NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

54 records in Ex6200 Firmware · all components

TI-2023-20187 CVE-2023-38926 · GHSA-7q8g-j9m7-hg4r

Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the…

HIGH 73

Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wla_temp_ssid parameter at acosNvramConfig_set.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00961 Published 2023-08-07 No fix listed CWE-120

TI-2023-20186 CVE-2023-38925 · GHSA-f5hq-43p7-h62j

Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a…

HIGH 73

Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the http_passwd parameter in password.cgi.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.1524 Published 2023-08-07 No fix listed CWE-120

TI-2018-15124 CVE-2018-21162 · GHSA-m25v-6jm5-xmw4

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 48

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03437 Published 2020-04-23 No fix listed CWE-78

TI-2020-18240 CVE-2020-35796 · GHSA-c585-qfhx-g68f

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01299 Published 2020-12-29 No fix listed CWE-120

TI-2018-15115 CVE-2018-21153 · GHSA-v5vw-fvmv-9vrj

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01582 Published 2020-04-27 No fix listed CWE-120

TI-2018-15096 CVE-2018-21134 · GHSA-f6mj-xf48-98pp

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

MEDIUM 45

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01296 Published 2020-04-23 No fix listed CWE-787

TI-2025-03687 CVE-2025-4150 · GHSA-vv97-g4jh-67w7

Netgear EX6200 sub_54340 buffer overflow

MEDIUM 43

A vulnerability was found in Netgear EX6200 1.0.3.94.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01662 Published 2025-05-01 No fix listed CWE-119

TI-2025-03686 CVE-2025-4149 · GHSA-rfhm-m5c8-xx3j

Netgear EX6200 sub_54014 buffer overflow

MEDIUM 43

A vulnerability was found in Netgear EX6200 1.0.3.94.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01724 Published 2025-05-01 No fix listed CWE-119

TI-2025-03685 CVE-2025-4148 · GHSA-fq8g-w74w-m345

Netgear EX6200 sub_503FC buffer overflow

MEDIUM 43

A vulnerability was found in Netgear EX6200 1.0.3.94 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01724 Published 2025-05-01 No fix listed CWE-119

TI-2025-03683 CVE-2025-4146 · GHSA-wx5q-27xg-gppc

Netgear EX6200 sub_41940 buffer overflow

MEDIUM 43

A vulnerability, which was classified as critical, was found in Netgear EX6200 1.0.3.94.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0152 Published 2025-05-01 No fix listed CWE-119

TI-2022-10622 CVE-2022-27641 · GHSA-48fv-6rrf-3cqx

Integer overflow in NETGEAR R6700v3

MEDIUM 43

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01234 Published 2023-03-29 No fix listed CWE-190

TI-2025-03684 CVE-2025-4147 · GHSA-gv6p-p4mw-6rjj

Netgear EX6200 sub_47F7C buffer overflow

MEDIUM 42

A vulnerability has been found in Netgear EX6200 1.0.3.94 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0118 Published 2025-05-01 No fix listed CWE-119

TI-2025-03682 CVE-2025-4145 · GHSA-pq7v-55v9-vxqf

Netgear EX6200 sub_3D0BC buffer overflow

MEDIUM 42

A vulnerability, which was classified as critical, has been found in Netgear EX6200 1.0.3.94.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01222 Published 2025-05-01 No fix listed CWE-119

TI-2025-03679 CVE-2025-4142 · GHSA-gxrr-m392-473j

Netgear EX6200 sub_3C8EC buffer overflow

MEDIUM 42

A vulnerability has been found in Netgear EX6200 1.0.3.94 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01222 Published 2025-04-30 No fix listed CWE-119

TI-2025-03678 CVE-2025-4141 · GHSA-pqpc-g4m5-385m

Netgear EX6200 sub_3C03C buffer overflow

MEDIUM 42

A vulnerability, which was classified as critical, was found in Netgear EX6200 1.0.3.94.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0118 Published 2025-04-30 No fix listed CWE-119

TI-2020-16929 CVE-2020-27861 · GHSA-jwqc-9f7p-v456

OS command injection in NETGEAR Orbi

MEDIUM 42

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.02122 Published 2021-02-11 No fix listed CWE-78

TI-2021-13937 CVE-2021-34947 · GHSA-jj28-565j-58r3

Out-of-bounds write in NETGEAR R7800

MEDIUM 41

NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00549 Published 2024-05-07 No fix listed CWE-787

TI-2019-14954 CVE-2019-20734 · GHSA-45r5-vh4c-92vx

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

LOW 39

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00478 Published 2020-04-16 No fix listed CWE-120

TI-2018-15055 CVE-2018-21093 · GHSA-wgrg-fgrg-92cc

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 39

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00634 Published 2020-04-27 No fix listed CWE-787

TI-2017-13920 CVE-2017-18768 · GHSA-q43f-hqc8-97vg

Certain NETGEAR devices are affected by CSRF.

LOW 39

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0062 Published 2020-04-22 No fix listed CWE-352

TI-2017-13902 CVE-2017-18748 · GHSA-9868-qmp7-56c2

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 39

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00544 Published 2020-04-23 No fix listed

TI-2019-14911 CVE-2019-20691 · GHSA-wh8w-v6q4-fgcv

Certain NETGEAR devices are affected by CSRF.

LOW 38

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2020-04-16 No fix listed CWE-352

TI-2022-08475 CVE-2022-24655 · GHSA-j626-6whp-pj3p

A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1…

LOW 36

A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution of arbitrary code without authentication.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01124 Published 2022-03-18 No fix listed CWE-787

TI-2020-18231 CVE-2020-35787 · GHSA-6gcw-7qx9-8vhw

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 35

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00489 Published 2020-12-29 No fix listed CWE-120

TI-2021-16125 CVE-2021-38525 · GHSA-h98g-ff23-mc6v

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 34

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01019 Published 2021-08-11 No fix listed CWE-787

Open these records in search →