Vulnerabilities

TI-2024-18843 CVE-2024-28340 · GHSA-h9c5-fmrg-fj53

An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28…

HIGH 72

An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00635 Published 2024-03-12 No fix listed CWE-200

TI-2024-18842 CVE-2024-28339 · GHSA-vrcc-m4x7-8j47

An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear…

MEDIUM 58

An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required.

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.00428 Published 2024-03-12 No fix listed CWE-200

TI-2023-18149 CVE-2023-36187 · GHSA-qpcg-54gx-2mvc

Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote…

MEDIUM 51

Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01133 Published 2023-09-01 No fix listed CWE-120

TI-2022-10627 CVE-2022-27646 · GHSA-qjg8-7gjq-vxf4

Stack-based buffer overflow in NETGEAR R6700v3

MEDIUM 43

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01432 Published 2023-03-29 No fix listed CWE-121

TI-2022-10625 CVE-2022-27644 · GHSA-rvc6-cvq7-4g2q

Improper certificate validation in NETGEAR R6700v3

LOW 38

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00336 Published 2023-03-29 No fix listed CWE-295

TI-2021-20591 CVE-2021-45504 · GHSA-25g7-4hx6-524h

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 44

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01181 Published 2021-12-26 No fix listed

TI-2021-20594 CVE-2021-45507 · GHSA-qfrw-2r49-g452

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 45

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01525 Published 2021-12-26 No fix listed

TI-2021-20595 CVE-2021-45508 · GHSA-7g9c-3hjm-r38g

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 44

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01181 Published 2021-12-26 No fix listed

TI-2021-20596 CVE-2021-45509 · GHSA-gr55-r58c-wmfq

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 44

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01181 Published 2021-12-26 No fix listed

TI-2021-20616 CVE-2021-45529 · GHSA-g942-mfwx-h532

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 33

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.3 Local High privileges No interaction EPSS 0.00475 Published 2021-12-26 No fix listed CWE-120

TI-2021-20684 CVE-2021-45597 · GHSA-x844-f6px-v43p

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01531 Published 2021-12-26 No fix listed CWE-77

TI-2021-20685 CVE-2021-45598 · GHSA-3x79-3x7f-qrvm

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01531 Published 2021-12-26 No fix listed CWE-77

TI-2021-20686 CVE-2021-45599 · GHSA-xphq-hxjq-7x4c

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01531 Published 2021-12-26 No fix listed CWE-77

TI-2021-20688 CVE-2021-45601 · GHSA-3wvf-vrwq-272g

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01531 Published 2021-12-26 No fix listed CWE-77

TI-2021-20699 CVE-2021-45612 · GHSA-95h9-7v59-h6gr