Vulnerabilities

TI-2022-10622 CVE-2022-27641 · GHSA-48fv-6rrf-3cqx

Integer overflow in NETGEAR R6700v3

MEDIUM 43

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01234 Published 2023-03-29 No fix listed CWE-190

TI-2022-20454 CVE-2022-42221 · GHSA-xpmg-m9rm-chxc

Netgear R6220 v1.1.0.114_1.0.1 suffers from Incorrect Access Control, resulting in a command injection vulnerability.

MEDIUM 44

Netgear R6220 v1.1.0.114_1.0.1 suffers from Incorrect Access Control, resulting in a command injection vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01848 Published 2022-10-17 No fix listed

TI-2021-19935 CVE-2021-44261 · GHSA-47mp-f3h5-7m3m

A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version…

MEDIUM 43

A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.20305 Published 2022-03-17 No fix listed CWE-306

TI-2021-13855 CVE-2021-34865 · GHSA-5wc2-pfcw-568j

Improper authentication in NETGEAR Multiple Routers

MEDIUM 44

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.03075 Published 2022-01-25 No fix listed CWE-287

TI-2021-20588 CVE-2021-45501 · GHSA-hwc2-6cgc-779p

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 46

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0201 Published 2021-12-26 No fix listed

TI-2021-20598 CVE-2021-45511 · GHSA-wr8v-6jgr-244v

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 60

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18885 Published 2021-12-26 No fix listed

TI-2021-20621 CVE-2021-45534 · GHSA-93cf-3r2j-7pmj

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 36

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01092 Published 2021-12-26 No fix listed CWE-77

TI-2021-20638 CVE-2021-45551 · GHSA-fxgh-826p-6cx6

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0151 Published 2021-12-26 No fix listed CWE-77

TI-2021-20727 CVE-2021-45640 · GHSA-6rr5-9j7h-58cj

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 33

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0065 Published 2021-12-26 No fix listed

TI-2021-20728 CVE-2021-45641 · GHSA-9j28-327w-4vrh

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 39

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00718 Published 2021-12-26 No fix listed

TI-2021-20731 CVE-2021-45644 · GHSA-82w7-3942-wg3x

Certain NETGEAR devices are affected by incorrect configuration of security settings.

MEDIUM 44

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01114 Published 2021-12-26 No fix listed

TI-2021-20734 CVE-2021-45647 · GHSA-wgj8-hg3j-j44v

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 36

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01346 Published 2021-12-26 No fix listed CWE-200

TI-2021-20743 CVE-2021-45656 · GHSA-7mw2-5r6h-5932

Certain NETGEAR devices are affected by server-side injection.

LOW 34

Certain NETGEAR devices are affected by server-side injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00324 Published 2021-12-26 No fix listed CWE-74

TI-2021-20744 CVE-2021-45657 · GHSA-3r3x-75vr-q97w

Certain NETGEAR devices are affected by server-side injection.

LOW 34

Certain NETGEAR devices are affected by server-side injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00347 Published 2021-12-26 No fix listed CWE-74

TI-2021-20759 CVE-2021-45672 · GHSA-7r9x-pcfj-2cwg

Certain NETGEAR devices are affected by Stored XSS.

LOW 22

Certain NETGEAR devices are affected by Stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00377 Published 2021-12-26 No fix listed CWE-79

TI-2021-16116 CVE-2021-38516 · GHSA-73gm-85xf-8699

Certain NETGEAR devices are affected by lack of access control at the function level.

MEDIUM 46

Certain NETGEAR devices are affected by lack of access control at the function level.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01349 Published 2021-08-11 No fix listed

TI-2021-16125 CVE-2021-38525 · GHSA-h98g-ff23-mc6v

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 34

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01019 Published 2021-08-11 No fix listed CWE-787

TI-2021-16134 CVE-2021-38534 · GHSA-fj76-v68g-qvc5

Certain NETGEAR devices are affected by stored XSS.

LOW 23

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00514 Published 2021-08-10 No fix listed CWE-79

TI-2021-16114 CVE-2021-38514 · GHSA-3mfx-6prr-4g43

Certain NETGEAR devices are affected by authentication bypass.

LOW 15

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00772 Published 2021-08-10 No fix listed

TI-2021-09955 CVE-2021-29068 · GHSA-4223-wcr9-hvjq

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01093 Published 2021-03-23 No fix listed CWE-120

TI-2020-16935 CVE-2020-27867 · GHSA-9xcx-66r3-hp2h

Command injection in NETGEAR Multiple Routers

LOW 35

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, a…

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.02331 Published 2021-02-11 No fix listed CWE-77

TI-2020-16934 CVE-2020-27866 · GHSA-mj6p-ghhj-r3q4

Authentication bypass in NETGEAR Multiple Routers

MEDIUM 49

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, an…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.08656 Published 2021-02-11 No fix listed CWE-288

TI-2020-16941 CVE-2020-27873 · GHSA-cj3p-75j4-74xf

Improper access control in NETGEAR R7450

LOW 30

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00628 Published 2021-02-04 No fix listed CWE-284

TI-2020-16940 CVE-2020-27872 · GHSA-6qj7-98xg-fpgf

Exposure of resource to wrong sphere in NETGEAR R7450

MEDIUM 40

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00937 Published 2021-02-04 No fix listed CWE-642

TI-2020-18231 CVE-2020-35787 · GHSA-6gcw-7qx9-8vhw

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 35

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00489 Published 2020-12-29 No fix listed CWE-120

Vulnerabilities

Filters