NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

134 records in Rbs750 Firmware · all components

TI-2022-17411 CVE-2022-37337 · GHSA-hqcp-27rh-hjjg

OS command injection in NETGEAR Orbi Router RBR750

HIGH 74

A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02828 Published 2023-03-21 No fix listed CWE-78

TI-2022-18077 CVE-2022-38452 · GHSA-9468-42qx-67cg

A command execution vulnerability exists in the hidden telnet service functionality of…

HIGH 73

A command execution vulnerability exists in the hidden telnet service functionality of Netgear Orbi Router RBR750 4.6.8.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02089 Published 2023-03-21 No fix listed CWE-912

TI-2022-16757 CVE-2022-36429 · GHSA-qxv5-xxxc-xw7m

A command execution vulnerability exists in the ubus backend communications functionality…

HIGH 67

A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite RBS750 4.6.8.5.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01987 Published 2023-03-21 No fix listed CWE-912

TI-2021-20709 CVE-2021-45622 · GHSA-p59w-cx85-6vcv

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 47

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02366 Published 2021-12-26 No fix listed CWE-77

TI-2021-20699 CVE-2021-45612 · GHSA-95h9-7v59-h6gr

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 47

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02486 Published 2021-12-26 No fix listed CWE-77

TI-2020-16329 CVE-2020-26902 · GHSA-x6m4-5cjg-34r3

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 47

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.03458 Published 2020-10-09 No fix listed CWE-77

TI-2021-20717 CVE-2021-45630 · GHSA-88x8-58wq-2gj5

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01666 Published 2021-12-26 No fix listed CWE-77

TI-2021-20708 CVE-2021-45621 · GHSA-2v34-645j-235m

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02037 Published 2021-12-26 No fix listed CWE-77

TI-2021-20707 CVE-2021-45620 · GHSA-x8xp-278j-cqh4

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0202 Published 2021-12-26 No fix listed CWE-77

TI-2021-20704 CVE-2021-45617 · GHSA-3cgx-5266-6jv3

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02062 Published 2021-12-26 No fix listed CWE-77

TI-2021-20703 CVE-2021-45616 · GHSA-p675-68xc-c9pr

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0202 Published 2021-12-26 No fix listed CWE-77

TI-2021-20701 CVE-2021-45614 · GHSA-3fm5-j2pv-wjf2

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0202 Published 2021-12-26 No fix listed CWE-77

TI-2021-20700 CVE-2021-45613 · GHSA-q425-2cw8-64wv

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0202 Published 2021-12-26 No fix listed CWE-77

TI-2021-16116 CVE-2021-38516 · GHSA-73gm-85xf-8699

Certain NETGEAR devices are affected by lack of access control at the function level.

MEDIUM 46

Certain NETGEAR devices are affected by lack of access control at the function level.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01349 Published 2021-08-11 No fix listed

TI-2021-16113 CVE-2021-38513 · GHSA-9q3f-56hc-cwvq

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 46

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01833 Published 2021-08-11 No fix listed

TI-2021-20594 CVE-2021-45507 · GHSA-qfrw-2r49-g452

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 45

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01525 Published 2021-12-26 No fix listed

TI-2021-16127 CVE-2021-38527 · GHSA-qccx-cxhf-2m4w

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01685 Published 2021-08-11 No fix listed CWE-77

TI-2021-09955 CVE-2021-29068 · GHSA-4223-wcr9-hvjq

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01093 Published 2021-03-23 No fix listed CWE-120

TI-2020-18240 CVE-2020-35796 · GHSA-c585-qfhx-g68f

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01299 Published 2020-12-29 No fix listed CWE-120

TI-2021-20614 CVE-2021-45527 · GHSA-h529-hgpf-hm97

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

MEDIUM 44

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01176 Published 2021-12-26 No fix listed CWE-120

TI-2021-20596 CVE-2021-45509 · GHSA-gr55-r58c-wmfq

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 44

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01181 Published 2021-12-26 No fix listed

TI-2021-20595 CVE-2021-45508 · GHSA-7g9c-3hjm-r38g

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 44

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01181 Published 2021-12-26 No fix listed

TI-2020-18244 CVE-2020-35800 · GHSA-3w6j-54mg-5cr4

Certain NETGEAR devices are affected by incorrect configuration of security settings.

MEDIUM 44

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.01628 Published 2020-12-29 No fix listed

TI-2020-18239 CVE-2020-35795 · GHSA-37xm-62j3-375v

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 44

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01204 Published 2020-12-29 No fix listed CWE-120

TI-2020-11301 CVE-2020-14440 · GHSA-7r66-x2j3-pwpp

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 44

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.03091 Published 2020-06-18 No fix listed CWE-77

Open these records in search →