Vulnerabilities

TI-2026-08097 CVE-2026-9212 · GHSA-wq28-w638-7xcv

Insufficient authentication and input validation in certain NETGEAR products

LOW 27

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.

CVSS 4.0MEDIUM 5.6 Adjacent network Low privileges No interaction EPSS 0.0027 Published 2026-06-09 Fixed in V2.6.4.60, V2.7.6.8 +8 CWE-20

TI-2021-13937 CVE-2021-34947 · GHSA-jj28-565j-58r3

Out-of-bounds write in NETGEAR R7800

MEDIUM 41

NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00549 Published 2024-05-07 No fix listed CWE-787

TI-2022-10627 CVE-2022-27646 · GHSA-qjg8-7gjq-vxf4

Stack-based buffer overflow in NETGEAR R6700v3

MEDIUM 43

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01432 Published 2023-03-29 No fix listed CWE-121

TI-2022-10625 CVE-2022-27644 · GHSA-rvc6-cvq7-4g2q

Improper certificate validation in NETGEAR R6700v3

LOW 38

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00336 Published 2023-03-29 No fix listed CWE-295

TI-2021-20682 CVE-2021-45595 · GHSA-r5jx-cqpf-rwcx

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0167 Published 2021-12-26 No fix listed CWE-77

TI-2021-20689 CVE-2021-45602 · GHSA-g3q6-9jxv-cjjg

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 35

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00731 Published 2021-12-26 No fix listed CWE-78

TI-2021-20690 CVE-2021-45603 · GHSA-qx9q-hrrj-rj5g

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 28

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00598 Published 2021-12-26 No fix listed CWE-200

TI-2021-20705 CVE-2021-45618 · GHSA-8fp7-34g5-gw45

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0202 Published 2021-12-26 No fix listed CWE-77

TI-2021-20706 CVE-2021-45619 · GHSA-h67v-rx96-6f59

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 47

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02588 Published 2021-12-26 No fix listed CWE-77

TI-2021-20729 CVE-2021-45642 · GHSA-6w4x-5fpc-6gg8

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 35

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 7.5 Adjacent network High privileges No interaction EPSS 0.00971 Published 2021-12-26 No fix listed

TI-2021-20735 CVE-2021-45648 · GHSA-hhm5-85r6-q9w9

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 34

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00809 Published 2021-12-26 No fix listed CWE-200

TI-2021-08793 CVE-2021-27253 · GHSA-xj23-fxfm-58rq

Heap-based buffer overflow in NETGEAR R7800

MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0125 Published 2021-04-14 No fix listed CWE-122

TI-2021-08792 CVE-2021-27252 · GHSA-gqcm-w2xr-9g8j

OS command injection in NETGEAR R7800

MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0124 Published 2021-04-14 No fix listed CWE-78

TI-2021-08791 CVE-2021-27251 · GHSA-2wc2-8hhf-wr42

Cleartext transmission of sensitive information in NETGEAR R7800

MEDIUM 40

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00811 Published 2021-04-14 No fix listed CWE-319

TI-2021-08797 CVE-2021-27257 · GHSA-q57h-78h9-m59j

Improper certificate validation in NETGEAR R7800

LOW 29

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware version 1.0.2.76.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00323 Published 2021-03-05 No fix listed CWE-295

TI-2021-08796 CVE-2021-27256 · GHSA-7j9h-j7vq-452x

OS command injection in NETGEAR R7800

MEDIUM 40

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00963 Published 2021-03-05 No fix listed CWE-78

TI-2021-08795 CVE-2021-27255 · GHSA-h584-8p47-255w

Missing authentication in NETGEAR R7800

MEDIUM 41

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.014 Published 2021-03-05 No fix listed CWE-306

TI-2021-08794 CVE-2021-27254 · GHSA-qxg5-9hcj-qp59

Hard-coded credentials in NETGEAR R7800

LOW 39

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00516 Published 2021-03-05 No fix listed CWE-259

Vulnerabilities

Filters