NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

15 records in Lax20 Firmware · all components

TI-2023-18149 CVE-2023-36187 · GHSA-qpcg-54gx-2mvc

Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote…

MEDIUM 51

Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01133 Published 2023-09-01 No fix listed CWE-120

TI-2021-20709 CVE-2021-45622 · GHSA-p59w-cx85-6vcv

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 47

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02366 Published 2021-12-26 No fix listed CWE-77

TI-2021-20699 CVE-2021-45612 · GHSA-95h9-7v59-h6gr

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 47

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02486 Published 2021-12-26 No fix listed CWE-77

TI-2021-20708 CVE-2021-45621 · GHSA-2v34-645j-235m

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02037 Published 2021-12-26 No fix listed CWE-77

TI-2021-20707 CVE-2021-45620 · GHSA-x8xp-278j-cqh4

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0202 Published 2021-12-26 No fix listed CWE-77

TI-2021-20703 CVE-2021-45616 · GHSA-p675-68xc-c9pr

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0202 Published 2021-12-26 No fix listed CWE-77

TI-2021-20701 CVE-2021-45614 · GHSA-3fm5-j2pv-wjf2

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0202 Published 2021-12-26 No fix listed CWE-77

TI-2021-20700 CVE-2021-45613 · GHSA-q425-2cw8-64wv

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0202 Published 2021-12-26 No fix listed CWE-77

TI-2022-10626 CVE-2022-27645 · GHSA-jv3h-vgc4-3286

Missing authentication in NETGEAR R6700v3

MEDIUM 43

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01277 Published 2023-03-29 No fix listed CWE-306

TI-2021-13972 CVE-2021-34982 · GHSA-3g79-p8hq-4qgp

Stack-based buffer overflow in NETGEAR Multiple Routers

MEDIUM 41

NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00581 Published 2024-05-07 No fix listed CWE-121

TI-2022-10628 CVE-2022-27647 · GHSA-7pr7-x6mw-h647

OS command injection in NETGEAR R6700v3

MEDIUM 40

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.0148 Published 2023-03-29 No fix listed CWE-78

TI-2022-10623 CVE-2022-27642 · GHSA-w94x-h737-f6h9

Incorrect authorization in NETGEAR R6700v3

MEDIUM 40

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00878 Published 2023-03-29 No fix listed CWE-863

TI-2021-20636 CVE-2021-45549 · GHSA-m6m8-v67p-7g6q

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 37

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00633 Published 2021-12-26 No fix listed CWE-77

TI-2021-13973 CVE-2021-34983 · GHSA-2r4f-jfx8-mhm3

Missing authentication in NETGEAR Multiple Routers

LOW 29

NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00329 Published 2024-05-07 No fix listed CWE-306

TI-2021-20691 CVE-2021-45604 · GHSA-cxv8-ggg4-fhvm

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 21

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 4.5 Adjacent network High privileges No interaction EPSS 0.00381 Published 2021-12-26 No fix listed CWE-787

Open these records in search →