NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

31 records in Ex8000 Firmware · all components

TI-2025-32159 CVE-2025-50526 · GHSA-qv6c-8jp7-85gh

Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via the switch_status function.

HIGH 82

Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via the switch_status function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01176 Published 2025-12-23 No fix listed CWE-77

TI-2025-28792 CVE-2025-45492 · GHSA-2pjg-x482-xwr4

Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the Iface parameter in the action_wireless function.

HIGH 82

Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the Iface parameter in the action_wireless function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01345 Published 2025-05-06 No fix listed CWE-77

TI-2025-28793 CVE-2025-45493 · GHSA-8x5c-7829-xgw6

Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in the action_bandwidth function.

HIGH 68

Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in the action_bandwidth function.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00897 Published 2025-12-23 No fix listed CWE-77

TI-2021-20706 CVE-2021-45619 · GHSA-h67v-rx96-6f59

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 47

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02588 Published 2021-12-26 No fix listed CWE-77

TI-2021-20705 CVE-2021-45618 · GHSA-8fp7-34g5-gw45

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0202 Published 2021-12-26 No fix listed CWE-77

TI-2021-16127 CVE-2021-38527 · GHSA-qccx-cxhf-2m4w

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01685 Published 2021-08-11 No fix listed CWE-77

TI-2018-15115 CVE-2018-21153 · GHSA-v5vw-fvmv-9vrj

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01582 Published 2020-04-27 No fix listed CWE-120

TI-2020-18244 CVE-2020-35800 · GHSA-3w6j-54mg-5cr4

Certain NETGEAR devices are affected by incorrect configuration of security settings.

MEDIUM 44

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.01628 Published 2020-12-29 No fix listed

TI-2020-18243 CVE-2020-35799 · GHSA-3mwp-vjrv-6crj

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

MEDIUM 44

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01204 Published 2020-12-29 No fix listed CWE-787

TI-2019-14950 CVE-2019-20730 · GHSA-wch4-qfc4-9f6m

Certain NETGEAR devices are affected by SQL injection.

MEDIUM 44

Certain NETGEAR devices are affected by SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00909 Published 2020-04-16 No fix listed CWE-89

TI-2022-10622 CVE-2022-27641 · GHSA-48fv-6rrf-3cqx

Integer overflow in NETGEAR R6700v3

MEDIUM 43

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01234 Published 2023-03-29 No fix listed CWE-190

TI-2020-16929 CVE-2020-27861 · GHSA-jwqc-9f7p-v456

OS command injection in NETGEAR Orbi

MEDIUM 42

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.02122 Published 2021-02-11 No fix listed CWE-78

TI-2021-13937 CVE-2021-34947 · GHSA-jj28-565j-58r3

Out-of-bounds write in NETGEAR R7800

MEDIUM 41

NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00549 Published 2024-05-07 No fix listed CWE-787

TI-2021-08795 CVE-2021-27255 · GHSA-h584-8p47-255w

Missing authentication in NETGEAR R7800

MEDIUM 41

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.014 Published 2021-03-05 No fix listed CWE-306

TI-2021-08793 CVE-2021-27253 · GHSA-xj23-fxfm-58rq

Heap-based buffer overflow in NETGEAR R7800

MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0125 Published 2021-04-14 No fix listed CWE-122

TI-2021-08792 CVE-2021-27252 · GHSA-gqcm-w2xr-9g8j

OS command injection in NETGEAR R7800

MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0124 Published 2021-04-14 No fix listed CWE-78

TI-2021-08796 CVE-2021-27256 · GHSA-7j9h-j7vq-452x

OS command injection in NETGEAR R7800

MEDIUM 40

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00963 Published 2021-03-05 No fix listed CWE-78

TI-2021-08791 CVE-2021-27251 · GHSA-2wc2-8hhf-wr42

Cleartext transmission of sensitive information in NETGEAR R7800

MEDIUM 40

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00811 Published 2021-04-14 No fix listed CWE-319

TI-2021-08794 CVE-2021-27254 · GHSA-qxg5-9hcj-qp59

Hard-coded credentials in NETGEAR R7800

LOW 39

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00516 Published 2021-03-05 No fix listed CWE-259

TI-2020-18231 CVE-2020-35787 · GHSA-6gcw-7qx9-8vhw

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 35

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00489 Published 2020-12-29 No fix listed CWE-120

TI-2021-16125 CVE-2021-38525 · GHSA-h98g-ff23-mc6v

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 34

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01019 Published 2021-08-11 No fix listed CWE-787

TI-2019-14909 CVE-2019-20689 · GHSA-qqvc-2cgm-c3hw

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 32

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00842 Published 2020-04-16 No fix listed CWE-77

TI-2019-14908 CVE-2019-20688 · GHSA-f43m-w22p-wcp2

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 32

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00842 Published 2020-04-16 No fix listed CWE-77

TI-2019-14971 CVE-2019-20751 · GHSA-cjg4-jg6m-g6pw

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 31

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00595 Published 2020-04-16 No fix listed CWE-787

TI-2019-14943 CVE-2019-20723 · GHSA-vcxg-5hc5-gw9m

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 31

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00506 Published 2020-04-16 No fix listed CWE-787

Open these records in search →