Priority MEDIUM 41
NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00549 · Published 2024-05-07 · No fix listed CWE-787
Priority MEDIUM 40
Certain NETGEAR devices are affected by command injection by an authenticated user.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00953 · Published 2021-12-26 · No fix listed CWE-77
Priority MEDIUM 46
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0202 · Published 2021-12-26 · No fix listed CWE-77
Priority MEDIUM 47
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02588 · Published 2021-12-26 · No fix listed CWE-77
Priority LOW 33
Certain NETGEAR devices are affected by incorrect configuration of security settings.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0065 · Published 2021-12-26 · No fix listed
Priority LOW 39
Certain NETGEAR devices are affected by incorrect configuration of security settings.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00718 · Published 2021-12-26 · No fix listed
Priority MEDIUM 44
Certain NETGEAR devices are affected by server-side injection.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00847 · Published 2021-12-26 · No fix listed CWE-74
Priority LOW 37
Certain NETGEAR devices are affected by command injection by an authenticated user.
CVSS 3.1HIGH 8.4· Adjacent network · High privileges · No interaction · EPSS 0.00473 · Published 2021-03-23 · No fix listed CWE-77
Priority MEDIUM 44
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01204 · Published 2020-12-29 · No fix listed CWE-787
Priority LOW 23
Certain NETGEAR devices are affected by stored XSS.
CVSS 3.1MEDIUM 4.8· Adjacent network · High privileges · No interaction · EPSS 0.00517 · Published 2020-12-29 · No fix listed CWE-79
Priority LOW 31
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.
CVSS 3.1MEDIUM 6.8· Adjacent network · High privileges · No interaction · EPSS 0.0063 · Published 2020-10-09 · No fix listed CWE-787
Priority HIGH 81
The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.77426 · Published 2017-01-30 · No fix listed CWE-20
Priority HIGH 78
The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.65541 · Published 2017-01-30 · No fix listed CWE-200
Priority CRITICAL 100KEV
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.83328 · Published 2017-01-30 · No fix listed CWE-120