Priority HIGH 71
A vulnerability was found in Netgear EX6100 1.0.2.28_1.1.138.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00985 · Published 2025-06-23 · No fix listed CWE-119
Priority MEDIUM 45
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01685 · Published 2021-08-11 · No fix listed CWE-77
Priority MEDIUM 45
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01299 · Published 2020-12-29 · No fix listed CWE-120
Priority MEDIUM 45
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01582 · Published 2020-04-27 · No fix listed CWE-120
Priority MEDIUM 45
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01296 · Published 2020-04-23 · No fix listed CWE-787
Priority MEDIUM 41
Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operating_mode.cgi via the ap_mode parameter.
CVSS 3.1HIGH 8.4· Adjacent network · High privileges · No interaction · EPSS 0.01044 · Published 2024-10-14 · No fix listed CWE-78
Priority MEDIUM 41
NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00549 · Published 2024-05-07 · No fix listed CWE-787
Priority LOW 39
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00478 · Published 2020-04-16 · No fix listed CWE-120
Priority LOW 39
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00634 · Published 2020-04-27 · No fix listed CWE-787
Priority LOW 39
Certain NETGEAR devices are affected by CSRF.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0062 · Published 2020-04-22 · No fix listed CWE-352
Priority LOW 38
Certain NETGEAR devices are affected by CSRF.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0046 · Published 2020-04-16 · No fix listed CWE-352
Priority LOW 38
Certain NETGEAR devices are affected by CSRF.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0046 · Published 2020-04-24 · No fix listed CWE-352
Priority LOW 36
A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution of arbitrary code without authentication.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01124 · Published 2022-03-18 · No fix listed CWE-787
Priority LOW 34
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01078 · Published 2020-04-23 · No fix listed CWE-787
Priority LOW 34
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0135 · Published 2020-04-27 · No fix listed CWE-120
Priority LOW 32
Certain NETGEAR devices are affected by command injection by an authenticated user.
CVSS 3.1MEDIUM 6.8· Adjacent network · High privileges · No interaction · EPSS 0.00842 · Published 2020-04-16 · No fix listed CWE-77
Priority LOW 32
Certain NETGEAR devices are affected by command injection by an authenticated user.
CVSS 3.1MEDIUM 6.8· Adjacent network · High privileges · No interaction · EPSS 0.00842 · Published 2020-04-16 · No fix listed CWE-77
Priority LOW 32
Certain NETGEAR devices are affected by command injection by an authenticated user.
CVSS 3.1MEDIUM 6.8· Adjacent network · High privileges · No interaction · EPSS 0.0085 · Published 2020-04-24 · No fix listed CWE-74
Priority LOW 32
Certain NETGEAR devices are affected by command injection by an authenticated user.
CVSS 3.1MEDIUM 6.8· Adjacent network · High privileges · No interaction · EPSS 0.0085 · Published 2020-04-22 · No fix listed CWE-74
Priority LOW 31
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.
CVSS 3.1MEDIUM 6.8· Adjacent network · High privileges · No interaction · EPSS 0.00595 · Published 2020-04-16 · No fix listed CWE-787
Priority LOW 31
Certain NETGEAR devices are affected by command injection by an authenticated user.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00654 · Published 2020-04-16 · No fix listed CWE-77
Priority LOW 31
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.
CVSS 3.1MEDIUM 6.8· Adjacent network · High privileges · No interaction · EPSS 0.00506 · Published 2020-04-16 · No fix listed CWE-787
Priority LOW 31
Certain NETGEAR devices are affected by command injection by an authenticated user.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00643 · Published 2020-04-22 · No fix listed CWE-74
Priority LOW 30
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00349 · Published 2020-04-16 · No fix listed CWE-787
Priority LOW 30
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.0033 · Published 2020-04-16 · No fix listed CWE-787
Load more