NETGEAR
Page 6 of 14 — NETGEAR CVEs from a corpus of 1360, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-45530 | Medium | 4.5 | 2021-12-26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7000 before 1.0.11.126, R7960P before 1.4.2.84, R8000 before… |
CVE-2021-45529 | High | 7.3 | 2021-12-26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects CBR40 before 2.3.5.12, D7000v2 before 1.0.0.66, D8500 before 1… |
CVE-2021-45528 | High | 8.1 | 2021-12-26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6300v2 before 1.0.4.52, R6400 before 1.0.1.52, R6900 before 1… |
CVE-2021-45527 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.102, D7000v2 before… |
CVE-2021-45526 | High | 7.3 | 2021-12-26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX6000 before 1.0.0.38, EX6120 before 1.0.0.48, EX6130 before… |
CVE-2021-45525 | Medium | 6.1 | 2021-12-26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX7000 before 1.0.1.80, R6400 before 1.0.1.50, R6400v2 before… |
CVE-2021-45524 | High | 7.6 | 2021-12-26 | NETGEAR R8000 devices before 1.0.4.62 are affected by a buffer overflow by an authenticated user. |
CVE-2021-45523 | Medium | 5.7 | 2021-12-26 | NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user. |
CVE-2021-45522 | Medium | 6.1 | 2021-12-26 | NETGEAR XR1000 devices before 1.0.0.58 are affected by a hardcoded password. |
CVE-2021-45521 | High | 7.4 | 2021-12-26 | Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10. |
CVE-2021-45520 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10. |
CVE-2021-45519 | Medium | 6.5 | 2021-12-26 | NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service. |
CVE-2021-45518 | Medium | 6.5 | 2021-12-26 | NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service. |
CVE-2021-45517 | Medium | 6.5 | 2021-12-26 | NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service. |
CVE-2021-45516 | Medium | 6.9 | 2021-12-26 | Certain NETGEAR devices are affected by denial of service. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126, R6900P before 1.3.3.140, R7000P before… |
CVE-2021-45515 | Medium | 6.5 | 2021-12-26 | Certain NETGEAR devices are affected by denial of service. This affects EX7500 before 1.0.0.72, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, RBRE960 before 6.0… |
CVE-2021-45514 | Critical | 9.6 | 2021-12-26 | NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker. |
CVE-2021-45513 | Critical | 9.6 | 2021-12-26 | NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker. |
CVE-2021-45512 | High | 8.6 | 2021-12-26 | Certain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, EX3700 before 1.0.0.84, EX3800 before 1… |
CVE-2021-45511 | Medium | 6.8 | 2021-12-26 | Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000… |
CVE-2021-45510 | High | 8.2 | 2021-12-26 | NETGEAR XR1000 devices before 1.0.0.58 are affected by authentication bypass. |
CVE-2021-45509 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 bef… |
CVE-2021-45508 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 befor… |
CVE-2021-45507 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBW30 before 2.6.2.2, RBK752 before 3… |
CVE-2021-45506 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 bef… |
CVE-2021-45505 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 bef… |
CVE-2021-45504 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBR852 before 3.2.17.12, RBR850 befor… |
CVE-2021-45503 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 bef… |
CVE-2021-45502 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBK752 before 3.2.17.12, RBR750 bef… |
CVE-2021-45501 | Critical | 9.4 | 2021-12-26 | Certain NETGEAR devices are affected by authentication bypass. This affects AC2400 before 1.1.0.84, AC2600 before 1.1.0.84, D7000 before 1.0.1.82, R6020 before… |
CVE-2021-45500 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by authentication bypass. This affects R7000P before 1.3.3.140 and R8000 before 1.0.4.68. |
CVE-2021-45499 | High | 8.2 | 2021-12-26 | Certain NETGEAR devices are affected by authentication bypass. This affects R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7900P before 1.4.2.84, R7960P be… |
CVE-2021-45498 | Medium | 6.5 | 2021-12-26 | NETGEAR R6700v2 devices before 1.2.0.88 are affected by authentication bypass. |
CVE-2021-45497 | Critical | 9.4 | 2021-12-26 | NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass. |
CVE-2021-45496 | Critical | 9.1 | 2021-12-26 | NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass. |
CVE-2021-45495 | Medium | 6.5 | 2021-12-26 | NETGEAR D7000 devices before 1.0.1.68 are affected by authentication bypass. |
CVE-2021-45494 | High | 8.4 | 2021-12-26 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350… |
CVE-2021-45493 | High | 7.6 | 2021-12-26 | Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RAX35 before 1.0.4.102, RAX38 before 1.0.4.102, and RAX40 before… |
CVE-2021-41449 | High | 7.1 | 2021-12-09 | A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access… |
CVE-2021-34991 | High | 8.8 | 2021-11-15 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers. Authenti… |
CVE-2021-40847 | High | 8.1 | 2021-09-21 | The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code execution as root via a Mit… |
CVE-2021-41383 | High | 7.2 | 2021-09-17 | setup.cgi on NETGEAR R6020 1.0.0.48 devices allows an admin to execute arbitrary shell commands via shell metacharacters in the ntp_server field. |
CVE-2021-41314 | High | 8.8 | 2021-09-16 | Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several faulty aspects of the authentication schem… |
CVE-2021-40867 | High | 7.8 | 2021-09-13 | Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenticated attacker who uses the same source… |
CVE-2021-40866 | Critical | 9.8 | 2021-09-13 | Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (disabled by default) /sqfs/bin/sccd daemo… |
CVE-2021-38539 | Medium | 6.3 | 2021-08-11 | Certain NETGEAR devices are affected by privilege escalation. This affects D8500 before 1.0.3.44, R6400v2 before 1.0.2.66, R6700 before 1.0.2.6, R6700v3 before… |
CVE-2021-38538 | Medium | 6.3 | 2021-08-11 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 before 1.0.4.26, R9000 before 1.0.4.26, RA… |
CVE-2021-38537 | Medium | 4.2 | 2021-08-11 | Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.48, R6080 before 1.0.0.48, R… |
CVE-2021-38536 | Medium | 4.3 | 2021-08-11 | Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.48, R6080 before 1.0.0.48, R… |
CVE-2021-38535 | Medium | 4.3 | 2021-08-11 | Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.48, R6080 before 1.0.0.48, R… |
CVE-2021-38534 | Medium | 4.1 | 2021-08-11 | Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6100 before 1.0.0.60, D6200 before 1.1.00.36, D… |
CVE-2021-38533 | Medium | 5.4 | 2021-08-11 | NETGEAR RAX40 devices before 1.0.3.64 are affected by stored XSS. |
CVE-2021-38532 | Medium | 6.8 | 2021-08-11 | NETGEAR WAC104 devices before 1.0.4.15 are affected by incorrect configuration of security settings. |
CVE-2021-38531 | Medium | 4.7 | 2021-08-11 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before… |
CVE-2021-38530 | Critical | 9.6 | 2021-08-11 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.16, RBS40 befo… |
CVE-2021-38529 | High | 8.3 | 2021-08-11 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 befo… |
CVE-2021-38528 | Critical | 9.6 | 2021-08-11 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D8500 before 1.0.3.58, R6900P before 1.3.2.132, R7000P b… |
CVE-2021-38527 | High | 8.1 | 2021-08-11 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.14, EX6100v2 before 1.0.1.98, EX6150v… |
CVE-2021-38526 | Medium | 4.3 | 2021-08-11 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX35 before 1.0.3.94, RAX38 before 1.0.3.94, and RAX40… |
CVE-2021-38525 | Medium | 6.8 | 2021-08-11 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D620… |
CVE-2021-38524 | Medium | 4.5 | 2021-08-11 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60… |
CVE-2021-38523 | Medium | 6.9 | 2021-08-11 | NETGEAR R6400 devices before 1.0.1.70 are affected by a stack-based buffer overflow by an authenticated user. |
CVE-2021-38522 | Medium | 6.8 | 2021-08-11 | NETGEAR R6400 devices before 1.0.1.52 are affected by a stack-based buffer overflow by an authenticated user. |
CVE-2021-38521 | Medium | 6.1 | 2021-08-11 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.50, R7900P before 1.4.1.50, R8000P before 1… |
CVE-2021-38520 | Medium | 6.6 | 2021-08-11 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.52, R6400v2 before 1.0.4.84, R6700v3 before… |
CVE-2021-38519 | Medium | 6.3 | 2021-08-11 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6250 before 1.0.4.36, R6300v2 before 1.0.4.36, R6400 before 1… |
CVE-2021-38518 | High | 8.4 | 2021-08-11 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RAX200 before 1.0.4.120, RAX75 before 1.0.4.120, RAX80 before… |
CVE-2021-38517 | Medium | 6.9 | 2021-08-11 | Certain NETGEAR devices are affected by out-of-bounds reads and writes. This affects R6400 before 1.0.1.70, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, and… |
CVE-2021-38516 | Critical | 10.0 | 2021-08-11 | Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D7000v2 before… |
CVE-2021-38515 | High | 7.4 | 2021-08-11 | Certain NETGEAR devices are affected by denial of service. This affects R6400v2 before 1.0.4.98, R6700v3 before 1.0.4.98, R7900 before 1.0.3.18, and R8000 befo… |
CVE-2021-38514 | Low | 2.4 | 2021-08-11 | Certain NETGEAR devices are affected by authentication bypass. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6100 before 1.0.0.63, D6200 before 1… |
CVE-2021-38513 | Critical | 9.6 | 2021-08-11 | Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11, CBR40 be… |
CVE-2021-32122 | Critical | 9.8 | 2021-08-11 | Certain NETGEAR devices are affected by CSRF. This affects EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before 1.0.0.64, and EX6130 before 1.0.0.44. |
CVE-2021-35973 | Critical | 9.8 | 2021-06-30 | NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/mini_httpd, allowing an unauthenticated attacker to… |
CVE-2021-33514 | High | 8.8 | 2021-05-21 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/libsal.so.0.0 library used by a CGI appli… |
CVE-2021-31802 | High | 8.8 | 2021-04-26 | NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without authentication. The vulnerability exists… |
CVE-2021-27253 | High | 8.8 | 2021-04-14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Although authentication is… |
CVE-2021-27252 | High | 8.8 | 2021-04-14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentica… |
CVE-2021-27251 | High | 8.8 | 2021-04-14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Authentication is not requ… |
CVE-2021-27276 | High | 7.1 | 2021-03-29 | This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although… |
CVE-2021-27275 | High | 8.3 | 2021-03-29 | This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE Network Ma… |
CVE-2021-27274 | Critical | 9.8 | 2021-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Authentic… |
CVE-2021-27273 | High | 8.8 | 2021-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although… |
CVE-2021-27272 | High | 7.1 | 2021-03-29 | This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although… |
CVE-2021-27239 | High | 8.8 | 2021-03-29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 r… |
CVE-2021-29082 | Critical | 9.6 | 2021-03-23 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBW30 before 2.6.1.4, RBS40V before 2.6.1.4, RBK752 before 3.2.15.25… |
CVE-2021-29081 | High | 8.4 | 2021-03-23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects RBW30 before 2.6.2.2, RBK852 before 3.2.17.1… |
CVE-2021-29080 | High | 8.1 | 2021-03-23 | Certain NETGEAR devices are affected by password reset by an unauthenticated attacker. This affects RBK852 before 3.2.10.11, RBK853 before 3.2.10.11, RBR854 be… |
CVE-2021-29079 | Critical | 9.6 | 2021-03-23 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854… |
CVE-2021-29078 | Critical | 9.6 | 2021-03-23 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854… |
CVE-2021-29077 | Critical | 9.6 | 2021-03-23 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBW30 before 2.6.2.2, RBS40V before 2.6.2.4, RBK852 befo… |
CVE-2021-29076 | Critical | 9.6 | 2021-03-23 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854… |
CVE-2021-29075 | High | 8.4 | 2021-03-23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects RBW30 before 2.6.2.2, RBK852 before 3.2.17.12, RBK… |
CVE-2021-29074 | High | 8.4 | 2021-03-23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects RBW30 before 2.6.2.2, RBK852 before 3.2.17.12, RBK… |
CVE-2021-29073 | High | 7.6 | 2021-03-23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8000P before 1.4.1.66, MK62 before 1.0.6.110, MR6… |
CVE-2021-29072 | High | 8.4 | 2021-03-23 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 befor… |
CVE-2021-29071 | Critical | 9.6 | 2021-03-23 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 befor… |
CVE-2021-29070 | High | 8.4 | 2021-03-23 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 befor… |
CVE-2021-29069 | High | 7.3 | 2021-03-23 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects XR450 before 2.3.2.114, XR500 before 2.3.2.114, and WNR2000v5… |
CVE-2021-29068 | Critical | 9.9 | 2021-03-23 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6700v3 before 1.0.4.98, R6400v2 before 1.0.4.98, R7000 before… |