NETGEAR

Records1365All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical217CVSS 9.0–10.0

CVSS high591CVSS 7.0–8.9

Exploited now

NETGEAR records in CISA KEV

TI-2017-03537 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CRITICAL 94KEV 2022-09-08 TI-2017-04600 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL 100KEV 2022-06-08 TI-2016-08250 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CRITICAL 100KEV 2022-03-25 TI-2016-01416 NETGEAR Multiple WAP Devices Command Injection Vulnerability CRITICAL 100KEV 2022-03-25 TI-2017-04162 NETGEAR DGN2200 Devices OS Command Injection Vulnerability CRITICAL 97KEV 2022-03-25 TI-2016-05377 NETGEAR Multiple Routers Remote Code Execution Vulnerability CRITICAL 97KEV 2022-03-07

Components

Products in the NVD configurations · select one to filter the records

R7800 Firmware 246 records MEDIUM R9000 Firmware 216 records HIGH R6700 Firmware 173 records CRITICAL D7800 Firmware 172 records CRITICAL R7000p Firmware 156 records HIGH Rbr850 Firmware 151 records MEDIUM Rbs850 Firmware 149 records MEDIUM Rbk852 Firmware 142 records MEDIUM

Records

11 records in Wnr614 Firmware · all components

TI-2016-08250 CVE-2016-10174 · GHSA-rgmj-9q73-5phf

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter…

CRITICAL 100KEV

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.83328 Published 2017-01-30 No fix listed CWE-120

TI-2024-24408 CVE-2024-36790 · GHSA-3g7r-r3cr-q6f8

Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plaintext.

HIGH 73

Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plaintext.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00347 Published 2024-06-07 No fix listed CWE-312

TI-2025-04935 CVE-2025-5495 · GHSA-fxhf-2c5f-jh3q

Netgear WNR614 URL improper authentication

HIGH 70

A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01038 Published 2025-06-03 No fix listed CWE-287

TI-2024-24407 CVE-2024-36789 · GHSA-8wgj-qwf7-w6vx

An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create…

HIGH 70

An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create passwords that do not conform to defined security standards.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00402 Published 2024-06-07 No fix listed CWE-521

TI-2024-24409 CVE-2024-36792 · GHSA-p763-v5vh-f5mg

An issue in the implementation of the WPS in Netgear WNR614…

HIGH 69

An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain access to the router's pin.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00285 Published 2024-06-07 No fix listed CWE-316

TI-2024-24410 CVE-2024-36795 · GHSA-qpvg-vp7c-mg9m

Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to…

MEDIUM 52

Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to access URLs and directories embedded within the firmware via unspecified vectors.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00335 Published 2024-06-06 No fix listed CWE-22

TI-2024-24405 CVE-2024-36787 · GHSA-hrp7-jrg8-xfwx

An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass…

MEDIUM 41

An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass authentication and access the administrative interface via unspecified vectors.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00566 Published 2024-06-07 No fix listed CWE-1390

TI-2019-14910 CVE-2019-20690 · GHSA-8mhp-wg44-9rxg

Certain NETGEAR devices are affected by authentication bypass.

LOW 39

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00572 Published 2020-04-16 No fix listed

TI-2017-13941 CVE-2017-18791 · GHSA-xrj3-j65c-j9gg

Certain NETGEAR devices are affected by CSRF.

LOW 38

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2020-04-21 No fix listed CWE-352

TI-2016-09092 CVE-2016-11057 · GHSA-395v-vr8h-m439

Certain NETGEAR devices are affected by mishandling of repeated URL calls.

LOW 35

Certain NETGEAR devices are affected by mishandling of repeated URL calls.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01015 Published 2020-04-28 No fix listed CWE-287

TI-2024-24406 CVE-2024-36788 · GHSA-8f46-hh28-cq8h

Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for…

LOW 26

Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.00268 Published 2024-06-07 No fix listed CWE-922

Open these records in search →

Critical	217
High	591
Medium	535
Low	22
No CVSS	0