NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

75 records in Rax120 Firmware · all components

TI-2021-20706 CVE-2021-45619 · GHSA-h67v-rx96-6f59

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 47

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02588 Published 2021-12-26 No fix listed CWE-77

TI-2021-20705 CVE-2021-45618 · GHSA-8fp7-34g5-gw45

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0202 Published 2021-12-26 No fix listed CWE-77

TI-2021-16116 CVE-2021-38516 · GHSA-73gm-85xf-8699

Certain NETGEAR devices are affected by lack of access control at the function level.

MEDIUM 46

Certain NETGEAR devices are affected by lack of access control at the function level.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01349 Published 2021-08-11 No fix listed

TI-2021-09955 CVE-2021-29068 · GHSA-4223-wcr9-hvjq

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01093 Published 2021-03-23 No fix listed CWE-120

TI-2021-20745 CVE-2021-45658 · GHSA-7j2w-pcvm-23jm

Certain NETGEAR devices are affected by server-side injection.

MEDIUM 44

Certain NETGEAR devices are affected by server-side injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00847 Published 2021-12-26 No fix listed CWE-74

TI-2020-18244 CVE-2020-35800 · GHSA-3w6j-54mg-5cr4

Certain NETGEAR devices are affected by incorrect configuration of security settings.

MEDIUM 44

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.01628 Published 2020-12-29 No fix listed

TI-2020-18239 CVE-2020-35795 · GHSA-37xm-62j3-375v

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 44

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01204 Published 2020-12-29 No fix listed CWE-120

TI-2021-13937 CVE-2021-34947 · GHSA-jj28-565j-58r3

Out-of-bounds write in NETGEAR R7800

MEDIUM 41

NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00549 Published 2024-05-07 No fix listed CWE-787

TI-2022-19264 CVE-2022-40619 · GHSA-5gwm-h32x-cppq

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems…

MEDIUM 40

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices.

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.02526 Published 2026-01-28 No fix listed CWE-77

TI-2021-20635 CVE-2021-45548 · GHSA-qq4v-p8xp-8526

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 40

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00953 Published 2021-12-26 No fix listed CWE-77

TI-2020-18275 CVE-2020-35831 · GHSA-2xjp-8pmx-7mmj

Certain NETGEAR devices are affected by stored XSS.

LOW 37

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1HIGH 8.1 Network High privileges User interaction EPSS 0.00874 Published 2020-12-29 No fix listed CWE-79

TI-2020-18283 CVE-2020-35839 · GHSA-wr4v-mm53-3vc3

Certain NETGEAR devices are affected by Stored XSS.

LOW 36

Certain NETGEAR devices are affected by Stored XSS.

CVSS 3.1HIGH 8.1 Network High privileges User interaction EPSS 0.00716 Published 2020-12-29 No fix listed CWE-79

TI-2022-19265 CVE-2022-40620 · GHSA-8cgh-w254-67rw

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems…

LOW 35

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism.

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.00315 Published 2026-01-28 No fix listed CWE-295

TI-2021-20729 CVE-2021-45642 · GHSA-6w4x-5fpc-6gg8

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 35

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 7.5 Adjacent network High privileges No interaction EPSS 0.00971 Published 2021-12-26 No fix listed

TI-2021-20639 CVE-2021-45552 · GHSA-x6f6-fmwf-4mpg

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 34

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01215 Published 2021-12-26 No fix listed CWE-77

TI-2020-09469 CVE-2020-11792 · GHSA-hpc6-jf76-gpqr

NETGEAR R8900, R9000, RAX120, and XR700 devices before 2020-01-20 are affected by…

LOW 34

NETGEAR R8900, R9000, RAX120, and XR700 devices before 2020-01-20 are affected by Transport Layer Security (TLS) certificate private key disclosure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00662 Published 2020-04-15 No fix listed CWE-295

TI-2019-14967 CVE-2019-20747 · GHSA-22wf-j8j6-f67g

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 31

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00506 Published 2020-04-16 No fix listed CWE-787

TI-2026-10197 CVE-2026-11814 · GHSA-7w3c-j7rc-7ffv

Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers

LOW 29

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality…

CVSS 4.0MEDIUM 4.9 Adjacent network No auth No interaction EPSS 0.02183 Published 2026-08-11 Fixed in V1.0.1.84, V1.1.8.142 +9 CWE-295

TI-2021-16138 CVE-2021-38538 · GHSA-x2c3-fm9j-hhf2

Certain NETGEAR devices are affected by stored XSS.

LOW 28

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.004 Published 2021-08-10 No fix listed CWE-79

TI-2020-18282 CVE-2020-35838 · GHSA-mj97-rpm8-w7h9

Certain NETGEAR devices are affected by stored XSS.

LOW 28

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 6.1 Adjacent network High privileges No interaction EPSS 0.0056 Published 2020-12-29 No fix listed CWE-79

TI-2020-18281 CVE-2020-35837 · GHSA-5m6p-6vp8-4hgg

Certain NETGEAR devices are affected by stored XSS.

LOW 28

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 6.1 Adjacent network High privileges No interaction EPSS 0.00683 Published 2020-12-29 No fix listed CWE-79

TI-2020-18280 CVE-2020-35836 · GHSA-735q-mc2p-r2jc

Certain NETGEAR devices are affected by stored XSS.

LOW 28

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 6.1 Adjacent network High privileges No interaction EPSS 0.0056 Published 2020-12-29 No fix listed CWE-79

TI-2020-18279 CVE-2020-35835 · GHSA-m879-r67c-4hhh

Certain NETGEAR devices are affected by stored XSS.

LOW 28

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 6.1 Adjacent network High privileges No interaction EPSS 0.0056 Published 2020-12-29 No fix listed CWE-79

TI-2020-18278 CVE-2020-35834 · GHSA-9c42-4w7m-j868

Certain NETGEAR devices are affected by stored XSS.

LOW 28

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 6.1 Adjacent network High privileges No interaction EPSS 0.0056 Published 2020-12-29 No fix listed CWE-79

TI-2020-18277 CVE-2020-35833 · GHSA-4pjq-cx2j-g6rm

Certain NETGEAR devices are affected by stored XSS.

LOW 28

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 6.1 Adjacent network High privileges No interaction EPSS 0.0056 Published 2020-12-29 No fix listed CWE-79

Open these records in search →