Priority CRITICAL 97KEV
NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 b…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.99803 · Published 2016-12-14 · No fix listed CWE-352
Priority HIGH 80
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.87343 · Published 2020-07-28 · No fix listed CWE-121
Priority HIGH 79
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.84676 · Published 2020-07-28 · No fix listed CWE-305
Priority HIGH 73
Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are vulnerable to Command Injection.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03096 · Published 2023-06-06 · No fix listed CWE-77
Priority MEDIUM 61
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.25439 · Published 2023-03-29 · No fix listed CWE-120
Priority MEDIUM 53
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R6400, R6700, R7000, R7850, R7900, R8000, RS400, and XR300 routers with firmware 1.0.4.84_10.0.58.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08536 · Published 2020-08-19 · No fix listed CWE-121
Priority MEDIUM 51
Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute arbitrary code and cause a denial ofservice via the getInputData parameter of the…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01235 · Published 2023-04-26 · No fix listed CWE-120
Priority MEDIUM 49
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, an…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.08656 · Published 2021-02-11 · No fix listed CWE-288
Priority MEDIUM 48
The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code execution as root via a MitM attack.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.10014 · Published 2021-09-21 · No fix listed CWE-319
Priority MEDIUM 48
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03437 · Published 2020-04-23 · No fix listed CWE-78
Priority MEDIUM 47
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.06419 · Published 2020-07-28 · No fix listed CWE-121
Priority MEDIUM 47
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0238 · Published 2020-04-15 · No fix listed CWE-77
Priority MEDIUM 46
Certain NETGEAR devices are affected by lack of access control at the function level.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01349 · Published 2021-08-11 · No fix listed
Priority MEDIUM 45
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.01093 · Published 2021-03-23 · No fix listed CWE-120
Priority MEDIUM 45
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01299 · Published 2020-12-29 · No fix listed CWE-120
Priority MEDIUM 45
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01296 · Published 2020-04-23 · No fix listed CWE-787
Priority MEDIUM 44
Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03225 · Published 2021-12-30 · No fix listed CWE-78
Priority MEDIUM 44
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01204 · Published 2020-12-29 · No fix listed CWE-120
Priority MEDIUM 44
Certain NETGEAR devices are affected by authentication bypass.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01064 · Published 2020-10-09 · No fix listed
Priority MEDIUM 44
Certain NETGEAR devices are affected by SQL injection.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00909 · Published 2020-04-16 · No fix listed CWE-89
Priority MEDIUM 44
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.03262 · Published 2020-04-23 · No fix listed CWE-74
Priority MEDIUM 43
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01432 · Published 2023-03-29 · No fix listed CWE-121
Priority MEDIUM 43
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01277 · Published 2023-03-29 · No fix listed CWE-306
Priority MEDIUM 43
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01234 · Published 2023-03-29 · No fix listed CWE-190
Priority MEDIUM 43
Certain NETGEAR devices are affected by weak cryptography.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00567 · Published 2021-12-26 · No fix listed CWE-327
Load more