Priority LOW 29
NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability.
CVSS 3.0MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00329 · Published 2024-05-07 · No fix listed CWE-306
Priority MEDIUM 41
NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00581 · Published 2024-05-07 · No fix listed CWE-121
Priority MEDIUM 43
Certain NETGEAR devices are affected by weak cryptography.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00567 · Published 2021-12-26 · No fix listed CWE-327
Priority MEDIUM 44
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01176 · Published 2021-12-26 · No fix listed CWE-120
Priority LOW 31
Certain NETGEAR devices are affected by command injection by an authenticated user.
CVSS 3.1MEDIUM 6.8· Adjacent network · High privileges · No interaction · EPSS 0.00574 · Published 2021-12-26 · No fix listed CWE-77
Priority MEDIUM 45
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01249 · Published 2021-12-26 · No fix listed CWE-120
Priority MEDIUM 45
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01238 · Published 2021-12-26 · No fix listed CWE-120
Priority MEDIUM 43
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.6· Adjacent network · No auth · No interaction · EPSS 0.00997 · Published 2021-12-26 · No fix listed CWE-77
Priority MEDIUM 46
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02037 · Published 2021-12-26 · No fix listed CWE-77
Priority MEDIUM 45
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01701 · Published 2021-12-26 · No fix listed CWE-77
Priority MEDIUM 47
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.05714 · Published 2021-11-15 · No fix listed CWE-121
Priority LOW 23
Certain NETGEAR devices are affected by stored XSS.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00514 · Published 2021-08-10 · No fix listed CWE-79
Priority MEDIUM 40
Certain NETGEAR devices are affected by privilege escalation.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00829 · Published 2021-08-10 · No fix listed
Priority LOW 15
Certain NETGEAR devices are affected by authentication bypass.
CVSS 3.1LOW 2.7· Network · High privileges · No interaction · EPSS 0.00772 · Published 2021-08-10 · No fix listed
Priority LOW 39
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00772 · Published 2021-03-29 · No fix listed CWE-121
Priority MEDIUM 45
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01299 · Published 2020-12-29 · No fix listed CWE-120
Priority MEDIUM 44
Certain NETGEAR devices are affected by incorrect configuration of security settings.
CVSS 3.1CRITICAL 9.4· Network · No auth · No interaction · EPSS 0.01628 · Published 2020-12-29 · No fix listed
Priority MEDIUM 40
upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overflow.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01041 · Published 2020-11-09 · No fix listed CWE-787
Priority LOW 23
Certain NETGEAR devices are affected by stored XSS.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00626 · Published 2020-10-09 · No fix listed CWE-79
Priority LOW 23
Certain NETGEAR devices are affected by stored XSS.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00626 · Published 2020-10-09 · No fix listed CWE-79
Priority MEDIUM 46
NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.6· Adjacent network · No auth · No interaction · EPSS 0.0224 · Published 2020-09-01 · No fix listed CWE-77
Priority LOW 39
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00567 · Published 2020-05-05 · No fix listed CWE-120
Priority LOW 31
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.
CVSS 3.1MEDIUM 6.8· Adjacent network · High privileges · No interaction · EPSS 0.00506 · Published 2020-05-05 · No fix listed CWE-787
Priority LOW 31
Certain NETGEAR devices are affected by password recovery and file access.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.01129 · Published 2020-04-29 · No fix listed CWE-200
Priority LOW 32
Certain NETGEAR devices are affected by command injection by an authenticated user.
CVSS 3.1MEDIUM 6.8· Adjacent network · High privileges · No interaction · EPSS 0.0085 · Published 2020-04-28 · No fix listed CWE-78
Load more