Vulnerabilities

TI-2022-19265 CVE-2022-40620 · GHSA-8cgh-w254-67rw

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems…

LOW 35

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism.

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.00315 Published 2026-01-28 No fix listed CWE-295

TI-2022-19264 CVE-2022-40619 · GHSA-5gwm-h32x-cppq

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems…

MEDIUM 40

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices.

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.02526 Published 2026-01-28 No fix listed CWE-77

TI-2025-11858 CVE-2025-12942 · GHSA-83g8-4c46-g95x

Improper input validation in NETGEAR R6260 and R6850

LOW 24

Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.T…

CVSS 4.0MEDIUM 4.8 Adjacent network Low privileges No interaction EPSS 0.00318 Published 2025-11-11 No fix listed CWE-20

TI-2021-13855 CVE-2021-34865 · GHSA-5wc2-pfcw-568j

Improper authentication in NETGEAR Multiple Routers

MEDIUM 44

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.03075 Published 2022-01-25 No fix listed CWE-287

TI-2021-13970 CVE-2021-34980 · GHSA-65c2-8xvq-gj7j

Stack-based buffer overflow in NETGEAR R6260

MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01417 Published 2022-01-13 No fix listed CWE-121

TI-2021-13969 CVE-2021-34979 · GHSA-4873-p9vm-3mmf

Buffer overflow in NETGEAR R6260

MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01419 Published 2022-01-13 No fix listed CWE-120

TI-2021-13968 CVE-2021-34978 · GHSA-4hvv-r2vp-wmj4

Stack-based buffer overflow in NETGEAR R6260

MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0157 Published 2022-01-13 No fix listed CWE-121

TI-2021-20588 CVE-2021-45501 · GHSA-hwc2-6cgc-779p

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 46

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0201 Published 2021-12-26 No fix listed

TI-2021-20598 CVE-2021-45511 · GHSA-wr8v-6jgr-244v

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 60

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18885 Published 2021-12-26 No fix listed

TI-2021-20621 CVE-2021-45534 · GHSA-93cf-3r2j-7pmj

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 36

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01092 Published 2021-12-26 No fix listed CWE-77

TI-2021-20638 CVE-2021-45551 · GHSA-fxgh-826p-6cx6

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0151 Published 2021-12-26 No fix listed CWE-77

TI-2021-20660 CVE-2021-45573 · GHSA-r2vh-7p3c-jgwf

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 38

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00472 Published 2021-12-26 No fix listed CWE-787

TI-2021-20724 CVE-2021-45637 · GHSA-q86f-gx2m-pq24

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

MEDIUM 45

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01238 Published 2021-12-26 No fix listed CWE-787

TI-2021-20731 CVE-2021-45644 · GHSA-82w7-3942-wg3x

Certain NETGEAR devices are affected by incorrect configuration of security settings.

MEDIUM 44

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01114 Published 2021-12-26 No fix listed

TI-2021-20734 CVE-2021-45647 · GHSA-wgj8-hg3j-j44v

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 36

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01346 Published 2021-12-26 No fix listed CWE-200

TI-2021-20743 CVE-2021-45656 · GHSA-7mw2-5r6h-5932

Certain NETGEAR devices are affected by server-side injection.

LOW 34

Certain NETGEAR devices are affected by server-side injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00324 Published 2021-12-26 No fix listed CWE-74

TI-2021-20744 CVE-2021-45657 · GHSA-3r3x-75vr-q97w

Certain NETGEAR devices are affected by server-side injection.

LOW 34

Certain NETGEAR devices are affected by server-side injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00347 Published 2021-12-26 No fix listed CWE-74

TI-2021-20759 CVE-2021-45672 · GHSA-7r9x-pcfj-2cwg

Certain NETGEAR devices are affected by Stored XSS.

LOW 22

Certain NETGEAR devices are affected by Stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00377 Published 2021-12-26 No fix listed CWE-79

TI-2021-20762 CVE-2021-45675 · GHSA-jr8h-85hr-jr68

Certain NETGEAR devices are affected by stored XSS.

LOW 26

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 5.8 Local High privileges User interaction EPSS 0.00345 Published 2021-12-26 No fix listed CWE-79

TI-2021-16116 CVE-2021-38516 · GHSA-73gm-85xf-8699

Certain NETGEAR devices are affected by lack of access control at the function level.

MEDIUM 46

Certain NETGEAR devices are affected by lack of access control at the function level.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01349 Published 2021-08-11 No fix listed

TI-2021-16125 CVE-2021-38525 · GHSA-h98g-ff23-mc6v

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 34

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01019 Published 2021-08-11 No fix listed CWE-787

TI-2021-16131 CVE-2021-38531 · GHSA-36mf-8q8h-hjmg

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 32

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00418 Published 2021-08-11 No fix listed

TI-2021-16134 CVE-2021-38534 · GHSA-fj76-v68g-qvc5

Certain NETGEAR devices are affected by stored XSS.

LOW 23

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00514 Published 2021-08-10 No fix listed CWE-79

TI-2021-16135 CVE-2021-38535 · GHSA-c5q5-p78r-jpgv

Certain NETGEAR devices are affected by stored XSS.

LOW 22

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00464 Published 2021-08-10 No fix listed CWE-79

TI-2021-16136 CVE-2021-38536 · GHSA-w987-g8v2-g8rg

Certain NETGEAR devices are affected by stored XSS.

LOW 22

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00464 Published 2021-08-10 No fix listed CWE-79

Vulnerabilities

Filters