NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

156 records in R7000p Firmware · all components

TI-2024-34909 CVE-2024-52022 · GHSA-gv3h-6f48-rrfp

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were…

HIGH 70

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component wlg_adv.cgi via the apmode_gateway parameter.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01 Published 2024-11-05 No fix listed CWE-77

TI-2024-34209 CVE-2024-51021 · GHSA-m2pm-j5cr-9fm9

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to…

HIGH 70

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a command injection vulnerability via the wan_gateway parameter at genie_fix2.cgi.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00848 Published 2024-11-05 No fix listed CWE-78

TI-2024-34198 CVE-2024-51010 · GHSA-pf38-5qmv-cmhv

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were…

HIGH 70

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component ap_mode.cgi via the apmode_gateway parameter.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00963 Published 2024-11-05 No fix listed CWE-78

TI-2024-12039 CVE-2024-12988 · GHSA-9jgq-4mjq-qcc9

Netgear R6900P/R7000P HTTP Header sub_16C4C buffer overflow

MEDIUM 64

A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00886 Published 2024-12-27 No fix listed CWE-119

TI-2022-10624 CVE-2022-27643 · GHSA-h8wj-xxvx-cv2r

Buffer overflow in NETGEAR R6700v3

MEDIUM 61

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.25439 Published 2023-03-29 No fix listed CWE-120

TI-2024-34916 CVE-2024-52030 · GHSA-qmvj-5x98-pxr6

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the…

MEDIUM 59

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at ru_wan_flow.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34915 CVE-2024-52029 · GHSA-7h26-mwqv-pxpv

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the…

MEDIUM 59

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at genie_pptp.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00312 Published 2024-11-05 No fix listed CWE-120

TI-2024-34914 CVE-2024-52028 · GHSA-vhp8-3pj4-3mvp

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the…

MEDIUM 59

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at wiz_pptp.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00312 Published 2024-11-05 No fix listed CWE-120

TI-2024-34913 CVE-2024-52026 · GHSA-rcj3-p7jf-6xjp

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to…

MEDIUM 59

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at bsw_pppoe.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00312 Published 2024-11-05 No fix listed CWE-120

TI-2024-34912 CVE-2024-52025 · GHSA-v7wq-2339-37p8

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to…

MEDIUM 59

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at geniepppoe.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00312 Published 2024-11-05 No fix listed CWE-120

TI-2024-34911 CVE-2024-52024 · GHSA-rvr8-cw39-527c

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to…

MEDIUM 59

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at wizpppoe.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00312 Published 2024-11-05 No fix listed CWE-120

TI-2024-34910 CVE-2024-52023 · GHSA-79wp-x2px-mc9v

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to…

MEDIUM 59

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe2.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00312 Published 2024-11-05 No fix listed CWE-120

TI-2024-34903 CVE-2024-52016 · GHSA-r8p4-whj5-6jwg

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were…

MEDIUM 59

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component wlg_adv.cgi via the apmode_dns1_pri and apmode_dns1_sec par…

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00407 Published 2024-11-05 No fix listed CWE-120

TI-2024-34902 CVE-2024-52015 · GHSA-242c-pm42-hqwq

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were…

MEDIUM 59

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at bsw_pptp.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34901 CVE-2024-52014 · GHSA-xf32-4q4v-xc47

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were…

MEDIUM 59

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at genie_pptp.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34900 CVE-2024-52013 · GHSA-cggp-gq97-wfj7

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were…

MEDIUM 59

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at wiz_pptp.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34208 CVE-2024-51020 · GHSA-g6xg-7v4w-32vg

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the apn…

MEDIUM 59

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the apn parameter at usbISP_detail_edit.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34207 CVE-2024-51019 · GHSA-cx3q-ggpf-wqc5

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the…

MEDIUM 59

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pppoe_localnetmask parameter at pppoe.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34206 CVE-2024-51018 · GHSA-jvqw-pf7r-4f2p

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the…

MEDIUM 59

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at pptp.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34205 CVE-2024-51017 · GHSA-7mpv-9qrc-wxrj

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the…

MEDIUM 59

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the l2tp_user_netmask parameter at l2tp.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34203 CVE-2024-51015 · GHSA-wg7j-6r9g-jjch

Netgear R7000P v1.3.3.154 was discovered to contain a command injection vulnerability via…

MEDIUM 59

Netgear R7000P v1.3.3.154 was discovered to contain a command injection vulnerability via the device_name2 parameter at operation_mode.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00581 Published 2024-11-05 No fix listed CWE-120

TI-2024-34201 CVE-2024-51013 · GHSA-w2rm-ghcp-rwrp

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the…

MEDIUM 59

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the RADIUSAddr%d_wla parameter at wireless.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34199 CVE-2024-51011 · GHSA-p3qx-8gpx-2q8q

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to…

MEDIUM 59

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34192 CVE-2024-51004 · GHSA-jcvh-w2rh-mxx9

Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow…

MEDIUM 59

Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usb_device.cgi via the cifs_user, read_access, and write_access parameters.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34191 CVE-2024-51003 · GHSA-c5r9-g2wg-76jp

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were…

MEDIUM 59

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component ap_mode.cgi via the apmode_dns1_pri and apmode_dns1_sec par…

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

Open these records in search →

Critical	217
High	591
Medium	535
Low	22
No CVSS	0