NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

35 records in Wnr3500l Firmware · all components

TI-2022-10624 CVE-2022-27643 · GHSA-h8wj-xxvx-cv2r

Buffer overflow in NETGEAR R6700v3

MEDIUM 61

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.25439 Published 2023-03-29 No fix listed CWE-120

TI-2018-15124 CVE-2018-21162 · GHSA-m25v-6jm5-xmw4

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 48

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03437 Published 2020-04-23 No fix listed CWE-78

TI-2021-16116 CVE-2021-38516 · GHSA-73gm-85xf-8699

Certain NETGEAR devices are affected by lack of access control at the function level.

MEDIUM 46

Certain NETGEAR devices are affected by lack of access control at the function level.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01349 Published 2021-08-11 No fix listed

TI-2013-04082 CVE-2013-4657 · GHSA-ccc3-rqwv-gvxg

Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service.

MEDIUM 46

Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01855 Published 2019-11-13 No fix listed CWE-22

TI-2021-20599 CVE-2021-45512 · GHSA-59h7-2c4x-36qm

Certain NETGEAR devices are affected by weak cryptography.

MEDIUM 43

Certain NETGEAR devices are affected by weak cryptography.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00567 Published 2021-12-26 No fix listed CWE-327

TI-2021-08779 CVE-2021-27239 · GHSA-hqww-3wrx-q5gv

Stack-based buffer overflow in NETGEAR Multiple Routers

LOW 39

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00772 Published 2021-03-29 No fix listed CWE-121

TI-2019-14973 CVE-2019-20753 · GHSA-52f4-cjg2-mpf2

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 39

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00565 Published 2020-04-16 No fix listed CWE-787

TI-2019-14954 CVE-2019-20734 · GHSA-45r5-vh4c-92vx

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

LOW 39

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00478 Published 2020-04-16 No fix listed CWE-120

TI-2019-12969 CVE-2019-17372 · GHSA-j647-7p9h-x2g4

Certain NETGEAR devices allow remote attackers to disable all authentication requirements…

LOW 39

Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01659 Published 2019-10-09 No fix listed CWE-287

TI-2018-15055 CVE-2018-21093 · GHSA-wgrg-fgrg-92cc

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 39

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00634 Published 2020-04-27 No fix listed CWE-787

TI-2017-13897 CVE-2017-18743 · GHSA-5rhv-5888-hp8c

Certain NETGEAR devices are affected by authentication bypass.

LOW 39

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00603 Published 2020-04-23 No fix listed CWE-287

TI-2018-15101 CVE-2018-21139 · GHSA-87jj-5mq8-98pw

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 35

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01188 Published 2020-04-23 No fix listed CWE-200

TI-2016-09094 CVE-2016-11059 · GHSA-pjvf-pcx9-852h

Certain NETGEAR devices are affected by password exposure.

LOW 35

Certain NETGEAR devices are affected by password exposure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01071 Published 2020-04-28 No fix listed CWE-200

TI-2018-15118 CVE-2018-21156 · GHSA-9f7j-2669-24wh

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 34

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0135 Published 2020-04-27 No fix listed CWE-120

TI-2017-13927 CVE-2017-18777 · GHSA-qx7p-pcrw-fhh5

Certain NETGEAR devices are affected by administrative password disclosure.

LOW 34

Certain NETGEAR devices are affected by administrative password disclosure.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00284 Published 2020-04-22 No fix listed CWE-522

TI-2021-20637 CVE-2021-45550 · GHSA-hvp9-jp8f-v4wh

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00574 Published 2021-12-26 No fix listed CWE-77

TI-2019-14975 CVE-2019-20755 · GHSA-jjjm-2v77-2785

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 31

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00506 Published 2020-04-16 No fix listed CWE-787

TI-2019-14974 CVE-2019-20754 · GHSA-x7h9-rrcq-c95j

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00506 Published 2020-04-16 No fix listed CWE-120

TI-2019-14952 CVE-2019-20732 · GHSA-6qwv-4g82-ff2c

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00654 Published 2020-04-16 No fix listed CWE-77

TI-2019-14932 CVE-2019-20712 · GHSA-7524-h548-9j8v

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00506 Published 2020-04-16 No fix listed CWE-120

TI-2017-13938 CVE-2017-18788 · GHSA-4vcj-p6rj-9c62

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00643 Published 2020-04-22 No fix listed CWE-74

TI-2019-14957 CVE-2019-20737 · GHSA-h966-gw6c-fp38

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 30

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00349 Published 2020-04-16 No fix listed CWE-787

TI-2019-14953 CVE-2019-20733 · GHSA-4965-jf7x-7ccv

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 30

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0033 Published 2020-04-16 No fix listed CWE-787

TI-2019-14920 CVE-2019-20700 · GHSA-jqr5-ffrr-c4m7

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 30

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00381 Published 2020-04-16 No fix listed CWE-787

TI-2019-14912 CVE-2019-20692 · GHSA-jvvj-q942-m597

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 30

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00323 Published 2020-04-16 No fix listed CWE-787

Open these records in search →