Vulnerabilities

TI-2021-13855 CVE-2021-34865 · GHSA-5wc2-pfcw-568j

Improper authentication in NETGEAR Multiple Routers

MEDIUM 44

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.03075 Published 2022-01-25 No fix listed CWE-287

TI-2021-20585 CVE-2021-45498 · GHSA-x279-p549-h2x4

NETGEAR R6700v2 devices before 1.2.0.88 are affected by authentication bypass.

MEDIUM 45

NETGEAR R6700v2 devices before 1.2.0.88 are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01613 Published 2021-12-26 No fix listed

TI-2021-20588 CVE-2021-45501 · GHSA-hwc2-6cgc-779p

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 46

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0201 Published 2021-12-26 No fix listed

TI-2021-20598 CVE-2021-45511 · GHSA-wr8v-6jgr-244v

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 60

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18885 Published 2021-12-26 No fix listed

TI-2021-20621 CVE-2021-45534 · GHSA-93cf-3r2j-7pmj

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 36

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01092 Published 2021-12-26 No fix listed CWE-77

TI-2021-20638 CVE-2021-45551 · GHSA-fxgh-826p-6cx6

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0151 Published 2021-12-26 No fix listed CWE-77

TI-2021-20724 CVE-2021-45637 · GHSA-q86f-gx2m-pq24

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

MEDIUM 45

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01238 Published 2021-12-26 No fix listed CWE-787

TI-2021-20731 CVE-2021-45644 · GHSA-82w7-3942-wg3x

Certain NETGEAR devices are affected by incorrect configuration of security settings.

MEDIUM 44

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01114 Published 2021-12-26 No fix listed

TI-2021-20734 CVE-2021-45647 · GHSA-wgj8-hg3j-j44v

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 36

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01346 Published 2021-12-26 No fix listed CWE-200

TI-2021-20744 CVE-2021-45657 · GHSA-3r3x-75vr-q97w

Certain NETGEAR devices are affected by server-side injection.

LOW 34

Certain NETGEAR devices are affected by server-side injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00347 Published 2021-12-26 No fix listed CWE-74

TI-2021-20759 CVE-2021-45672 · GHSA-7r9x-pcfj-2cwg

Certain NETGEAR devices are affected by Stored XSS.

LOW 22

Certain NETGEAR devices are affected by Stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00377 Published 2021-12-26 No fix listed CWE-79

TI-2021-20762 CVE-2021-45675 · GHSA-jr8h-85hr-jr68

Certain NETGEAR devices are affected by stored XSS.

LOW 26

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 5.8 Local High privileges User interaction EPSS 0.00345 Published 2021-12-26 No fix listed CWE-79

TI-2020-18243 CVE-2020-35799 · GHSA-3mwp-vjrv-6crj

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

MEDIUM 44

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01204 Published 2020-12-29 No fix listed CWE-787

TI-2020-18247 CVE-2020-35803 · GHSA-h273-mwpm-4f8q

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 20

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00315 Published 2020-12-29 No fix listed

TI-2020-18285 CVE-2020-35841 · GHSA-8q35-pvh9-gxxg

Certain NETGEAR devices are affected by stored XSS.

LOW 34

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00627 Published 2020-12-29 No fix listed CWE-79

TI-2020-18239 CVE-2020-35795 · GHSA-37xm-62j3-375v

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 44

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01204 Published 2020-12-29 No fix listed CWE-120

TI-2020-18244 CVE-2020-35800 · GHSA-3w6j-54mg-5cr4

Certain NETGEAR devices are affected by incorrect configuration of security settings.

MEDIUM 44

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.01628 Published 2020-12-29 No fix listed

TI-2020-16335 CVE-2020-26908 · GHSA-gw77-ghxg-2429

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 46

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02061 Published 2020-10-09 No fix listed

TI-2020-16338 CVE-2020-26911 · GHSA-87fm-5qxc-5j87

Certain NETGEAR devices are affected by lack of access control at the function level.

LOW 39

Certain NETGEAR devices are affected by lack of access control at the function level.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00526 Published 2020-10-09 No fix listed

TI-2020-16339 CVE-2020-26912 · GHSA-3hjj-hrqp-h46r

Certain NETGEAR devices are affected by CSRF.

LOW 39

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00621 Published 2020-10-09 No fix listed CWE-352

TI-2020-16341 CVE-2020-26914 · GHSA-whmj-839p-v5g9

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 33

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 7.1 Adjacent network Low privileges No interaction EPSS 0.00794 Published 2020-10-09 No fix listed CWE-77

TI-2020-16343 CVE-2020-26916 · GHSA-h8hf-fwx7-44x7

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 29

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1MEDIUM 6.3 Adjacent network No auth No interaction EPSS 0.00474 Published 2020-10-09 No fix listed

Vulnerabilities

Filters