NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

56 records in Rax50 Firmware · all components

TI-2024-37837 CVE-2024-57235 · GHSA-phfm-cgq2-xvp6

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection…

HIGH 82

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vif_enable function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01177 Published 2025-05-05 No fix listed CWE-77

TI-2024-37836 CVE-2024-57234 · GHSA-qppj-mpvf-fhqg

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection…

HIGH 82

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01177 Published 2025-05-05 No fix listed CWE-77

TI-2024-37835 CVE-2024-57233 · GHSA-gwf3-h435-h929

NETGEAR RAX5 (AX1600 WiFi Router) v1.0.2.26 was discovered to contain a command injection…

HIGH 82

NETGEAR RAX5 (AX1600 WiFi Router) v1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01177 Published 2025-05-05 No fix listed CWE-77

TI-2024-37834 CVE-2024-57232 · GHSA-r773-hh48-f8mc

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection…

HIGH 82

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01177 Published 2025-05-05 No fix listed CWE-77

TI-2024-37833 CVE-2024-57231 · GHSA-9vv4-43m2-mhhp

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection…

HIGH 82

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01177 Published 2025-05-05 No fix listed CWE-77

TI-2024-37832 CVE-2024-57230 · GHSA-38cq-p272-v993

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection…

HIGH 82

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01177 Published 2025-05-05 No fix listed CWE-77

TI-2024-37831 CVE-2024-57229 · GHSA-hwmq-r762-46wq

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection…

HIGH 82

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01177 Published 2025-05-05 No fix listed CWE-77

TI-2021-20709 CVE-2021-45622 · GHSA-p59w-cx85-6vcv

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 47

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02366 Published 2021-12-26 No fix listed CWE-77

TI-2021-20699 CVE-2021-45612 · GHSA-95h9-7v59-h6gr

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 47

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02486 Published 2021-12-26 No fix listed CWE-77

TI-2021-13978 CVE-2021-34991 · GHSA-4fwh-3qpr-42ff

Stack-based buffer overflow in NETGEAR R6400v2

MEDIUM 47

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.05714 Published 2021-11-15 No fix listed CWE-121

TI-2021-20708 CVE-2021-45621 · GHSA-2v34-645j-235m

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02037 Published 2021-12-26 No fix listed CWE-77

TI-2021-20707 CVE-2021-45620 · GHSA-x8xp-278j-cqh4

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0202 Published 2021-12-26 No fix listed CWE-77

TI-2021-20704 CVE-2021-45617 · GHSA-3cgx-5266-6jv3

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02062 Published 2021-12-26 No fix listed CWE-77

TI-2021-20703 CVE-2021-45616 · GHSA-p675-68xc-c9pr

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0202 Published 2021-12-26 No fix listed CWE-77

TI-2021-20701 CVE-2021-45614 · GHSA-3fm5-j2pv-wjf2

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0202 Published 2021-12-26 No fix listed CWE-77

TI-2021-20700 CVE-2021-45613 · GHSA-q425-2cw8-64wv

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0202 Published 2021-12-26 No fix listed CWE-77

TI-2021-20697 CVE-2021-45610 · GHSA-m3x6-j75p-546g

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01495 Published 2021-12-26 No fix listed CWE-120

TI-2021-09955 CVE-2021-29068 · GHSA-4223-wcr9-hvjq

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01093 Published 2021-03-23 No fix listed CWE-120

TI-2020-18240 CVE-2020-35796 · GHSA-c585-qfhx-g68f

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01299 Published 2020-12-29 No fix listed CWE-120

TI-2020-18244 CVE-2020-35800 · GHSA-3w6j-54mg-5cr4

Certain NETGEAR devices are affected by incorrect configuration of security settings.

MEDIUM 44

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.01628 Published 2020-12-29 No fix listed

TI-2020-18239 CVE-2020-35795 · GHSA-37xm-62j3-375v

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 44

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01204 Published 2020-12-29 No fix listed CWE-120

TI-2022-10626 CVE-2022-27645 · GHSA-jv3h-vgc4-3286

Missing authentication in NETGEAR R6700v3

MEDIUM 43

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01277 Published 2023-03-29 No fix listed CWE-306

TI-2023-17818 CVE-2023-35721 · GHSA-72x5-8v8j-3pmx

Improper certificate validation in NETGEAR Multiple Routers

MEDIUM 42

NETGEAR Multiple Routers curl_post Improper Certificate Validation Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00997 Published 2024-05-03 No fix listed CWE-295

TI-2020-18242 CVE-2020-35798 · GHSA-jrq7-2cwg-jfgc

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 42

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00816 Published 2020-12-29 No fix listed CWE-77

TI-2021-20628 CVE-2021-45541 · GHSA-373m-pcmj-4448

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01482 Published 2021-12-26 No fix listed CWE-77

Open these records in search →

Critical	217
High	591
Medium	535
Low	22
No CVSS	0