Vulnerabilities

TI-2026-00279 CVE-2026-0417 · GHSA-gp45-6q59-r2fj

Insufficient input validation in certain NETGEAR routers

LOW 19

Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.

CVSS 4.0MEDIUM 4.3 Adjacent network High privileges No interaction EPSS 0.00229 Published 2026-06-09 Fixed in V1.1.7.132, V1.0.3.28 +11 CWE-20

TI-2026-08095 CVE-2026-9210 · GHSA-rgvr-gjhw-96v7

Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router

LOW 22

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

CVSS 4.0MEDIUM 4.9 Adjacent network No auth No interaction EPSS 0.00216 Published 2026-06-09 Fixed in V1.0.0.100, V1.0.0.72 +13 CWE-20

TI-2024-12039 CVE-2024-12988 · GHSA-9jgq-4mjq-qcc9

Netgear R6900P/R7000P HTTP Header sub_16C4C buffer overflow

MEDIUM 64

A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00886 Published 2024-12-27 No fix listed CWE-119

TI-2021-13973 CVE-2021-34983 · GHSA-2r4f-jfx8-mhm3

Missing authentication in NETGEAR Multiple Routers

LOW 29

NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00329 Published 2024-05-07 No fix listed CWE-306

TI-2021-13972 CVE-2021-34982 · GHSA-3g79-p8hq-4qgp

Stack-based buffer overflow in NETGEAR Multiple Routers

MEDIUM 41

NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00581 Published 2024-05-07 No fix listed CWE-121

TI-2023-19796 CVE-2023-38412 · GHSA-pff2-q6w5-5w3v

Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the…

HIGH 73

Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at ia_ap_setting.cgi.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00961 Published 2023-08-07 No fix listed CWE-120

TI-2022-10628 CVE-2022-27647 · GHSA-7pr7-x6mw-h647

OS command injection in NETGEAR R6700v3

MEDIUM 40

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.0148 Published 2023-03-29 No fix listed CWE-78

TI-2022-10627 CVE-2022-27646 · GHSA-qjg8-7gjq-vxf4

Stack-based buffer overflow in NETGEAR R6700v3

MEDIUM 43

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01432 Published 2023-03-29 No fix listed CWE-121

TI-2022-10625 CVE-2022-27644 · GHSA-rvc6-cvq7-4g2q

Improper certificate validation in NETGEAR R6700v3

LOW 38

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00336 Published 2023-03-29 No fix listed CWE-295

TI-2022-10624 CVE-2022-27643 · GHSA-h8wj-xxvx-cv2r

Buffer overflow in NETGEAR R6700v3

MEDIUM 61

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.25439 Published 2023-03-29 No fix listed CWE-120

TI-2022-10623 CVE-2022-27642 · GHSA-w94x-h737-f6h9

Incorrect authorization in NETGEAR R6700v3

MEDIUM 40

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00878 Published 2023-03-29 No fix listed CWE-863

TI-2022-23936 CVE-2022-48322 · GHSA-fqmr-3mv2-53x7

NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer…

MEDIUM 50

NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00682 Published 2023-02-13 No fix listed CWE-787

TI-2022-23835 CVE-2022-48176 · GHSA-76w4-2fg3-x9mc

Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before…

LOW 36

Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authentication stack overflow.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00448 Published 2023-01-30 No fix listed CWE-787

TI-2022-23849 CVE-2022-48196 · GHSA-qc52-6cw2-7g23

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 44

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00975 Published 2022-12-30 No fix listed CWE-120

TI-2021-20586 CVE-2021-45499 · GHSA-8vrw-jj57-pj7h

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 40

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01049 Published 2021-12-26 No fix listed

TI-2021-20599 CVE-2021-45512 · GHSA-59h7-2c4x-36qm

Certain NETGEAR devices are affected by weak cryptography.

MEDIUM 43

Certain NETGEAR devices are affected by weak cryptography.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00567 Published 2021-12-26 No fix listed CWE-327

TI-2021-20603 CVE-2021-45516 · GHSA-ww8f-mqhh-q395

Certain NETGEAR devices are affected by denial of service.

LOW 31

Certain NETGEAR devices are affected by denial of service.

CVSS 3.1MEDIUM 6.9 Adjacent network High privileges No interaction EPSS 0.00405 Published 2021-12-26 No fix listed

TI-2021-20612 CVE-2021-45525 · GHSA-5gwf-666w-9f26

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

MEDIUM 40

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00898 Published 2021-12-26 No fix listed CWE-120

TI-2021-20613 CVE-2021-45526 · GHSA-c8w9-7pxw-2m9j

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 38

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00465 Published 2021-12-26 No fix listed CWE-120

TI-2021-20614 CVE-2021-45527 · GHSA-h529-hgpf-hm97

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

MEDIUM 44

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01176 Published 2021-12-26 No fix listed CWE-120

TI-2021-20616 CVE-2021-45529 · GHSA-g942-mfwx-h532

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 33

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.3 Local High privileges No interaction EPSS 0.00475 Published 2021-12-26 No fix listed CWE-120

TI-2021-20636 CVE-2021-45549 · GHSA-m6m8-v67p-7g6q

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 37

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00633 Published 2021-12-26 No fix listed CWE-77

TI-2021-20637 CVE-2021-45550 · GHSA-hvp9-jp8f-v4wh

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00574 Published 2021-12-26 No fix listed CWE-77

TI-2021-20640 CVE-2021-45553 · GHSA-hvcg-rv65-whmr

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 40

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00971 Published 2021-12-26 No fix listed CWE-77

TI-2021-20641 CVE-2021-45554 · GHSA-wv6j-67wp-9cm3

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 37

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00631 Published 2021-12-26 No fix listed CWE-77

Vulnerabilities

Filters