NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

36 records in Wnr1000 Firmware · all components

TI-2013-02887 CVE-2013-3317 · GHSA-jv9f-866g-rcwh

Netgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass via the NtgrBak key.

MEDIUM 50

Netgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass via the NtgrBak key.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04769 Published 2020-01-29 No fix listed CWE-287

TI-2013-02886 CVE-2013-3316 · GHSA-rjc5-pm38-cwf9

Netgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass due to…

MEDIUM 50

Netgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass due to the server skipping checks for URLs containing a ".jpg".

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04769 Published 2020-01-29 No fix listed CWE-287

TI-2019-14714 CVE-2019-20488 · GHSA-rxp5-r45j-vr8c

An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices.

MEDIUM 46

An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02119 Published 2020-03-02 No fix listed CWE-78

TI-2019-14715 CVE-2019-20489 · GHSA-rr49-pwf2-62mg

An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices.

MEDIUM 45

An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01289 Published 2020-03-02 No fix listed CWE-287

TI-2017-13888 CVE-2017-18734 · GHSA-3wp8-5mq5-495j

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 44

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.03262 Published 2020-04-23 No fix listed CWE-74

TI-2017-13916 CVE-2017-18764 · GHSA-qqhw-hqj9-7pv5

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 42

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01857 Published 2020-04-22 No fix listed CWE-74

TI-2017-13891 CVE-2017-18737 · GHSA-w4rf-7xv6-jmq8

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 42

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01836 Published 2020-04-23 No fix listed CWE-74

TI-2019-12969 CVE-2019-17372 · GHSA-j647-7p9h-x2g4

Certain NETGEAR devices allow remote attackers to disable all authentication requirements…

LOW 39

Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01659 Published 2019-10-09 No fix listed CWE-287

TI-2018-15188 CVE-2018-21226 · GHSA-v8p4-c6cg-38r7

Certain NETGEAR devices are affected by authentication bypass.

LOW 39

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.007 Published 2020-04-28 No fix listed CWE-269

TI-2018-15131 CVE-2018-21169 · GHSA-4x8j-w832-rw4c

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 39

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00632 Published 2020-04-27 No fix listed

TI-2017-13932 CVE-2017-18782 · GHSA-6qxp-5vv2-4xcx

Certain NETGEAR devices are affected by CSRF.

LOW 39

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0062 Published 2020-04-22 No fix listed CWE-352

TI-2017-13931 CVE-2017-18781 · GHSA-jv8c-vh95-8c34

Certain NETGEAR devices are affected by CSRF.

LOW 39

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00486 Published 2020-04-22 No fix listed CWE-352

TI-2019-14713 CVE-2019-20487 · GHSA-q8pv-fm9c-m7xj

An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices.

LOW 38

An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00457 Published 2020-03-02 No fix listed CWE-352

TI-2017-13941 CVE-2017-18791 · GHSA-xrj3-j65c-j9gg

Certain NETGEAR devices are affected by CSRF.

LOW 38

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2020-04-21 No fix listed CWE-352

TI-2017-13903 CVE-2017-18749 · GHSA-276m-rj9p-m5q8

Certain NETGEAR devices are affected by CSRF.

LOW 38

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2020-04-23 No fix listed CWE-352

TI-2017-13857 CVE-2017-18703 · GHSA-fqqw-qmp7-4hh9

Certain NETGEAR devices are affected by CSRF.

LOW 38

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2020-04-24 No fix listed CWE-352

TI-2017-13926 CVE-2017-18776 · GHSA-46v9-6x8x-35pw

Certain NETGEAR devices are affected by authentication bypass.

LOW 37

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00411 Published 2020-04-22 No fix listed CWE-287

TI-2018-15130 CVE-2018-21168 · GHSA-xfjv-xrhq-gpr4

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 36

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01416 Published 2020-04-27 No fix listed CWE-200

TI-2018-15101 CVE-2018-21139 · GHSA-87jj-5mq8-98pw

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 35

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01188 Published 2020-04-23 No fix listed CWE-200

TI-2017-13937 CVE-2017-18787 · GHSA-jgf9-34c8-xvj6

Certain NETGEAR devices are affected by command injection.

LOW 35

Certain NETGEAR devices are affected by command injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00737 Published 2020-04-22 No fix listed CWE-74

TI-2017-13936 CVE-2017-18786 · GHSA-v972-vhh2-2h9q

Certain NETGEAR devices are affected by command injection.

LOW 35

Certain NETGEAR devices are affected by command injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00737 Published 2020-04-22 No fix listed CWE-74

TI-2016-09094 CVE-2016-11059 · GHSA-pjvf-pcx9-852h

Certain NETGEAR devices are affected by password exposure.

LOW 35

Certain NETGEAR devices are affected by password exposure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01071 Published 2020-04-28 No fix listed CWE-200

TI-2016-09092 CVE-2016-11057 · GHSA-395v-vr8h-m439

Certain NETGEAR devices are affected by mishandling of repeated URL calls.

LOW 35

Certain NETGEAR devices are affected by mishandling of repeated URL calls.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01015 Published 2020-04-28 No fix listed CWE-287

TI-2017-13929 CVE-2017-18779 · GHSA-cr8q-xm9p-34xm

Certain NETGEAR devices are affected by a buffer overflow.

LOW 34

Certain NETGEAR devices are affected by a buffer overflow.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00352 Published 2020-04-22 No fix listed CWE-120

TI-2017-13938 CVE-2017-18788 · GHSA-4vcj-p6rj-9c62

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00643 Published 2020-04-22 No fix listed CWE-74

Open these records in search →