Read the docs

NETGEAR

Records1365All Threatist records
Exploited (KEV)8In CISA KEV
CVSS critical217CVSS 9.0–10.0
CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV
TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability Priority CRITICAL 94KEV 2022-09-08TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability Priority CRITICAL 100KEV 2022-03-25TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability Priority CRITICAL 100KEV 2022-03-25TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability Priority CRITICAL 97KEV 2022-03-25TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records
R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

16 records in Ex7700 Firmware · all components

TI-2020-16929 CVE-2020-27861 · GHSA-jwqc-9f7p-v456

OS command injection in NETGEAR Orbi

Priority MEDIUM 42

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.02122 Published 2021-02-11 No fix listed CWE-78
TI-2021-13937 CVE-2021-34947 · GHSA-jj28-565j-58r3

Out-of-bounds write in NETGEAR R7800

Priority MEDIUM 41

NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00549 Published 2024-05-07 No fix listed CWE-787
TI-2021-08795 CVE-2021-27255 · GHSA-h584-8p47-255w

Missing authentication in NETGEAR R7800

Priority MEDIUM 41

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.014 Published 2021-03-05 No fix listed CWE-306
TI-2021-08793 CVE-2021-27253 · GHSA-xj23-fxfm-58rq

Heap-based buffer overflow in NETGEAR R7800

Priority MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0125 Published 2021-04-14 No fix listed CWE-122
TI-2021-08792 CVE-2021-27252 · GHSA-gqcm-w2xr-9g8j

OS command injection in NETGEAR R7800

Priority MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0124 Published 2021-04-14 No fix listed CWE-78
TI-2021-08796 CVE-2021-27256 · GHSA-7j9h-j7vq-452x

OS command injection in NETGEAR R7800

Priority MEDIUM 40

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00963 Published 2021-03-05 No fix listed CWE-78
TI-2021-08791 CVE-2021-27251 · GHSA-2wc2-8hhf-wr42

Cleartext transmission of sensitive information in NETGEAR R7800

Priority MEDIUM 40

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00811 Published 2021-04-14 No fix listed CWE-319
TI-2021-08794 CVE-2021-27254 · GHSA-qxg5-9hcj-qp59

Hard-coded credentials in NETGEAR R7800

Priority LOW 39

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00516 Published 2021-03-05 No fix listed CWE-259
TI-2021-08797 CVE-2021-27257 · GHSA-q57h-78h9-m59j

Improper certificate validation in NETGEAR R7800

Priority LOW 29

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware version 1.0.2.76.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00323 Published 2021-03-05 No fix listed CWE-295
Open these records in search →