NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

55 records in R6300 Firmware · all components

TI-2017-03537 CVE-2017-5521 · GHSA-6cqf-r56h-g5xf

An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2…

CRITICAL 94KEV

An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.89353 Published 2017-01-17 No fix listed

TI-2018-15124 CVE-2018-21162 · GHSA-m25v-6jm5-xmw4

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 48

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03437 Published 2020-04-23 No fix listed CWE-78

TI-2018-15096 CVE-2018-21134 · GHSA-f6mj-xf48-98pp

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

MEDIUM 45

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01296 Published 2020-04-23 No fix listed CWE-787

TI-2019-14950 CVE-2019-20730 · GHSA-wch4-qfc4-9f6m

Certain NETGEAR devices are affected by SQL injection.

MEDIUM 44

Certain NETGEAR devices are affected by SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00909 Published 2020-04-16 No fix listed CWE-89

TI-2022-12382 CVE-2022-30078 · GHSA-rhrp-724q-r9w5

NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2…

MEDIUM 42

NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharac…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01888 Published 2022-09-07 No fix listed CWE-78

TI-2021-08779 CVE-2021-27239 · GHSA-hqww-3wrx-q5gv

Stack-based buffer overflow in NETGEAR Multiple Routers

LOW 39

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00772 Published 2021-03-29 No fix listed CWE-121

TI-2019-14973 CVE-2019-20753 · GHSA-52f4-cjg2-mpf2

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 39

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00565 Published 2020-04-16 No fix listed CWE-787

TI-2019-14954 CVE-2019-20734 · GHSA-45r5-vh4c-92vx

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

LOW 39

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00478 Published 2020-04-16 No fix listed CWE-120

TI-2019-12969 CVE-2019-17372 · GHSA-j647-7p9h-x2g4

Certain NETGEAR devices allow remote attackers to disable all authentication requirements…

LOW 39

Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01659 Published 2019-10-09 No fix listed CWE-287

TI-2018-15055 CVE-2018-21093 · GHSA-wgrg-fgrg-92cc

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 39

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00634 Published 2020-04-27 No fix listed CWE-787

TI-2017-13923 CVE-2017-18772 · GHSA-p9gq-h366-q2cq

Certain NETGEAR devices are affected by authentication bypass.

LOW 39

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00603 Published 2020-04-22 No fix listed CWE-287

TI-2017-13909 CVE-2017-18756 · GHSA-645r-m8hj-xrhv

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 39

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00546 Published 2020-04-22 No fix listed

TI-2017-13898 CVE-2017-18744 · GHSA-325f-8g4v-g98x

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

LOW 39

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00565 Published 2020-04-23 No fix listed CWE-120

TI-2017-13897 CVE-2017-18743 · GHSA-5rhv-5888-hp8c

Certain NETGEAR devices are affected by authentication bypass.

LOW 39

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00603 Published 2020-04-23 No fix listed CWE-287

TI-2017-13886 CVE-2017-18732 · GHSA-phvj-38w6-cv36

Certain NETGEAR devices are affected by authentication bypass.

LOW 39

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0079 Published 2020-04-23 No fix listed CWE-287

TI-2017-13996 CVE-2017-18848 · GHSA-7rgh-8689-572j

Certain NETGEAR devices are affected by CSRF.

LOW 38

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2020-04-20 No fix listed CWE-352

TI-2017-13944 CVE-2017-18794 · GHSA-m3g4-f98h-fg66

Certain NETGEAR devices are affected by command injection.

LOW 38

Certain NETGEAR devices are affected by command injection.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00777 Published 2020-04-21 No fix listed CWE-74

TI-2017-13908 CVE-2017-18755 · GHSA-ff2h-w98c-mqf9

Certain NETGEAR devices are affected by CSRF.

LOW 38

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2020-04-22 No fix listed CWE-352

TI-2017-13896 CVE-2017-18742 · GHSA-w4wg-rr38-rg8f

Certain NETGEAR devices are affected by CSRF.

LOW 38

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2020-04-23 No fix listed CWE-352

TI-2020-18231 CVE-2020-35787 · GHSA-6gcw-7qx9-8vhw

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 35

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00489 Published 2020-12-29 No fix listed CWE-120

TI-2018-15101 CVE-2018-21139 · GHSA-87jj-5mq8-98pw

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 35

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01188 Published 2020-04-23 No fix listed CWE-200

TI-2017-13949 CVE-2017-18799 · GHSA-rc9m-wr77-pxf4

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 35

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00979 Published 2020-04-21 No fix listed CWE-20

TI-2016-09094 CVE-2016-11059 · GHSA-pjvf-pcx9-852h

Certain NETGEAR devices are affected by password exposure.

LOW 35

Certain NETGEAR devices are affected by password exposure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01071 Published 2020-04-28 No fix listed CWE-200

TI-2021-16125 CVE-2021-38525 · GHSA-h98g-ff23-mc6v

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 34

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01019 Published 2021-08-11 No fix listed CWE-787

TI-2021-16119 CVE-2021-38519 · GHSA-7f62-cq2q-qjc7

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 34

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01381 Published 2021-08-11 No fix listed CWE-77

Open these records in search →