NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

26 records in Rax40 Firmware · all components

TI-2019-14866 CVE-2019-20646 · GHSA-877f-fpjf-g2cr

NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials.

MEDIUM 45

NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01288 Published 2020-04-15 No fix listed CWE-200

TI-2022-23849 CVE-2022-48196 · GHSA-qc52-6cw2-7g23

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 44

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00975 Published 2022-12-30 No fix listed CWE-120

TI-2020-18244 CVE-2020-35800 · GHSA-3w6j-54mg-5cr4

Certain NETGEAR devices are affected by incorrect configuration of security settings.

MEDIUM 44

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.01628 Published 2020-12-29 No fix listed

TI-2022-10626 CVE-2022-27645 · GHSA-jv3h-vgc4-3286

Missing authentication in NETGEAR R6700v3

MEDIUM 43

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01277 Published 2023-03-29 No fix listed CWE-306

TI-2023-12093 CVE-2023-27358 · GHSA-2xhc-r63q-9qm6

SQL injection in NETGEAR RAX30

MEDIUM 42

NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00877 Published 2024-05-03 No fix listed CWE-89

TI-2020-16325 CVE-2020-26898 · GHSA-qghg-2qh6-5v9j

NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings.

MEDIUM 42

NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00603 Published 2020-10-09 No fix listed

TI-2022-10628 CVE-2022-27647 · GHSA-7pr7-x6mw-h647

OS command injection in NETGEAR R6700v3

MEDIUM 40

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.0148 Published 2023-03-29 No fix listed CWE-78

TI-2022-10623 CVE-2022-27642 · GHSA-w94x-h737-f6h9

Incorrect authorization in NETGEAR R6700v3

MEDIUM 40

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00878 Published 2023-03-29 No fix listed CWE-863

TI-2019-14861 CVE-2019-20641 · GHSA-gxxj-6wpw-9vgc

NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level.

MEDIUM 40

NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00834 Published 2020-04-15 No fix listed

TI-2021-20636 CVE-2021-45549 · GHSA-m6m8-v67p-7g6q

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 37

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00633 Published 2021-12-26 No fix listed CWE-77

TI-2019-14862 CVE-2019-20642 · GHSA-m676-xv64-2prq

NETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass.

LOW 36

NETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00543 Published 2020-04-15 No fix listed

TI-2021-20580 CVE-2021-45493 · GHSA-2q72-x7j8-g7gh

Certain NETGEAR devices are affected by disclosure of administrative credentials.

LOW 35

Certain NETGEAR devices are affected by disclosure of administrative credentials.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00799 Published 2021-12-26 No fix listed CWE-200

TI-2021-16126 CVE-2021-38526 · GHSA-w6cx-mcrx-5955

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

LOW 35

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01019 Published 2021-08-11 No fix listed CWE-120

TI-2021-18234 CVE-2021-41449 · GHSA-h4m4-4f78-3cq7

A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers…

LOW 34

A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.01609 Published 2021-12-09 No fix listed CWE-22

TI-2019-14863 CVE-2019-20643 · GHSA-ghpp-p7j7-78gh

NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information.

LOW 34

NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00831 Published 2020-04-15 No fix listed

TI-2019-14867 CVE-2019-20647 · GHSA-hx5g-796f-2xrq

NETGEAR RAX40 devices before 1.0.3.64 are affected by denial of service.

LOW 26

NETGEAR RAX40 devices before 1.0.3.64 are affected by denial of service.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00492 Published 2020-04-15 No fix listed

TI-2021-16133 CVE-2021-38533 · GHSA-49pf-p4w2-92m4

NETGEAR RAX40 devices before 1.0.3.64 are affected by stored XSS.

LOW 25

NETGEAR RAX40 devices before 1.0.3.64 are affected by stored XSS.

CVSS 3.1MEDIUM 5.4 Adjacent network Low privileges No interaction EPSS 0.00468 Published 2021-08-10 No fix listed CWE-79

TI-2019-14865 CVE-2019-20645 · GHSA-2hpj-p87v-vc3v

NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS.

LOW 23

NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00487 Published 2020-04-15 No fix listed CWE-79

TI-2019-14864 CVE-2019-20644 · GHSA-682r-wx9c-52cr

NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS.

LOW 23

NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00485 Published 2020-04-15 No fix listed CWE-79

TI-2021-20759 CVE-2021-45672 · GHSA-7r9x-pcfj-2cwg

Certain NETGEAR devices are affected by Stored XSS.

LOW 22

Certain NETGEAR devices are affected by Stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00377 Published 2021-12-26 No fix listed CWE-79

TI-2021-16137 CVE-2021-38537 · GHSA-v5vq-6p34-w5xh

Certain NETGEAR devices are affected by stored XSS.

LOW 22

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00357 Published 2021-08-10 No fix listed CWE-79

TI-2021-16136 CVE-2021-38536 · GHSA-w987-g8v2-g8rg

Certain NETGEAR devices are affected by stored XSS.

LOW 22

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00464 Published 2021-08-10 No fix listed CWE-79

TI-2021-16135 CVE-2021-38535 · GHSA-c5q5-p78r-jpgv

Certain NETGEAR devices are affected by stored XSS.

LOW 22

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00464 Published 2021-08-10 No fix listed CWE-79

TI-2021-20691 CVE-2021-45604 · GHSA-cxv8-ggg4-fhvm

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 21

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 4.5 Adjacent network High privileges No interaction EPSS 0.00381 Published 2021-12-26 No fix listed CWE-787

TI-2026-00282 CVE-2026-0420 · GHSA-vww4-r7gr-9xvq

Missing TLS certificate validation in NETGEAR's ReadyCloud client app

LOW 20

An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's…

CVSS 4.0MEDIUM 4.6 Network No auth No interaction EPSS 0.00135 Published 2026-06-09 Fixed in V1.2.9.52, V1.0.6.106 CWE-325

Open these records in search →