NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

11 records in Wnap320 Firmware · all components

TI-2016-01416 CVE-2016-1555 · GHSA-rfrg-rcwf-93m5

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and…

CRITICAL 100KEV

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98325 Published 2017-04-21 No fix listed CWE-77

TI-2016-01418 CVE-2016-1557 · GHSA-2hmp-62fm-hfpg

Netgear WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0 reveal wireless passwords and…

MEDIUM 47

Netgear WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0 reveal wireless passwords and administrative usernames and passwords over SNMP.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02842 Published 2017-04-21 No fix listed CWE-200

TI-2018-15059 CVE-2018-21097 · GHSA-rr44-wq26-hqw2

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

MEDIUM 44

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01188 Published 2020-04-27 No fix listed CWE-787

TI-2016-01417 CVE-2016-1556 · GHSA-7xcv-jm4f-m6xc

Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and…

LOW 39

Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0; and WND930 before 2.0.11 allows remote attackers to read the wireless WPS PIN or passphrase by visiting unaut…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0346 Published 2017-04-21 No fix listed CWE-200

TI-2018-15082 CVE-2018-21120 · GHSA-vx49-pgjf-xgv6

Certain NETGEAR devices are affected by CSRF.

LOW 35

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00459 Published 2020-04-22 No fix listed CWE-352

TI-2018-15056 CVE-2018-21094 · GHSA-ggf6-gp83-vf32

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 34

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01041 Published 2020-04-27 No fix listed

TI-2018-15058 CVE-2018-21096 · GHSA-9rj5-qrrr-fwj9

Certain NETGEAR devices are affected by CSRF.

LOW 32

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 7.4 Adjacent network Low privileges User interaction EPSS 0.00306 Published 2020-04-27 No fix listed CWE-352

TI-2017-14011 CVE-2017-18863 · GHSA-wrf7-fmr7-fj5h

Certain NETGEAR devices are affected by command execution via a PHP form.

LOW 32

Certain NETGEAR devices are affected by command execution via a PHP form.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00497 Published 2020-04-28 No fix listed CWE-74

TI-2017-13956 CVE-2017-18806 · GHSA-cvrm-7p45-fx4m

Certain NETGEAR devices are affected by command injection.

LOW 30

Certain NETGEAR devices are affected by command injection.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00555 Published 2020-04-21 No fix listed CWE-74

TI-2017-13955 CVE-2017-18805 · GHSA-c5m8-w4wc-7446

Certain NETGEAR devices are affected by command injection.

LOW 30

Certain NETGEAR devices are affected by command injection.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00555 Published 2020-04-21 No fix listed CWE-74

TI-2022-13719 CVE-2022-31876 · GHSA-8f8h-5gg9-gvv4

netgear wnap320 router WNAP320_V2.0.3_firmware is vulnerable to Incorrect Access Control…

LOW 27

netgear wnap320 router WNAP320_V2.0.3_firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01296 Published 2022-06-17 No fix listed

Open these records in search →