TI-2021-20598 CVE-2021-45511 · GHSA-wr8v-6jgr-244v
Certain NETGEAR devices are affected by authentication bypass.
Priority MEDIUM 60
Certain NETGEAR devices are affected by authentication bypass.
NETGEAR
Records1365All Threatist records
Exploited (KEV)8In CISA KEV
CVSS critical217CVSS 9.0–10.0
CVSS high591CVSS 7.0–8.9
Exploited now
NETGEAR records in CISA KEVTI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
32 records in R6230 Firmware · all components
TI-2020-16934 CVE-2020-27866 · GHSA-mj6p-ghhj-r3q4
Authentication bypass in NETGEAR Multiple Routers
Priority MEDIUM 49
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, an…
TI-2021-20588 CVE-2021-45501 · GHSA-hwc2-6cgc-779p
Certain NETGEAR devices are affected by authentication bypass.
Priority MEDIUM 46
Certain NETGEAR devices are affected by authentication bypass.
TI-2021-16116 CVE-2021-38516 · GHSA-73gm-85xf-8699
Certain NETGEAR devices are affected by lack of access control at the function level.
Priority MEDIUM 46
Certain NETGEAR devices are affected by lack of access control at the function level.
TI-2020-16335 CVE-2020-26908 · GHSA-gw77-ghxg-2429
Certain NETGEAR devices are affected by authentication bypass.
Priority MEDIUM 46
Certain NETGEAR devices are affected by authentication bypass.
TI-2021-09955 CVE-2021-29068 · GHSA-4223-wcr9-hvjq
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.
Priority MEDIUM 45
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.
TI-2021-20731 CVE-2021-45644 · GHSA-82w7-3942-wg3x
Certain NETGEAR devices are affected by incorrect configuration of security settings.
Priority MEDIUM 44
Certain NETGEAR devices are affected by incorrect configuration of security settings.
TI-2021-13855 CVE-2021-34865 · GHSA-5wc2-pfcw-568j
Improper authentication in NETGEAR Multiple Routers
Priority MEDIUM 44
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers.
TI-2020-18244 CVE-2020-35800 · GHSA-3w6j-54mg-5cr4
Certain NETGEAR devices are affected by incorrect configuration of security settings.
Priority MEDIUM 44
Certain NETGEAR devices are affected by incorrect configuration of security settings.
TI-2020-18243 CVE-2020-35799 · GHSA-3mwp-vjrv-6crj
Certain NETGEAR devices are affected by a stack-based buffer overflow by an…
Priority MEDIUM 44
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.
TI-2020-18239 CVE-2020-35795 · GHSA-37xm-62j3-375v
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
Priority MEDIUM 44
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
TI-2022-10622 CVE-2022-27641 · GHSA-48fv-6rrf-3cqx
Integer overflow in NETGEAR R6700v3
Priority MEDIUM 43
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.
TI-2021-20638 CVE-2021-45551 · GHSA-fxgh-826p-6cx6
Certain NETGEAR devices are affected by command injection by an authenticated user.
Priority MEDIUM 41
Certain NETGEAR devices are affected by command injection by an authenticated user.
TI-2022-19264 CVE-2022-40619 · GHSA-5gwm-h32x-cppq
FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems…
Priority MEDIUM 40
FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices.
TI-2020-16940 CVE-2020-27872 · GHSA-6qj7-98xg-fpgf
Exposure of resource to wrong sphere in NETGEAR R7450
Priority MEDIUM 40
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers.
TI-2021-20728 CVE-2021-45641 · GHSA-9j28-327w-4vrh
Certain NETGEAR devices are affected by incorrect configuration of security settings.
Priority LOW 39
Certain NETGEAR devices are affected by incorrect configuration of security settings.
TI-2020-09465 CVE-2020-11788 · GHSA-r27v-956v-r6h4
Certain NETGEAR devices are affected by authentication bypass.
Priority LOW 39
Certain NETGEAR devices are affected by authentication bypass.
TI-2019-14876 CVE-2019-20656 · GHSA-7hvj-fm99-26hr
Certain NETGEAR devices are affected by a hardcoded password.
Priority LOW 38
Certain NETGEAR devices are affected by a hardcoded password.
TI-2020-16356 CVE-2020-26929 · GHSA-3q28-mmq2-xhcr
Certain NETGEAR devices are affected by command injection by an authenticated user.
Priority LOW 37
Certain NETGEAR devices are affected by command injection by an authenticated user.
TI-2019-14877 CVE-2019-20657 · GHSA-45c5-53rx-cg43
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.
Priority LOW 37
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.
TI-2021-20734 CVE-2021-45647 · GHSA-wgj8-hg3j-j44v
Certain NETGEAR devices are affected by disclosure of sensitive information.
Priority LOW 36
Certain NETGEAR devices are affected by disclosure of sensitive information.
TI-2021-20621 CVE-2021-45534 · GHSA-93cf-3r2j-7pmj
Certain NETGEAR devices are affected by command injection by an authenticated user.
Priority LOW 36
Certain NETGEAR devices are affected by command injection by an authenticated user.
TI-2022-19265 CVE-2022-40620 · GHSA-8cgh-w254-67rw
FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems…
Priority LOW 35
FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism.
TI-2020-16935 CVE-2020-27867 · GHSA-9xcx-66r3-hp2h
Command injection in NETGEAR Multiple Routers
Priority LOW 35
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, a…
TI-2021-20744 CVE-2021-45657 · GHSA-3r3x-75vr-q97w
Certain NETGEAR devices are affected by server-side injection.
Priority LOW 34
Certain NETGEAR devices are affected by server-side injection.