Vulnerability index

Browse CVEs

287 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Rax30 Firmware HIGH 8.8
CVE-2023-48725EPSS 19%

A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A sp…

No fix yet
Fix from $1,950 2024-03-07
R7000 Firmware MEDIUM 6.5
CVE-2024-1431

A vulnerability was found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this issue is some unknown functionality of…

No fix yet
Fix from $1,600 2024-02-11
R7000 Firmware MEDIUM 6.5
CVE-2024-1430

A vulnerability has been found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this vulnerability is an unknown funct…

No fix yet
Fix from $1,600 2024-02-11
Wnr2000 Firmware CRITICAL 9.8
CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs dur…

No fix yet
Fix from $2,300 2023-12-15
Jwnr2000v2 Firmware HIGH 8.8
CVE-2023-39550

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and …

No fix yet
Fix from $1,950 2023-08-07
R7100lg Firmware CRITICAL 9.8
CVE-2023-38928

Netgear R7100LG 1.0.0.78 was discovered to contain a command injection vulnerability via the password parameter at usb_remote_invite.cgi.

Mitigation only
Fix from $2,300 2023-08-07
Xr300 Firmware HIGH 8.8
CVE-2023-36499

Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at genie_ap_wifi_change.cgi.

No fix yet
Fix from $1,950 2023-08-07
R6900p Firmware HIGH 8.8
CVE-2023-38412

Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at ia_ap_setting.cgi.

No fix yet
Fix from $1,950 2023-08-07
Dg834gv5 Firmware HIGH 8.8
CVE-2023-38591

Netgear DG834Gv5 1.6.01.34 was discovered to contain multiple buffer overflows via the wla_ssid and wla_temp_ssid parameters at bsw_ssid.cgi.

No fix yet
Fix from $1,950 2023-08-07
Wg302v2 Firmware HIGH 8.8
CVE-2023-38921

Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgrade_handler function via…

Mitigation only
Fix from $1,950 2023-08-07
Jwnr2000v2 Firmware HIGH 8.8
CVE-2023-38922

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and …

Mitigation only
Fix from $1,950 2023-08-07
Dc112a Firmware HIGH 8.8
CVE-2023-38925EPSS 15%

Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the http_passwd parameter in password.c…

Mitigation only
Fix from $1,950 2023-08-07
Ex6200 Firmware HIGH 8.8
CVE-2023-38926

Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wla_temp_ssid parameter at acosNvramConfig_set.

No fix yet
Fix from $1,950 2023-08-07
Dgn3500 Firmware MEDIUM 6.5
CVE-2023-38924

Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the http_password parameter at setup.cgi.

Mitigation only
Fix from $1,600 2023-08-07
R6250 Firmware CRITICAL 9.8
CVE-2023-34563EPSS 14%

netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication.

No fix yet
Fix from $2,300 2023-06-20
R6250 Firmware CRITICAL 9.8
CVE-2023-33532EPSS 16%

There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management privileges…

Mitigation only
Fix from $2,300 2023-06-06
D6220 Firmware HIGH 8.8
CVE-2023-33533

Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Ver…

No fix yet
Fix from $1,950 2023-06-06
Srx5308 Firmware MEDIUM 6.1
CVE-2023-2395

A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the component Web Manageme…

No fix yet
Fix from $1,600 2023-04-28
Srx5308 Firmware MEDIUM 6.1
CVE-2023-2396

A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. This vulnerability affects unknown code of the component Web Ma…

No fix yet
Fix from $1,600 2023-04-28
Srx5308 Firmware MEDIUM 6.5
CVE-2023-2380

A vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. Affected is an unknown function. The manipulation l…

No fix yet
Fix from $1,600 2023-04-28
R6900 Firmware CRITICAL 9.8
CVE-2023-30280

Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute arbitrary …

Mitigation only
Fix from $2,300 2023-04-26
Rbs750 Firmware HIGH 8.8
CVE-2022-37337

A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted HTTP request …

No fix yet
Fix from $1,950 2023-03-21
Rbs750 Firmware HIGH 8.8
CVE-2022-38452

A command execution vulnerability exists in the hidden telnet service functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted networ…

No fix yet
Fix from $1,950 2023-03-21
Rbs750 Firmware MEDIUM 5.9
CVE-2022-38458

A cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted man-i…

No fix yet
Fix from $1,600 2023-03-21
Rbs750 Firmware HIGH 7.2
CVE-2022-36429

A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite RBS750 4.6.8.5. A specially-craft…

No fix yet
Fix from $1,950 2023-03-21
Rax30 Firmware HIGH 8.8
CVE-2023-28337

When uploading a firmware image to a Netgear Nighthawk Wifi6 Router (RAX30), a hidden “forceFWUpdate” parameter may be provided to force the upgrade …

Mitigation only
Fix from $1,950 2023-03-15
Rax30 Firmware HIGH 7.5
CVE-2023-28338

Any request send to a Netgear Nighthawk Wifi6 Router (RAX30)'s web service containing a “Content-Type” of “multipartboundary=” will result in the req…

Mitigation only
Fix from $1,950 2023-03-15
Wndr3700 Firmware CRITICAL 9.8
CVE-2023-0849

A vulnerability has been found in Netgear WNDR3700v2 1.0.1.14 and classified as critical. This vulnerability affects unknown code of the component We…

Mitigation only
Fix from $2,300 2023-02-15
Wndr3700 Firmware HIGH 7.5
CVE-2023-0848

A vulnerability was found in Netgear WNDR3700v2 1.0.1.14. It has been rated as problematic. This issue affects some unknown processing of the compone…

Mitigation only
Fix from $1,950 2023-02-15
Wndr3700 Firmware HIGH 7.5
CVE-2023-0850

A vulnerability was found in Netgear WNDR3700v2 1.0.1.14 and classified as problematic. This issue affects some unknown processing of the component W…

No fix yet
Fix from $1,950 2023-02-15