NETGEAR
Page 4 of 14 — NETGEAR CVEs from a corpus of 1360, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-44184 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_sec. |
CVE-2022-44200 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters: stamode_dns1_pri and stamode_dns1_sec. |
CVE-2022-44199 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_server_ip. |
CVE-2022-44198 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_push1. |
CVE-2022-44197 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_server_ip. |
CVE-2022-44196 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_push1. |
CVE-2022-44194 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameters apmode_dns1_pri and apmode_dns1_sec. |
CVE-2022-44193 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameters: starthour, startminute , endhour, and endminute. |
CVE-2022-44191 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameters KEY1 and KEY2. |
CVE-2022-44190 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter enable_band_steering. |
CVE-2022-44188 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter enable_band_steering. |
CVE-2022-44187 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via wan_dns1_pri. |
CVE-2022-44186 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_pri. |
CVE-2022-42221 | High | 8.8 | 2022-10-17 | Netgear R6220 v1.1.0.114_1.0.1 suffers from Incorrect Access Control, resulting in a command injection vulnerability. |
CVE-2022-37235 | Critical | 9.8 | 2022-09-23 | Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware. There i… |
CVE-2022-37232 | Critical | 9.8 | 2022-09-23 | Netgear N300 wireless router wnr2000v4-V1.0.0.70 is vulnerable to Buffer Overflow via uhttpd. There is a stack overflow vulnerability caused by strcpy. |
CVE-2022-31937 | Critical | 9.8 | 2022-09-22 | Netgear N300 wireless router wnr2000v4-V1.0.0.70 was discovered to contain a stack overflow via strcpy in uhttpd. |
CVE-2022-37234 | High | 7.8 | 2022-09-22 | Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware. There i… |
CVE-2022-38956 | Medium | 5.3 | 2022-09-20 | An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to replace t… |
CVE-2022-38955 | High | 7.5 | 2022-09-20 | An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify… |
CVE-2022-30079 | High | 8.8 | 2022-09-08 | Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote aut… |
CVE-2021-34236 | Critical | 9.8 | 2022-09-08 | Buffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to execute arbitrary code or cause a denial-of-service by sending a cra… |
CVE-2022-30078 | High | 8.8 | 2022-09-07 | NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow remote authenticate… |
CVE-2022-31876 | Medium | 5.3 | 2022-06-17 | netgear wnap320 router WNAP320_V2.0.3_firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies. |
CVE-2022-29383 | Critical | 9.8 | 2022-05-13 | NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platfo… |
CVE-2022-27947 | High | 8.8 | 2022-03-26 | NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the ipv6_fix.cgi i… |
CVE-2022-27946 | High | 8.8 | 2022-03-26 | NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd a… |
CVE-2022-27945 | High | 8.8 | 2022-03-26 | NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd a… |
CVE-2022-24655 | High | 7.8 | 2022-03-18 | A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution… |
CVE-2021-44262 | High | 7.5 | 2022-03-17 | A vulnerability is in the 'MNU_top.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any a… |
CVE-2021-44261 | Medium | 5.3 | 2022-03-17 | A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any… |
CVE-2021-46382 | Medium | 6.1 | 2022-03-04 | Unauthenticated cross-site scripting (XSS) in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijacking. |
CVE-2021-34870 | Medium | 6.5 | 2022-01-25 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR XR1000 1.0.0.52_1.0.38 routers. Aut… |
CVE-2021-34865 | High | 8.8 | 2022-01-25 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers. Authentication is not requ… |
CVE-2021-34980 | High | 8.8 | 2022-01-13 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Authenticatio… |
CVE-2021-34979 | High | 8.8 | 2022-01-13 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Authenticatio… |
CVE-2021-34978 | High | 8.8 | 2022-01-13 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Authenticatio… |
CVE-2021-34977 | High | 8.8 | 2022-01-13 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116_10.2.100 routers. Authentic… |
CVE-2021-45732 | High | 8.8 | 2021-12-30 | Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipulate confi… |
CVE-2021-45077 | High | 7.5 | 2021-12-30 | Netgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are store… |
CVE-2021-23147 | Medium | 6.8 | 2021-12-30 | Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console. A malicious actor with physical access to the device is ab… |
CVE-2021-20175 | High | 7.5 | 2021-12-30 | Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the SOAP interface. By default, all communication to/from the device… |
CVE-2021-20174 | High | 7.5 | 2021-12-30 | Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the web interface. By default, all communication to/from the device'… |
CVE-2021-20173 | High | 8.8 | 2021-12-30 | Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device. By triggering a system update check… |
CVE-2021-20172 | High | 7.8 | 2021-12-30 | All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. The installer of the macOS version of Netgear G… |
CVE-2021-20171 | Medium | 5.5 | 2021-12-30 | Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaint… |
CVE-2021-20170 | High | 8.8 | 2021-12-30 | Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal users are intended to be able to manipulate configuration bac… |
CVE-2021-20169 | Medium | 6.8 | 2021-12-30 | Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface. By default, all communication to/from the device is sent via HTTP… |
CVE-2021-20168 | Medium | 6.8 | 2021-12-30 | Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface. A malicious actor with physical access to the device is able to conn… |
CVE-2021-20167 | High | 8.0 | 2021-12-30 | Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. The readycloud cgi application is vulnerable to command injection in the name parame… |
CVE-2021-20166 | High | 8.8 | 2021-12-30 | Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router containers a buffer… |
CVE-2021-45679 | High | 8.4 | 2021-12-26 | Certain NETGEAR devices are affected by privilege escalation. This affects R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140, and RS400… |
CVE-2021-45678 | Critical | 9.8 | 2021-12-26 | NETGEAR RAX200 devices before 1.0.5.132 are affected by insecure code. |
CVE-2021-45677 | Medium | 5.2 | 2021-12-26 | Certain NETGEAR devices are affected by stored XSS. This affects GS108Tv2 before 5.4.2.36 and GS110TPv2 before 5.4.2.36. |
CVE-2021-45676 | Medium | 4.3 | 2021-12-26 | Certain NETGEAR devices are affected by stored XSS. This affects RAX200 before 1.0.5.126, RAX20 before 1.0.2.82, RAX80 before 1.0.5.126, RAX15 before 1.0.2.82… |
CVE-2021-45675 | Medium | 5.8 | 2021-12-26 | Certain NETGEAR devices are affected by stored XSS. This affects R6120 before 1.0.0.76, R6260 before 1.1.0.78, R6850 before 1.1.0.78, R6350 before 1.1.0.78, R6… |
CVE-2021-45674 | Low | 3.2 | 2021-12-26 | Certain NETGEAR devices are affected by stored XSS. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before 1.0.4.62, RAX15 before 1.0.2.82… |
CVE-2021-45673 | Medium | 4.8 | 2021-12-26 | Certain NETGEAR devices are affected by stored XSS. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before 1.0.4.62, RAX200 before 1.0.3.106… |
CVE-2021-45672 | Medium | 4.2 | 2021-12-26 | Certain NETGEAR devices are affected by Stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.48, R6080 before 1.0.0.48, R… |
CVE-2021-45671 | Medium | 6.5 | 2021-12-26 | Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX80 before 1.0.1.62, EX7500 before 1.0.0.72, R7900 before 1.0.4.38, R… |
CVE-2021-45670 | Medium | 6.5 | 2021-12-26 | Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX6120 before 1.0.0.64, E… |
CVE-2021-45669 | Low | 3.7 | 2021-12-26 | Certain NETGEAR devices are affected by stored XSS. This affects RAX200 before 1.0.3.106, MR60 before 1.0.6.110, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72… |
CVE-2021-45668 | Medium | 6.5 | 2021-12-26 | Certain NETGEAR devices are affected by stored XSS. This affects EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX3700 before 1.0.0.90, EX3800 before 1.0.0.90… |
CVE-2021-45667 | Medium | 6.5 | 2021-12-26 | Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX6120 before 1.0.0.64, E… |
CVE-2021-45666 | Medium | 6.5 | 2021-12-26 | Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX80 before 1.0.1.64, EX3700 before 1.0.0.90, EX3800 before 1.0.0.90… |
CVE-2021-45665 | Medium | 6.5 | 2021-12-26 | Certain NETGEAR devices are affected by stored XSS. This affects EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX3700 before 1.0.0.90, EX3800 before 1.0.0.90… |
CVE-2021-45664 | Medium | 5.6 | 2021-12-26 | NETGEAR R7000 devices before 1.0.11.126 are affected by stored XSS. |
CVE-2021-45663 | Medium | 6.1 | 2021-12-26 | NETGEAR R7000 devices before 1.0.11.126 are affected by stored XSS. |
CVE-2021-45662 | Medium | 6.1 | 2021-12-26 | NETGEAR R7000 devices before 1.0.9.88 are affected by stored XSS. |
CVE-2021-45661 | High | 7.1 | 2021-12-26 | Certain NETGEAR devices are affected by server-side injection. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.16, RBS40 before 2.5.1.16, RBK20 before 2… |
CVE-2021-45660 | High | 7.1 | 2021-12-26 | Certain NETGEAR devices are affected by server-side injection. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.16, RBS40 before 2.5.1.16, RBK20 before 2… |
CVE-2021-45659 | High | 7.1 | 2021-12-26 | Certain NETGEAR devices are affected by server-side injection. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.16, RBS40 before 2.5.1.16, RBK20 before 2… |
CVE-2021-45658 | High | 7.1 | 2021-12-26 | Certain NETGEAR devices are affected by server-side injection. This affects D7800 before 1.0.1.58, DM200 before 1.0.0.66, EX2700 before 1.0.1.56, EX6150v2 befo… |
CVE-2021-45657 | High | 7.1 | 2021-12-26 | Certain NETGEAR devices are affected by server-side injection. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, R6020 before 1.0.0.48, R6080 before… |
CVE-2021-45656 | High | 7.1 | 2021-12-26 | Certain NETGEAR devices are affected by server-side injection. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, R6020 before 1.0.0.48, R6080 before… |
CVE-2021-45655 | Medium | 6.9 | 2021-12-26 | NETGEAR R6400 devices before 1.0.1.70 are affected by server-side injection. |
CVE-2021-45654 | Critical | 9.6 | 2021-12-26 | NETGEAR XR1000 devices before 1.0.0.58 are affected by disclosure of sensitive information. |
CVE-2021-45653 | Low | 3.9 | 2021-12-26 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4… |
CVE-2021-45652 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4… |
CVE-2021-45651 | High | 7.4 | 2021-12-26 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK50 before 2.7.3.22, RBR50 before 2.7.3.22, and RBS50 before 2.7.3… |
CVE-2021-45650 | Critical | 9.1 | 2021-12-26 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before 1.0.4.62… |
CVE-2021-45649 | High | 7.9 | 2021-12-26 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6400v2 before 1.0.4.84, R6700v3 before 1.0.4.84, R7000 before 1.0.11… |
CVE-2021-45648 | Low | 3.1 | 2021-12-26 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EX6100v2 before 1.0.1.106, EX6150v2 before 1.0.1.106, EX6250 before 1… |
CVE-2021-45647 | Medium | 6.5 | 2021-12-26 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EAX80 before 1.0.1.62, EX7000 before 1.0.1.104, R6120 before 1.0.0.76… |
CVE-2021-45646 | Medium | 5.3 | 2021-12-26 | NETGEAR R7000 devices before 1.0.11.116 are affected by disclosure of sensitive information. |
CVE-2021-45645 | High | 8.2 | 2021-12-26 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects RBS50Y before 2.7.0.122, SRK60 before 2.7.0.122, SRR60 befor… |
CVE-2021-45644 | Medium | 6.8 | 2021-12-26 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.88, AC2400 before 1.2.0.88, AC2600 befor… |
CVE-2021-45643 | High | 8.2 | 2021-12-26 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, and XR10… |
CVE-2021-45642 | High | 7.5 | 2021-12-26 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.64, EX6250 before 1.0.0.134, EX7700 befor… |
CVE-2021-45641 | Medium | 4.6 | 2021-12-26 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before 1… |
CVE-2021-45640 | Low | 3.9 | 2021-12-26 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before 1… |
CVE-2021-45639 | Medium | 5.2 | 2021-12-26 | Certain NETGEAR devices are affected by reflected XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.32, EAX80 before 1.0.1.62, EX6120 before 1.0.0.64… |
CVE-2021-45638 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.10… |
CVE-2021-45637 | High | 8.3 | 2021-12-26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6260 before 1.1.0.76, R6800 before 1.2.0.62… |
CVE-2021-45636 | Medium | 5.4 | 2021-12-26 | NETGEAR D7000 devices before 1.0.1.82 are affected by a stack-based buffer overflow by an unauthenticated attacker. |
CVE-2021-45635 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 b… |
CVE-2021-45634 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 b… |
CVE-2021-45633 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 4.6.3.6, RBR750 before 3.2.17.12, RBR850 b… |
CVE-2021-45632 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 b… |
CVE-2021-45631 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK752 bef… |