Vulnerabilities

TI-2023-16567 CVE-2023-33533 · GHSA-6hv6-62gq-jmq6

Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700…

HIGH 73

Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are vulnerable to Command Injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03096 Published 2023-06-06 No fix listed CWE-77

TI-2023-14205 CVE-2023-30280 · GHSA-cpxf-jwx4-g38v

Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128…

MEDIUM 51

Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute arbitrary code and cause a denial ofservice via the getInputData parameter of the…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01235 Published 2023-04-26 No fix listed CWE-120

TI-2022-10628 CVE-2022-27647 · GHSA-7pr7-x6mw-h647

OS command injection in NETGEAR R6700v3

MEDIUM 40

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.0148 Published 2023-03-29 No fix listed CWE-78

TI-2022-10627 CVE-2022-27646 · GHSA-qjg8-7gjq-vxf4

Stack-based buffer overflow in NETGEAR R6700v3

MEDIUM 43

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01432 Published 2023-03-29 No fix listed CWE-121

TI-2022-10626 CVE-2022-27645 · GHSA-jv3h-vgc4-3286

Missing authentication in NETGEAR R6700v3

MEDIUM 43

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01277 Published 2023-03-29 No fix listed CWE-306

TI-2022-10625 CVE-2022-27644 · GHSA-rvc6-cvq7-4g2q

Improper certificate validation in NETGEAR R6700v3

LOW 38

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00336 Published 2023-03-29 No fix listed CWE-295

TI-2022-10624 CVE-2022-27643 · GHSA-h8wj-xxvx-cv2r

Buffer overflow in NETGEAR R6700v3

MEDIUM 61

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.25439 Published 2023-03-29 No fix listed CWE-120

TI-2022-10623 CVE-2022-27642 · GHSA-w94x-h737-f6h9

Incorrect authorization in NETGEAR R6700v3

MEDIUM 40

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00878 Published 2023-03-29 No fix listed CWE-863

TI-2022-10622 CVE-2022-27641 · GHSA-48fv-6rrf-3cqx

Integer overflow in NETGEAR R6700v3

MEDIUM 43

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01234 Published 2023-03-29 No fix listed CWE-190

TI-2021-03475 CVE-2021-20175 · GHSA-47jc-2cqh-wc8g

Cleartext transmission of sensitive information in Netgear Nighthawk R6700

LOW 34

Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the SOAP interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00608 Published 2021-12-30 No fix listed CWE-319

TI-2021-03474 CVE-2021-20174 · GHSA-m9jg-hj4g-7m6r

Cleartext transmission of sensitive information in Netgear Nighthawk R6700

LOW 34

Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the web interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00608 Published 2021-12-30 No fix listed CWE-319

TI-2021-03473 CVE-2021-20173 · GHSA-x3v5-8924-rm83

OS command injection in Netgear Nighthawk R6700

MEDIUM 44

Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03225 Published 2021-12-30 No fix listed CWE-78

TI-2021-20412 CVE-2021-45077 · GHSA-h2wq-r4cc-9wqv

Cleartext storage of sensitive information in Netgear Nighthawk R6700

LOW 34

Netgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00608 Published 2021-12-30 No fix listed CWE-312

TI-2021-20811 CVE-2021-45732 · GHSA-6x2m-2w3q-qqp5

Hard-coded credentials in Netgear Nighthawk R6700

MEDIUM 40

Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00811 Published 2021-12-30 No fix listed CWE-798

TI-2021-05933 CVE-2021-23147 · GHSA-92gj-cjfc-w72m

Improper authentication in Netgear Nighthawk R6700

LOW 30

Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00376 Published 2021-12-30 No fix listed CWE-287

TI-2021-20599 CVE-2021-45512 · GHSA-59h7-2c4x-36qm

Certain NETGEAR devices are affected by weak cryptography.

MEDIUM 43

Certain NETGEAR devices are affected by weak cryptography.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00567 Published 2021-12-26 No fix listed CWE-327

TI-2021-20612 CVE-2021-45525 · GHSA-5gwf-666w-9f26

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

MEDIUM 40

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00898 Published 2021-12-26 No fix listed CWE-120

TI-2021-20636 CVE-2021-45549 · GHSA-m6m8-v67p-7g6q

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 37

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00633 Published 2021-12-26 No fix listed CWE-77

TI-2021-20637 CVE-2021-45550 · GHSA-hvp9-jp8f-v4wh

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00574 Published 2021-12-26 No fix listed CWE-77

TI-2021-20660 CVE-2021-45573 · GHSA-r2vh-7p3c-jgwf

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 38

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00472 Published 2021-12-26 No fix listed CWE-787

TI-2021-20691 CVE-2021-45604 · GHSA-cxv8-ggg4-fhvm

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 21

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 4.5 Adjacent network High privileges No interaction EPSS 0.00381 Published 2021-12-26 No fix listed CWE-787

TI-2021-20727 CVE-2021-45640 · GHSA-6rr5-9j7h-58cj

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 33

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0065 Published 2021-12-26 No fix listed

TI-2021-20728 CVE-2021-45641 · GHSA-9j28-327w-4vrh

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 39

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00718 Published 2021-12-26 No fix listed

TI-2021-20743 CVE-2021-45656 · GHSA-7mw2-5r6h-5932

Certain NETGEAR devices are affected by server-side injection.

LOW 34

Certain NETGEAR devices are affected by server-side injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00324 Published 2021-12-26 No fix listed CWE-74

TI-2021-17770 CVE-2021-40847 · GHSA-62q2-fg4c-c2qp

The update process of the Circle Parental Control Service on various NETGEAR routers…

MEDIUM 48

The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code execution as root via a MitM attack.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.10014 Published 2021-09-21 No fix listed CWE-319

Vulnerabilities

Filters