NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

93 records in Wnr2000 Firmware · all components

TI-2017-04600 CVE-2017-6862 · GHSA-xjjj-92c2-q84f

Buffer overflow in NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66…

CRITICAL 100KEV

NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.45748 Published 2017-05-26 No fix listed CWE-120

TI-2023-27381 CVE-2023-50089 · GHSA-46jg-h552-883r

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70.

HIGH 82

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04007 Published 2023-12-15 No fix listed CWE-77

TI-2018-15115 CVE-2018-21153 · GHSA-v5vw-fvmv-9vrj

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01582 Published 2020-04-27 No fix listed CWE-120

TI-2017-13916 CVE-2017-18764 · GHSA-qqhw-hqj9-7pv5

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 42

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01857 Published 2020-04-22 No fix listed CWE-74

TI-2017-13914 CVE-2017-18762 · GHSA-j5wc-79fh-wvjw

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 42

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01857 Published 2020-04-22 No fix listed CWE-74

TI-2017-13892 CVE-2017-18738 · GHSA-prqf-9j9q-7689

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

MEDIUM 40

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00962 Published 2020-04-23 No fix listed CWE-787

TI-2018-15186 CVE-2018-21224 · GHSA-cgqh-jmwj-vw24

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

LOW 39

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00725 Published 2020-04-28 No fix listed CWE-120

TI-2018-15185 CVE-2018-21223 · GHSA-3m6h-hxj9-g93x

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

LOW 39

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00657 Published 2020-04-28 No fix listed CWE-120

TI-2018-15184 CVE-2018-21222 · GHSA-5gwh-pgwq-xpvh

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

LOW 39

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00657 Published 2020-04-28 No fix listed CWE-120

TI-2018-15182 CVE-2018-21220 · GHSA-w4jq-6fj6-wp24

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

LOW 39

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00657 Published 2020-04-28 No fix listed CWE-120

TI-2018-15181 CVE-2018-21219 · GHSA-55v7-3xw8-jf37

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

LOW 39

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00659 Published 2020-04-28 No fix listed CWE-120

TI-2018-15180 CVE-2018-21218 · GHSA-prmr-9r7g-hrvr

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

LOW 39

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00754 Published 2020-04-28 No fix listed CWE-120

TI-2018-15173 CVE-2018-21211 · GHSA-5wgm-9wqh-hv43

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

LOW 39

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00761 Published 2020-04-28 No fix listed CWE-120

TI-2017-13925 CVE-2017-18775 · GHSA-h9wq-jm3g-952g

Certain NETGEAR devices are affected by CSRF.

LOW 39

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00539 Published 2020-04-22 No fix listed CWE-352

TI-2017-13923 CVE-2017-18772 · GHSA-p9gq-h366-q2cq

Certain NETGEAR devices are affected by authentication bypass.

LOW 39

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00603 Published 2020-04-22 No fix listed CWE-287

TI-2017-13859 CVE-2017-18705 · GHSA-gqp3-mrf6-72gm

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 39

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00544 Published 2020-04-24 No fix listed

TI-2022-22948 CVE-2022-46423 · GHSA-6662-6w2g-g564

An exploitable firmware modification vulnerability was discovered on the Netgear…

LOW 38

An exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00429 Published 2022-12-20 No fix listed CWE-494

TI-2019-03516 CVE-2019-5054 · GHSA-3fq7-8gqg-m2m9

NULL pointer dereference in NETGEAR N300 WNR2000v5

LOW 38

An exploitable denial-of-service vulnerability exists in the session handling functionality of the NETGEAR N300 (WNR2000v5 with Firmware Version V1.0.0.70) HTTP server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0313 Published 2019-09-11 No fix listed CWE-476

TI-2017-13903 CVE-2017-18749 · GHSA-276m-rj9p-m5q8

Certain NETGEAR devices are affected by CSRF.

LOW 38

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2020-04-23 No fix listed CWE-352

TI-2017-13857 CVE-2017-18703 · GHSA-fqqw-qmp7-4hh9

Certain NETGEAR devices are affected by CSRF.

LOW 38

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2020-04-24 No fix listed CWE-352

TI-2019-03517 CVE-2019-5055 · GHSA-hc22-q8g2-56vr

NULL pointer dereference in NETGEAR N300 WNR2000v5

LOW 37

An exploitable denial-of-service vulnerability exists in the Host Access Point Daemon (hostapd) on the NETGEAR N300 (WNR2000v5 with Firmware Version V1.0.0.70) wireless router.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02014 Published 2019-09-11 No fix listed CWE-476

TI-2017-13926 CVE-2017-18776 · GHSA-46v9-6x8x-35pw

Certain NETGEAR devices are affected by authentication bypass.

LOW 37

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00411 Published 2020-04-22 No fix listed CWE-287

TI-2018-15138 CVE-2018-21176 · GHSA-3qqp-2f2h-3jpr

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 35

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01648 Published 2020-04-27 No fix listed CWE-787

TI-2018-15137 CVE-2018-21175 · GHSA-j56x-wj9x-qhm9

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 35

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01648 Published 2020-04-27 No fix listed CWE-787

TI-2018-15136 CVE-2018-21174 · GHSA-qc4q-2vxw-j8pc

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 35

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01634 Published 2020-04-27 No fix listed CWE-787

Open these records in search →

Critical	217
High	591
Medium	535
Low	22
No CVSS	0