Vulnerabilities

TI-2022-10624 CVE-2022-27643 · GHSA-h8wj-xxvx-cv2r

Buffer overflow in NETGEAR R6700v3

MEDIUM 61

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.25439 Published 2023-03-29 No fix listed CWE-120

TI-2021-20599 CVE-2021-45512 · GHSA-59h7-2c4x-36qm

Certain NETGEAR devices are affected by weak cryptography.

MEDIUM 43

Certain NETGEAR devices are affected by weak cryptography.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00567 Published 2021-12-26 No fix listed CWE-327

TI-2021-20637 CVE-2021-45550 · GHSA-hvp9-jp8f-v4wh

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00574 Published 2021-12-26 No fix listed CWE-77

TI-2021-16116 CVE-2021-38516 · GHSA-73gm-85xf-8699

Certain NETGEAR devices are affected by lack of access control at the function level.

MEDIUM 46

Certain NETGEAR devices are affected by lack of access control at the function level.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01349 Published 2021-08-11 No fix listed

TI-2021-16134 CVE-2021-38534 · GHSA-fj76-v68g-qvc5

Certain NETGEAR devices are affected by stored XSS.

LOW 23

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00514 Published 2021-08-10 No fix listed CWE-79

TI-2021-16114 CVE-2021-38514 · GHSA-3mfx-6prr-4g43

Certain NETGEAR devices are affected by authentication bypass.

LOW 15

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00772 Published 2021-08-10 No fix listed

TI-2021-08779 CVE-2021-27239 · GHSA-hqww-3wrx-q5gv

Stack-based buffer overflow in NETGEAR Multiple Routers

LOW 39

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00772 Published 2021-03-29 No fix listed CWE-121

TI-2016-09094 CVE-2016-11059 · GHSA-pjvf-pcx9-852h

Certain NETGEAR devices are affected by password exposure.

LOW 35

Certain NETGEAR devices are affected by password exposure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01071 Published 2020-04-28 No fix listed CWE-200

TI-2018-15118 CVE-2018-21156 · GHSA-9f7j-2669-24wh

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 34

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0135 Published 2020-04-27 No fix listed CWE-120

TI-2018-15055 CVE-2018-21093 · GHSA-wgrg-fgrg-92cc

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 39

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00634 Published 2020-04-27 No fix listed CWE-787

TI-2017-13854 CVE-2017-18700 · GHSA-hhj9-744r-pjmr

Certain NETGEAR devices are affected by stored XSS.

LOW 28

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00647 Published 2020-04-24 No fix listed CWE-79

TI-2018-15124 CVE-2018-21162 · GHSA-m25v-6jm5-xmw4

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 48

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03437 Published 2020-04-23 No fix listed CWE-78

TI-2018-15101 CVE-2018-21139 · GHSA-87jj-5mq8-98pw

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 35

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01188 Published 2020-04-23 No fix listed CWE-200

TI-2017-13897 CVE-2017-18743 · GHSA-5rhv-5888-hp8c

Certain NETGEAR devices are affected by authentication bypass.

LOW 39

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00603 Published 2020-04-23 No fix listed CWE-287

TI-2017-13917 CVE-2017-18765 · GHSA-f2rj-wpff-j4qw

Certain NETGEAR devices are affected by denial of service.

LOW 29

Certain NETGEAR devices are affected by denial of service.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00526 Published 2020-04-22 No fix listed

TI-2017-13921 CVE-2017-18769 · GHSA-w4f9-wxqm-hcwj

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files.

LOW 21

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00335 Published 2020-04-22 No fix listed CWE-200

TI-2017-13927 CVE-2017-18777 · GHSA-qx7p-pcrw-fhh5

Certain NETGEAR devices are affected by administrative password disclosure.

LOW 34

Certain NETGEAR devices are affected by administrative password disclosure.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00284 Published 2020-04-22 No fix listed CWE-522

TI-2017-13935 CVE-2017-18785 · GHSA-3qp7-hh2h-39wp

Certain NETGEAR devices are affected by XSS.

LOW 23

Certain NETGEAR devices are affected by XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00501 Published 2020-04-22 No fix listed CWE-79

TI-2017-13938 CVE-2017-18788 · GHSA-4vcj-p6rj-9c62

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00643 Published 2020-04-22 No fix listed CWE-74

TI-2019-14975 CVE-2019-20755 · GHSA-jjjm-2v77-2785

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 31

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00506 Published 2020-04-16 No fix listed CWE-787

TI-2019-14974 CVE-2019-20754 · GHSA-x7h9-rrcq-c95j

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00506 Published 2020-04-16 No fix listed CWE-120

TI-2019-14973 CVE-2019-20753 · GHSA-52f4-cjg2-mpf2

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 39

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00565 Published 2020-04-16 No fix listed CWE-787

TI-2019-14957 CVE-2019-20737 · GHSA-h966-gw6c-fp38

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 30

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00349 Published 2020-04-16 No fix listed CWE-787

TI-2019-14954 CVE-2019-20734 · GHSA-45r5-vh4c-92vx

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

LOW 39

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00478 Published 2020-04-16 No fix listed CWE-120

TI-2019-14953 CVE-2019-20733 · GHSA-4965-jf7x-7ccv

Certain NETGEAR devices are affected by a stack-based buffer overflow by an…

LOW 30

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0033 Published 2020-04-16 No fix listed CWE-787

Vulnerabilities

Filters