NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

15 records in Dgn2200b Firmware · all components

TI-2013-06200 CVE-2013-10060 · GHSA-5fhc-hfwc-c254

Netgear Routers pppoe.cgi RCE

HIGH 82

An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN2200B model) firmware versions 1.0.0.36 and prior via the pppoe.cgi endpoint.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.06297 Published 2025-08-01 No fix listed CWE-78

TI-2017-13909 CVE-2017-18756 · GHSA-645r-m8hj-xrhv

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 39

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00546 Published 2020-04-22 No fix listed

TI-2018-15101 CVE-2018-21139 · GHSA-87jj-5mq8-98pw

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 35

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01188 Published 2020-04-23 No fix listed CWE-200

TI-2016-09094 CVE-2016-11059 · GHSA-pjvf-pcx9-852h

Certain NETGEAR devices are affected by password exposure.

LOW 35

Certain NETGEAR devices are affected by password exposure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01071 Published 2020-04-28 No fix listed CWE-200

TI-2018-15125 CVE-2018-21163 · GHSA-j5rp-qhhj-8vw3

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 34

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01078 Published 2020-04-23 No fix listed CWE-787

TI-2018-15118 CVE-2018-21156 · GHSA-9f7j-2669-24wh

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 34

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0135 Published 2020-04-27 No fix listed CWE-120

TI-2017-13927 CVE-2017-18777 · GHSA-qx7p-pcrw-fhh5

Certain NETGEAR devices are affected by administrative password disclosure.

LOW 34

Certain NETGEAR devices are affected by administrative password disclosure.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00284 Published 2020-04-22 No fix listed CWE-522

TI-2021-20637 CVE-2021-45550 · GHSA-hvp9-jp8f-v4wh

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00574 Published 2021-12-26 No fix listed CWE-77

TI-2019-14975 CVE-2019-20755 · GHSA-jjjm-2v77-2785

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 31

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00506 Published 2020-04-16 No fix listed CWE-787

TI-2019-14974 CVE-2019-20754 · GHSA-x7h9-rrcq-c95j

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00506 Published 2020-04-16 No fix listed CWE-120

TI-2017-13938 CVE-2017-18788 · GHSA-4vcj-p6rj-9c62

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00643 Published 2020-04-22 No fix listed CWE-74

TI-2018-15193 CVE-2018-21231 · GHSA-r5w9-rc55-vh5r

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 25

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.00472 Published 2020-04-24 No fix listed

TI-2018-15192 CVE-2018-21230 · GHSA-wx9j-wrx5-q4xr

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 25

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.0047 Published 2020-04-24 No fix listed

TI-2017-13935 CVE-2017-18785 · GHSA-3qp7-hh2h-39wp

Certain NETGEAR devices are affected by XSS.

LOW 23

Certain NETGEAR devices are affected by XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00501 Published 2020-04-22 No fix listed CWE-79

TI-2017-13921 CVE-2017-18769 · GHSA-w4f9-wxqm-hcwj

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files.

LOW 21

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00335 Published 2020-04-22 No fix listed CWE-200

Open these records in search →