NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

127 records in R8500 Firmware · all components

TI-2024-34909 CVE-2024-52022 · GHSA-gv3h-6f48-rrfp

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were…

HIGH 70

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component wlg_adv.cgi via the apmode_gateway parameter.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01 Published 2024-11-05 No fix listed CWE-77

TI-2024-34908 CVE-2024-52021 · GHSA-cv53-45x5-8276

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in…

HIGH 70

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at bsw_fix.cgi.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01 Published 2024-11-05 No fix listed CWE-78

TI-2024-34907 CVE-2024-52020 · GHSA-frj8-xg2w-q7rw

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in…

HIGH 70

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at wiz_fix2.cgi.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01 Published 2024-11-05 No fix listed CWE-78

TI-2024-34906 CVE-2024-52019 · GHSA-vvg3-j47v-x7p2

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in…

HIGH 70

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at genie_fix2.cgi.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.0163 Published 2024-11-05 No fix listed CWE-78

TI-2024-34198 CVE-2024-51010 · GHSA-pf38-5qmv-cmhv

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were…

HIGH 70

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component ap_mode.cgi via the apmode_gateway parameter.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00963 Published 2024-11-05 No fix listed CWE-78

TI-2024-34197 CVE-2024-51009 · GHSA-p597-59q3-qvc8

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in…

HIGH 70

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at ether.cgi.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00963 Published 2024-11-05 No fix listed CWE-78

TI-2024-34193 CVE-2024-51005 · GHSA-rprp-m5gh-mh5c

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in…

HIGH 70

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the share_name parameter at usb_remote_smb_conf.cgi.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00816 Published 2024-11-05 No fix listed CWE-78

TI-2024-34181 CVE-2024-50993 · GHSA-387f-x58r-3vw7

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in…

HIGH 70

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at admin_account.cgi.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00963 Published 2024-11-05 No fix listed CWE-78

TI-2022-10624 CVE-2022-27643 · GHSA-h8wj-xxvx-cv2r

Buffer overflow in NETGEAR R6700v3

MEDIUM 61

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.25439 Published 2023-03-29 No fix listed CWE-120

TI-2024-34903 CVE-2024-52016 · GHSA-r8p4-whj5-6jwg

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were…

MEDIUM 59

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component wlg_adv.cgi via the apmode_dns1_pri and apmode_dns1_sec par…

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00407 Published 2024-11-05 No fix listed CWE-120

TI-2024-34902 CVE-2024-52015 · GHSA-242c-pm42-hqwq

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were…

MEDIUM 59

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at bsw_pptp.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34901 CVE-2024-52014 · GHSA-xf32-4q4v-xc47

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were…

MEDIUM 59

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at genie_pptp.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34900 CVE-2024-52013 · GHSA-cggp-gq97-wfj7

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were…

MEDIUM 59

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at wiz_pptp.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34200 CVE-2024-51012 · GHSA-q7wx-38r3-hr6h

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6_pri_dns…

MEDIUM 59

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6_pri_dns parameter at ipv6_fix.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34194 CVE-2024-51006 · GHSA-cmv3-c9g2-j3g5

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the…

MEDIUM 59

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6_static_ip parameter in the ipv6_tunnel function.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34192 CVE-2024-51004 · GHSA-jcvh-w2rh-mxx9

Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow…

MEDIUM 59

Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usb_device.cgi via the cifs_user, read_access, and write_access parameters.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34191 CVE-2024-51003 · GHSA-c5r9-g2wg-76jp

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were…

MEDIUM 59

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component ap_mode.cgi via the apmode_dns1_pri and apmode_dns1_sec par…

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34190 CVE-2024-51002 · GHSA-jrj5-q7r9-2m35

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were…

MEDIUM 59

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the l2tp_user_ip parameter at l2tp.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00312 Published 2024-11-05 No fix listed CWE-120

TI-2024-34189 CVE-2024-51001 · GHSA-5q3c-q96r-vr6x

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the sysDNSHost…

MEDIUM 59

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the sysDNSHost parameter at ddns.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34188 CVE-2024-51000 · GHSA-gw9j-jrgv-94wc

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow…

MEDIUM 59

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component wireless.cgi via the opmode, opmode_an, and opmode_an_2 parameters.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34187 CVE-2024-50999 · GHSA-j6w2-m443-3c2h

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in…

MEDIUM 59

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at password.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00743 Published 2024-11-05 No fix listed CWE-120

TI-2024-34186 CVE-2024-50998 · GHSA-v3c2-xj8g-4r72

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow…

MEDIUM 59

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component openvpn.cgi via the openvpn_service_port and openvpn_service_port_tun parameters.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

TI-2024-34185 CVE-2024-50997 · GHSA-8cmh-6vqw-c3j2

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were…

MEDIUM 59

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at pptp.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00405 Published 2024-11-05 No fix listed CWE-120

TI-2024-34184 CVE-2024-50996 · GHSA-4fw5-75q7-v8g7

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were…

MEDIUM 59

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpa_server parameter at genie_bpa.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00405 Published 2024-11-05 No fix listed CWE-120

TI-2024-34183 CVE-2024-50995 · GHSA-5x44-vxm3-fqv4

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the share_name…

MEDIUM 59

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the share_name parameter at usb_remote_smb_conf.cgi.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00305 Published 2024-11-05 No fix listed CWE-120

Open these records in search →

Critical	217
High	591
Medium	535
Low	22
No CVSS	0