 No fix listed CWE-787

TI-2020-18243 CVE-2020-35799 · GHSA-3mwp-vjrv-6crj

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

MEDIUM 44

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01204 Published 2020-12-29 No fix listed CWE-787

TI-2020-16354 CVE-2020-26927 · GHSA-242m-6j37-xqc6

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 44

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01064 Published 2020-10-09 No fix listed

TI-2019-14950 CVE-2019-20730 · GHSA-wch4-qfc4-9f6m

Certain NETGEAR devices are affected by SQL injection.

MEDIUM 44

Certain NETGEAR devices are affected by SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00909 Published 2020-04-16 No fix listed CWE-89

TI-2021-20599 CVE-2021-45512 · GHSA-59h7-2c4x-36qm

Certain NETGEAR devices are affected by weak cryptography.

MEDIUM 43

Certain NETGEAR devices are affected by weak cryptography.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00567 Published 2021-12-26 No fix listed CWE-327

TI-2017-13916 CVE-2017-18764 · GHSA-qqhw-hqj9-7pv5

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 42

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01857 Published 2020-04-22 No fix listed CWE-74

TI-2021-20638 CVE-2021-45551 · GHSA-fxgh-826p-6cx6

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0151 Published 2021-12-26 No fix listed CWE-77

TI-2020-09447 CVE-2020-11770 · GHSA-mfv5-mqr7-9qvw

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01599 Published 2020-04-15 No fix listed CWE-77

TI-2019-14901 CVE-2019-20681 · GHSA-46mh-w55g-p27c

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 40

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01102 Published 2020-04-15 No fix listed

TI-2021-20728 CVE-2021-45641 · GHSA-9j28-327w-4vrh

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 39

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00718 Published 2021-12-26 No fix listed

TI-2021-20723 CVE-2021-45636 · GHSA-h328-mrrm-rx8q

NETGEAR D7000 devices before 1.0.1.82 are affected by a stack-based buffer overflow by an unauthenticated attacker.

LOW 39

NETGEAR D7000 devices before 1.0.1.82 are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00476 Published 2021-12-26 No fix listed CWE-787

TI-2021-08779 CVE-2021-27239 · GHSA-hqww-3wrx-q5gv

Stack-based buffer overflow in NETGEAR Multiple Routers

LOW 39

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00772 Published 2021-03-29 No fix listed CWE-121

TI-2020-16339 CVE-2020-26912 · GHSA-3hjj-hrqp-h46r

Certain NETGEAR devices are affected by CSRF.

LOW 39

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00621 Published 2020-10-09 No fix listed CWE-352

TI-2020-16338 CVE-2020-26911 · GHSA-87fm-5qxc-5j87

Certain NETGEAR devices are affected by lack of access control at the function level.

LOW 39

Certain NETGEAR devices are affected by lack of access control at the function level.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00526 Published 2020-10-09 No fix listed

TI-2020-09465 CVE-2020-11788 · GHSA-r27v-956v-r6h4

Certain NETGEAR devices are affected by authentication bypass.

LOW 39

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00577 Published 2020-04-15 No fix listed

TI-2019-14973 CVE-2019-20753 · GHSA-52f4-cjg2-mpf2

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 39

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00565 Published 2020-04-16 No fix listed CWE-787

TI-2019-14910 CVE-2019-20690 · GHSA-8mhp-wg44-9rxg

Certain NETGEAR devices are affected by authentication bypass.

LOW 39

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00572 Published 2020-04-16 No fix listed

Open these records in search →

Critical	217
High	591
Medium	535
Low	22
No CVSS	0