NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

27 records in R6850 Firmware · all components

TI-2024-20289 CVE-2024-30568 · GHSA-9fgf-m63q-p2m6

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter.

HIGH 82

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.46918 Published 2024-04-03 No fix listed CWE-94

TI-2024-20293 CVE-2024-30572 · GHSA-7r36-7f54-54ff

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntp_server parameter.

HIGH 70

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntp_server parameter.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01484 Published 2024-04-03 No fix listed CWE-77

TI-2024-20291 CVE-2024-30570 · GHSA-wppr-m5h5-pr8g

An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to…

MEDIUM 63

An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01221 Published 2024-04-03 No fix listed CWE-200

TI-2021-20598 CVE-2021-45511 · GHSA-wr8v-6jgr-244v

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 60

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18885 Published 2021-12-26 No fix listed

TI-2020-16934 CVE-2020-27866 · GHSA-mj6p-ghhj-r3q4

Authentication bypass in NETGEAR Multiple Routers

MEDIUM 49

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, an…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.08656 Published 2021-02-11 No fix listed CWE-288

TI-2024-20292 CVE-2024-30571 · GHSA-5fg3-793p-9qxp

An information leak in the BRS_top.html component of Netgear R6850 v1.1.0.88 allows…

MEDIUM 48

An information leak in the BRS_top.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.13848 Published 2024-04-03 No fix listed CWE-200

TI-2021-20588 CVE-2021-45501 · GHSA-hwc2-6cgc-779p

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 46

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0201 Published 2021-12-26 No fix listed

TI-2021-16116 CVE-2021-38516 · GHSA-73gm-85xf-8699

Certain NETGEAR devices are affected by lack of access control at the function level.

MEDIUM 46

Certain NETGEAR devices are affected by lack of access control at the function level.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01349 Published 2021-08-11 No fix listed

TI-2021-09955 CVE-2021-29068 · GHSA-4223-wcr9-hvjq

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01093 Published 2021-03-23 No fix listed CWE-120

TI-2021-20731 CVE-2021-45644 · GHSA-82w7-3942-wg3x

Certain NETGEAR devices are affected by incorrect configuration of security settings.

MEDIUM 44

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01114 Published 2021-12-26 No fix listed

TI-2021-13855 CVE-2021-34865 · GHSA-5wc2-pfcw-568j

Improper authentication in NETGEAR Multiple Routers

MEDIUM 44

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.03075 Published 2022-01-25 No fix listed CWE-287

TI-2020-18244 CVE-2020-35800 · GHSA-3w6j-54mg-5cr4

Certain NETGEAR devices are affected by incorrect configuration of security settings.

MEDIUM 44

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.01628 Published 2020-12-29 No fix listed

TI-2020-18239 CVE-2020-35795 · GHSA-37xm-62j3-375v

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 44

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01204 Published 2020-12-29 No fix listed CWE-120

TI-2024-20290 CVE-2024-30569 · GHSA-pgrq-g235-jm37

An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to…

MEDIUM 43

An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01907 Published 2024-04-03 No fix listed CWE-200

TI-2020-16940 CVE-2020-27872 · GHSA-6qj7-98xg-fpgf

Exposure of resource to wrong sphere in NETGEAR R7450

MEDIUM 40

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00937 Published 2021-02-04 No fix listed CWE-642

TI-2021-20734 CVE-2021-45647 · GHSA-wgj8-hg3j-j44v

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 36

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01346 Published 2021-12-26 No fix listed CWE-200

TI-2021-20621 CVE-2021-45534 · GHSA-93cf-3r2j-7pmj

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 36

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01092 Published 2021-12-26 No fix listed CWE-77

TI-2020-16935 CVE-2020-27867 · GHSA-9xcx-66r3-hp2h

Command injection in NETGEAR Multiple Routers

LOW 35

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, a…

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.02331 Published 2021-02-11 No fix listed CWE-77

TI-2020-16941 CVE-2020-27873 · GHSA-cj3p-75j4-74xf

Improper access control in NETGEAR R7450

LOW 30

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00628 Published 2021-02-04 No fix listed CWE-284

TI-2020-13175 CVE-2020-17409 · GHSA-x2v7-676c-4x7c

Authentication bypass in NETGEAR Multiple Routers

LOW 30

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers with firmware 1.0.66.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00697 Published 2020-10-13 No fix listed CWE-288

TI-2020-10374 CVE-2020-13245 · GHSA-56v7-8wp3-r2g7

Certain NETGEAR devices are affected by Missing SSL Certificate Validation.

LOW 27

Certain NETGEAR devices are affected by Missing SSL Certificate Validation.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00502 Published 2020-05-28 No fix listed CWE-295

TI-2021-20762 CVE-2021-45675 · GHSA-jr8h-85hr-jr68

Certain NETGEAR devices are affected by stored XSS.

LOW 26

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 5.8 Local High privileges User interaction EPSS 0.00345 Published 2021-12-26 No fix listed CWE-79

TI-2025-11858 CVE-2025-12942 · GHSA-83g8-4c46-g95x

Improper input validation in NETGEAR R6260 and R6850

LOW 24

Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.T…