NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

38 records in Dgn2200 Firmware · all components

TI-2017-03982 CVE-2017-6077 · GHSA-hjrc-qggq-2w49

ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote…

CRITICAL 100KEV

ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping_IPAddr field of an HTTP POST request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.68712 Published 2017-02-22 No fix listed CWE-78

TI-2016-04910 CVE-2016-5649 · GHSA-xgqp-24fp-7v85

Netgear DGN2200 and DGND3700 disclose the administrator password

MEDIUM 63

A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a remote attacker to access this page without a…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.23582 Published 2018-07-24 No fix listed CWE-319

TI-2021-16116 CVE-2021-38516 · GHSA-73gm-85xf-8699

Certain NETGEAR devices are affected by lack of access control at the function level.

MEDIUM 46

Certain NETGEAR devices are affected by lack of access control at the function level.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01349 Published 2021-08-11 No fix listed

TI-2019-12970 CVE-2019-17373 · GHSA-4fxh-vgp4-mp85

Certain NETGEAR devices allow unauthenticated access to critical .cgi and .htm pages via…

MEDIUM 45

Certain NETGEAR devices allow unauthenticated access to critical .cgi and .htm pages via a substring ending with .jpg, such as by appending ?x=1.jpg to a URL.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0154 Published 2019-10-09 No fix listed

TI-2024-37767 CVE-2024-57046 · GHSA-cg2m-239p-9xhp

A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier…

MEDIUM 44

A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authentication.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.02107 Published 2025-02-18 No fix listed CWE-287

TI-2017-04186 CVE-2017-6366 · GHSA-f99c-gfmc-7mwv

Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware…

MEDIUM 44

Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50 allows remote attackers to hijack the authentication of users for requests that perform DNS lookups via…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03474 Published 2017-03-15 No fix listed CWE-352

TI-2020-18229 CVE-2020-35785 · GHSA-f6gr-xm3f-89xf

NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication (aka…

LOW 39

NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication (aka PSV-2020-0363, PSV-2020-0364, and PSV-2020-0365).

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00672 Published 2020-12-29 No fix listed CWE-287

TI-2019-14973 CVE-2019-20753 · GHSA-52f4-cjg2-mpf2

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 39

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00565 Published 2020-04-16 No fix listed CWE-787

TI-2017-13909 CVE-2017-18756 · GHSA-645r-m8hj-xrhv

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 39

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00546 Published 2020-04-22 No fix listed

TI-2017-13990 CVE-2017-18842 · GHSA-g8x5-f6c3-qfrw

Certain NETGEAR devices are affected by CSRF.

LOW 38

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2020-04-20 No fix listed CWE-352

TI-2017-13908 CVE-2017-18755 · GHSA-ff2h-w98c-mqf9

Certain NETGEAR devices are affected by CSRF.

LOW 38

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2020-04-22 No fix listed CWE-352

TI-2016-09089 CVE-2016-11054 · GHSA-jh4q-jpjf-m9ch

NETGEAR DGN2200v4 devices before 2017-01-06 are affected by command execution and an FTP insecure root directory.

LOW 36

NETGEAR DGN2200v4 devices before 2017-01-06 are affected by command execution and an FTP insecure root directory.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02342 Published 2020-04-28 No fix listed CWE-78

TI-2018-15101 CVE-2018-21139 · GHSA-87jj-5mq8-98pw

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 35

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01188 Published 2020-04-23 No fix listed CWE-200

TI-2016-09094 CVE-2016-11059 · GHSA-pjvf-pcx9-852h

Certain NETGEAR devices are affected by password exposure.

LOW 35

Certain NETGEAR devices are affected by password exposure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01071 Published 2020-04-28 No fix listed CWE-200

TI-2018-15125 CVE-2018-21163 · GHSA-j5rp-qhhj-8vw3

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 34

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01078 Published 2020-04-23 No fix listed CWE-787

TI-2018-15118 CVE-2018-21156 · GHSA-9f7j-2669-24wh

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 34

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0135 Published 2020-04-27 No fix listed CWE-120

TI-2017-13927 CVE-2017-18777 · GHSA-qx7p-pcrw-fhh5

Certain NETGEAR devices are affected by administrative password disclosure.

LOW 34

Certain NETGEAR devices are affected by administrative password disclosure.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00284 Published 2020-04-22 No fix listed CWE-522

TI-2025-11860 CVE-2025-12944 · GHSA-q26q-g7qp-vmrr

Improper input validation in NETGEAR DGN2200v4

LOW 32

Improper input validation in NETGEAR DGN2200v4 (N300 Wireless ADSL2+ Modem Router) allows attackers with direct network access to the device to potentially execute code on the device.

CVSS 4.0MEDIUM 6.8 Adjacent network No auth No interaction EPSS 0.00268 Published 2025-11-11 No fix listed CWE-20

TI-2021-20637 CVE-2021-45550 · GHSA-hvp9-jp8f-v4wh

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00574 Published 2021-12-26 No fix listed CWE-77

TI-2019-14975 CVE-2019-20755 · GHSA-jjjm-2v77-2785

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 31

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00506 Published 2020-04-16 No fix listed CWE-787

TI-2019-14974 CVE-2019-20754 · GHSA-x7h9-rrcq-c95j

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00506 Published 2020-04-16 No fix listed CWE-120

TI-2019-14952 CVE-2019-20732 · GHSA-6qwv-4g82-ff2c

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00654 Published 2020-04-16 No fix listed CWE-77

TI-2019-14936 CVE-2019-20716 · GHSA-p7mh-mqrg-wx2f

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 31

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00529 Published 2020-04-16 No fix listed CWE-787

TI-2019-14932 CVE-2019-20712 · GHSA-7524-h548-9j8v

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00506 Published 2020-04-16 No fix listed CWE-120

TI-2017-14001 CVE-2017-18853 · GHSA-q794-v4jv-vqvf

Certain NETGEAR devices are affected by password recovery and file access.

LOW 31

Certain NETGEAR devices are affected by password recovery and file access.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01129 Published 2020-04-29 No fix listed CWE-200

Open these records in search →