Vulnerabilities

TI-2023-17317 CVE-2023-34563 · GHSA-5jxp-5vrv-qmg9

netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication.

HIGH 82

netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13746 Published 2023-06-20 No fix listed CWE-120

TI-2023-16566 CVE-2023-33532 · GHSA-m27w-5xf6-x4r2

There is a command injection vulnerability in the Netgear R6250 router with Firmware…

HIGH 82

There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.16171 Published 2023-06-06 No fix listed CWE-77

TI-2021-20599 CVE-2021-45512 · GHSA-59h7-2c4x-36qm

Certain NETGEAR devices are affected by weak cryptography.

MEDIUM 43

Certain NETGEAR devices are affected by weak cryptography.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00567 Published 2021-12-26 No fix listed CWE-327

TI-2021-20614 CVE-2021-45527 · GHSA-h529-hgpf-hm97

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

MEDIUM 44

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01176 Published 2021-12-26 No fix listed CWE-120

TI-2021-20637 CVE-2021-45550 · GHSA-hvp9-jp8f-v4wh

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00574 Published 2021-12-26 No fix listed CWE-77

TI-2021-20696 CVE-2021-45609 · GHSA-3wm8-ccjv-8v3m

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01249 Published 2021-12-26 No fix listed CWE-120

TI-2021-20697 CVE-2021-45610 · GHSA-m3x6-j75p-546g

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01495 Published 2021-12-26 No fix listed CWE-120

TI-2021-20727 CVE-2021-45640 · GHSA-6rr5-9j7h-58cj

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 33

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0065 Published 2021-12-26 No fix listed

TI-2021-20728 CVE-2021-45641 · GHSA-9j28-327w-4vrh

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 39

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00718 Published 2021-12-26 No fix listed

TI-2021-16116 CVE-2021-38516 · GHSA-73gm-85xf-8699

Certain NETGEAR devices are affected by lack of access control at the function level.

MEDIUM 46

Certain NETGEAR devices are affected by lack of access control at the function level.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01349 Published 2021-08-11 No fix listed

TI-2021-16119 CVE-2021-38519 · GHSA-7f62-cq2q-qjc7

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 34

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01381 Published 2021-08-11 No fix listed CWE-77

TI-2021-16134 CVE-2021-38534 · GHSA-fj76-v68g-qvc5

Certain NETGEAR devices are affected by stored XSS.

LOW 23

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00514 Published 2021-08-10 No fix listed CWE-79

TI-2021-16114 CVE-2021-38514 · GHSA-3mfx-6prr-4g43

Certain NETGEAR devices are affected by authentication bypass.

LOW 15

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00772 Published 2021-08-10 No fix listed

TI-2021-08779 CVE-2021-27239 · GHSA-hqww-3wrx-q5gv

Stack-based buffer overflow in NETGEAR Multiple Routers

LOW 39

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00772 Published 2021-03-29 No fix listed CWE-121

TI-2020-18240 CVE-2020-35796 · GHSA-c585-qfhx-g68f

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01299 Published 2020-12-29 No fix listed CWE-120

TI-2020-18244 CVE-2020-35800 · GHSA-3w6j-54mg-5cr4

Certain NETGEAR devices are affected by incorrect configuration of security settings.

MEDIUM 44

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.01628 Published 2020-12-29 No fix listed

TI-2020-17209 CVE-2020-28373 · GHSA-q256-52r3-3786

upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code…

MEDIUM 40

upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overflow.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01041 Published 2020-11-09 No fix listed CWE-787

TI-2020-16344 CVE-2020-26917 · GHSA-2rr6-rqrq-g5r8

Certain NETGEAR devices are affected by stored XSS.

LOW 23

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00626 Published 2020-10-09 No fix listed CWE-79

TI-2020-16345 CVE-2020-26918 · GHSA-c4pr-p8j7-fm86

Certain NETGEAR devices are affected by stored XSS.

LOW 23

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00626 Published 2020-10-09 No fix listed CWE-79

TI-2016-09094 CVE-2016-11059 · GHSA-pjvf-pcx9-852h

Certain NETGEAR devices are affected by password exposure.

LOW 35

Certain NETGEAR devices are affected by password exposure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01071 Published 2020-04-28 No fix listed CWE-200

TI-2018-15118 CVE-2018-21156 · GHSA-9f7j-2669-24wh

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 34

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0135 Published 2020-04-27 No fix listed CWE-120

TI-2018-15055 CVE-2018-21093 · GHSA-wgrg-fgrg-92cc

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 39

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00634 Published 2020-04-27 No fix listed CWE-787

TI-2018-15192 CVE-2018-21230 · GHSA-wx9j-wrx5-q4xr

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 25

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.0047 Published 2020-04-24 No fix listed

TI-2018-15193 CVE-2018-21231 · GHSA-r5w9-rc55-vh5r

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 25

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.00472 Published 2020-04-24 No fix listed

TI-2017-13854 CVE-2017-18700 · GHSA-hhj9-744r-pjmr

Certain NETGEAR devices are affected by stored XSS.

LOW 28

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00647 Published 2020-04-24 No fix listed CWE-79

Vulnerabilities

Filters