Priority LOW 20
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
CVSS 4.0MEDIUM 4.3· Adjacent network · High privileges · No interaction · EPSS 0.00403 · Published 2026-08-11 · Fixed in V1.2.14.114, V1.0.7.66 CWE-20
Priority LOW 29
A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the…
CVSS 4.0MEDIUM 4.9· Adjacent network · No auth · No interaction · EPSS 0.0255 · Published 2026-08-11 · Fixed in V1.1.8.142, V1.0.4.48 +7 CWE-78
Priority LOW 29
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality…
CVSS 4.0MEDIUM 4.9· Adjacent network · No auth · No interaction · EPSS 0.02183 · Published 2026-08-11 · Fixed in V1.0.1.84, V1.1.8.142 +9 CWE-295
Priority LOW 20
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
CVSS 4.0MEDIUM 4.3· Adjacent network · High privileges · No interaction · EPSS 0.00245 · Published 2026-06-09 · Fixed in v4.6.14.4, V1.1.7.128 +8 CWE-15
Priority LOW 19
Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.
CVSS 4.0MEDIUM 4.3· Adjacent network · High privileges · No interaction · EPSS 0.00229 · Published 2026-06-09 · Fixed in V1.1.7.132, V1.0.3.28 +11 CWE-20
Priority LOW 22
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
CVSS 4.0MEDIUM 4.9· Adjacent network · No auth · No interaction · EPSS 0.00216 · Published 2026-06-09 · Fixed in V1.0.0.100, V1.0.0.72 +13 CWE-20
Priority LOW 29
NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability.
CVSS 3.0MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00329 · Published 2024-05-07 · No fix listed CWE-306
Priority MEDIUM 41
NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00581 · Published 2024-05-07 · No fix listed CWE-121
Priority MEDIUM 51
Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01133 · Published 2023-09-01 · No fix listed CWE-120
Priority MEDIUM 40
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.0148 · Published 2023-03-29 · No fix listed CWE-78
Priority MEDIUM 40
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00878 · Published 2023-03-29 · No fix listed CWE-863
Priority MEDIUM 50
NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00682 · Published 2023-02-13 · No fix listed CWE-787
Priority LOW 36
Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authentication stack overflow.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00448 · Published 2023-01-30 · No fix listed CWE-787
Priority LOW 37
Certain NETGEAR devices are affected by command injection by an authenticated user.
CVSS 3.1HIGH 8.4· Adjacent network · High privileges · No interaction · EPSS 0.00631 · Published 2021-12-26 · No fix listed CWE-77
Priority LOW 37
Certain NETGEAR devices are affected by command injection by an authenticated user.
CVSS 3.1HIGH 8.4· Adjacent network · High privileges · No interaction · EPSS 0.00631 · Published 2021-12-26 · No fix listed CWE-77
Priority MEDIUM 41
Certain NETGEAR devices are affected by command injection by an authenticated user.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01482 · Published 2021-12-26 · No fix listed CWE-77
Priority LOW 37
Certain NETGEAR devices are affected by command injection by an authenticated user.
CVSS 3.1HIGH 8.4· Adjacent network · High privileges · No interaction · EPSS 0.00633 · Published 2021-12-26 · No fix listed CWE-77
Priority LOW 21
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.
CVSS 3.1MEDIUM 4.5· Adjacent network · High privileges · No interaction · EPSS 0.00381 · Published 2021-12-26 · No fix listed CWE-787
Priority MEDIUM 47
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02486 · Published 2021-12-26 · No fix listed CWE-77
Priority MEDIUM 46
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0202 · Published 2021-12-26 · No fix listed CWE-77
Priority MEDIUM 46
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0202 · Published 2021-12-26 · No fix listed CWE-77
Priority MEDIUM 46
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0202 · Published 2021-12-26 · No fix listed CWE-77
Priority MEDIUM 46
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02062 · Published 2021-12-26 · No fix listed CWE-77
Priority MEDIUM 46
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0202 · Published 2021-12-26 · No fix listed CWE-77
Priority MEDIUM 46
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02037 · Published 2021-12-26 · No fix listed CWE-77
Load more