NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

44 records in Ex6120 Firmware · all components

TI-2022-10624 CVE-2022-27643 · GHSA-h8wj-xxvx-cv2r

Buffer overflow in NETGEAR R6700v3

MEDIUM 61

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.25439 Published 2023-03-29 No fix listed CWE-120

TI-2021-13978 CVE-2021-34991 · GHSA-4fwh-3qpr-42ff

Stack-based buffer overflow in NETGEAR R6400v2

MEDIUM 47

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.05714 Published 2021-11-15 No fix listed CWE-121

TI-2021-20708 CVE-2021-45621 · GHSA-2v34-645j-235m

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02037 Published 2021-12-26 No fix listed CWE-77

TI-2020-18240 CVE-2020-35796 · GHSA-c585-qfhx-g68f

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01299 Published 2020-12-29 No fix listed CWE-120

TI-2018-15096 CVE-2018-21134 · GHSA-f6mj-xf48-98pp

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

MEDIUM 45

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01296 Published 2020-04-23 No fix listed CWE-787

TI-2020-18244 CVE-2020-35800 · GHSA-3w6j-54mg-5cr4

Certain NETGEAR devices are affected by incorrect configuration of security settings.

MEDIUM 44

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.01628 Published 2020-12-29 No fix listed

TI-2021-20599 CVE-2021-45512 · GHSA-59h7-2c4x-36qm

Certain NETGEAR devices are affected by weak cryptography.

MEDIUM 43

Certain NETGEAR devices are affected by weak cryptography.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00567 Published 2021-12-26 No fix listed CWE-327

TI-2025-03677 CVE-2025-4140 · GHSA-mf3m-m2fx-pq76

Netgear EX6120 sub_30394 buffer overflow

MEDIUM 42

A vulnerability, which was classified as critical, has been found in Netgear EX6120 1.0.3.94.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01222 Published 2025-04-30 No fix listed CWE-119

TI-2025-03676 CVE-2025-4139 · GHSA-w56q-jx3j-44rq

Netgear EX6120 fwAcosCgiInbound buffer overflow

MEDIUM 42

A vulnerability classified as critical was found in Netgear EX6120 1.0.0.68.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01167 Published 2025-04-30 No fix listed CWE-119

TI-2021-12058 CVE-2021-32122 · GHSA-37f4-hx4j-c54c

Certain NETGEAR devices are affected by CSRF.

MEDIUM 42

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00429 Published 2021-08-10 No fix listed CWE-352

TI-2024-23454 CVE-2024-35519 · GHSA-6vmj-9xjc-fxmr

Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are…

MEDIUM 41

Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operating_mode.cgi via the ap_mode parameter.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.01044 Published 2024-10-14 No fix listed CWE-78

TI-2024-23453 CVE-2024-35518 · GHSA-mx7j-q788-jq8x

Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in genie_fix2.cgi via the wan_dns1_pri parameter.

MEDIUM 41

Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in genie_fix2.cgi via the wan_dns1_pri parameter.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.01048 Published 2024-10-14 No fix listed CWE-77

TI-2021-13972 CVE-2021-34982 · GHSA-3g79-p8hq-4qgp

Stack-based buffer overflow in NETGEAR Multiple Routers

MEDIUM 41

NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00581 Published 2024-05-07 No fix listed CWE-121

TI-2021-20728 CVE-2021-45641 · GHSA-9j28-327w-4vrh

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 39

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00718 Published 2021-12-26 No fix listed

TI-2019-14954 CVE-2019-20734 · GHSA-45r5-vh4c-92vx

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

LOW 39

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00478 Published 2020-04-16 No fix listed CWE-120

TI-2018-15055 CVE-2018-21093 · GHSA-wgrg-fgrg-92cc

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 39

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00634 Published 2020-04-27 No fix listed CWE-787

TI-2017-13923 CVE-2017-18772 · GHSA-p9gq-h366-q2cq

Certain NETGEAR devices are affected by authentication bypass.

LOW 39

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00603 Published 2020-04-22 No fix listed CWE-287

TI-2021-20613 CVE-2021-45526 · GHSA-c8w9-7pxw-2m9j

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 38

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00465 Published 2021-12-26 No fix listed CWE-120

TI-2019-14911 CVE-2019-20691 · GHSA-wh8w-v6q4-fgcv

Certain NETGEAR devices are affected by CSRF.

LOW 38

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2020-04-16 No fix listed CWE-352

TI-2021-20620 CVE-2021-45533 · GHSA-36rp-gvh3-pg5v

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 37

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00631 Published 2021-12-26 No fix listed CWE-77

TI-2018-15125 CVE-2018-21163 · GHSA-j5rp-qhhj-8vw3

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 34

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01078 Published 2020-04-23 No fix listed CWE-787

TI-2018-15118 CVE-2018-21156 · GHSA-9f7j-2669-24wh

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 34

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0135 Published 2020-04-27 No fix listed CWE-120

TI-2021-20727 CVE-2021-45640 · GHSA-6rr5-9j7h-58cj

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 33

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0065 Published 2021-12-26 No fix listed

TI-2019-14952 CVE-2019-20732 · GHSA-6qwv-4g82-ff2c

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00654 Published 2020-04-16 No fix listed CWE-77

TI-2019-14957 CVE-2019-20737 · GHSA-h966-gw6c-fp38

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 30

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00349 Published 2020-04-16 No fix listed CWE-787

Open these records in search →