NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

8 records in Lbr1020 Firmware · all components

TI-2021-20706 CVE-2021-45619 · GHSA-h67v-rx96-6f59

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 47

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02588 Published 2021-12-26 No fix listed CWE-77

TI-2022-10627 CVE-2022-27646 · GHSA-qjg8-7gjq-vxf4

Stack-based buffer overflow in NETGEAR R6700v3

MEDIUM 43

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01432 Published 2023-03-29 No fix listed CWE-121

TI-2021-13937 CVE-2021-34947 · GHSA-jj28-565j-58r3

Out-of-bounds write in NETGEAR R7800

MEDIUM 41

NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00549 Published 2024-05-07 No fix listed CWE-787

TI-2022-10625 CVE-2022-27644 · GHSA-rvc6-cvq7-4g2q

Improper certificate validation in NETGEAR R6700v3

LOW 38

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00336 Published 2023-03-29 No fix listed CWE-295

TI-2021-20689 CVE-2021-45602 · GHSA-g3q6-9jxv-cjjg

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 35

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00731 Published 2021-12-26 No fix listed CWE-78

TI-2021-20735 CVE-2021-45648 · GHSA-hhm5-85r6-q9w9

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 34

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00809 Published 2021-12-26 No fix listed CWE-200

TI-2021-20690 CVE-2021-45603 · GHSA-qx9q-hrrj-rj5g

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 28

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00598 Published 2021-12-26 No fix listed CWE-200

TI-2026-08097 CVE-2026-9212 · GHSA-wq28-w638-7xcv

Insufficient authentication and input validation in certain NETGEAR products

LOW 27

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.

CVSS 4.0MEDIUM 5.6 Adjacent network Low privileges No interaction EPSS 0.0027 Published 2026-06-09 Fixed in V2.6.4.60, V2.7.6.8 +8 CWE-20

Open these records in search →

Critical	217
High	591
Medium	535
Low	22
No CVSS	0