Browse CVEs

HIGH 8.8 CVE-2023-48725EPSS 19% A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A sp… Rax30 Firmware No fix yet Fix from $1,9502024-03-07 MEDIUM 6.5 CVE-2024-1431 A vulnerability was found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this issue is some unknown functionality of… R7000 Firmware No fix yet Fix from $1,6002024-02-11 MEDIUM 6.5 CVE-2024-1430 A vulnerability has been found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this vulnerability is an unknown funct… R7000 Firmware No fix yet Fix from $1,6002024-02-11 CRITICAL 9.8 CVE-2023-50089 A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs dur… Wnr2000 Firmware No fix yet Fix from $2,3002023-12-15 HIGH 8.8 CVE-2023-39550 Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and … Jwnr2000v2 Firmware No fix yet Fix from $1,9502023-08-07 CRITICAL 9.8 CVE-2023-38928 Netgear R7100LG 1.0.0.78 was discovered to contain a command injection vulnerability via the password parameter at usb_remote_invite.cgi. R7100lg Firmware Mitigation only Fix from $2,3002023-08-07 HIGH 8.8 CVE-2023-36499 Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at genie_ap_wifi_change.cgi. Xr300 Firmware No fix yet Fix from $1,9502023-08-07 HIGH 8.8 CVE-2023-38412 Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at ia_ap_setting.cgi. R6900p Firmware No fix yet Fix from $1,9502023-08-07 HIGH 8.8 CVE-2023-38591 Netgear DG834Gv5 1.6.01.34 was discovered to contain multiple buffer overflows via the wla_ssid and wla_temp_ssid parameters at bsw_ssid.cgi. Dg834gv5 Firmware No fix yet Fix from $1,9502023-08-07 HIGH 8.8 CVE-2023-38921 Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgrade_handler function via… Wg302v2 Firmware Mitigation only Fix from $1,9502023-08-07 HIGH 8.8 CVE-2023-38922 Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and … Jwnr2000v2 Firmware Mitigation only Fix from $1,9502023-08-07 HIGH 8.8 CVE-2023-38925EPSS 15% Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the http_passwd parameter in password.c… Dc112a Firmware Mitigation only Fix from $1,9502023-08-07 HIGH 8.8 CVE-2023-38926 Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wla_temp_ssid parameter at acosNvramConfig_set. Ex6200 Firmware No fix yet Fix from $1,9502023-08-07 MEDIUM 6.5 CVE-2023-38924 Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the http_password parameter at setup.cgi. Dgn3500 Firmware Mitigation only Fix from $1,6002023-08-07 CRITICAL 9.8 CVE-2023-34563EPSS 14% netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication. R6250 Firmware No fix yet Fix from $2,3002023-06-20 CRITICAL 9.8 CVE-2023-33532EPSS 16% There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management privileges… R6250 Firmware Mitigation only Fix from $2,3002023-06-06 HIGH 8.8 CVE-2023-33533 Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Ver… D6220 Firmware No fix yet Fix from $1,9502023-06-06 MEDIUM 6.1 CVE-2023-2395 A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the component Web Manageme… Srx5308 Firmware No fix yet Fix from $1,6002023-04-28 MEDIUM 6.1 CVE-2023-2396 A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. This vulnerability affects unknown code of the component Web Ma… Srx5308 Firmware No fix yet Fix from $1,6002023-04-28 MEDIUM 6.5 CVE-2023-2380 A vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. Affected is an unknown function. The manipulation l… Srx5308 Firmware No fix yet Fix from $1,6002023-04-28 CRITICAL 9.8 CVE-2023-30280 Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute arbitrary … R6900 Firmware Mitigation only Fix from $2,3002023-04-26 HIGH 8.8 CVE-2022-37337 A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted HTTP request … Rbs750 Firmware No fix yet Fix from $1,9502023-03-21 HIGH 8.8 CVE-2022-38452 A command execution vulnerability exists in the hidden telnet service functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted networ… Rbs750 Firmware No fix yet Fix from $1,9502023-03-21 MEDIUM 5.9 CVE-2022-38458 A cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted man-i… Rbs750 Firmware No fix yet Fix from $1,6002023-03-21 HIGH 7.2 CVE-2022-36429 A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite RBS750 4.6.8.5. A specially-craft… Rbs750 Firmware No fix yet Fix from $1,9502023-03-21 HIGH 8.8 CVE-2023-28337 When uploading a firmware image to a Netgear Nighthawk Wifi6 Router (RAX30), a hidden “forceFWUpdate” parameter may be provided to force the upgrade … Rax30 Firmware Mitigation only Fix from $1,9502023-03-15 HIGH 7.5 CVE-2023-28338 Any request send to a Netgear Nighthawk Wifi6 Router (RAX30)'s web service containing a “Content-Type” of “multipartboundary=” will result in the req… Rax30 Firmware Mitigation only Fix from $1,9502023-03-15 CRITICAL 9.8 CVE-2023-0849 A vulnerability has been found in Netgear WNDR3700v2 1.0.1.14 and classified as critical. This vulnerability affects unknown code of the component We… Wndr3700 Firmware Mitigation only Fix from $2,3002023-02-15 HIGH 7.5 CVE-2023-0848 A vulnerability was found in Netgear WNDR3700v2 1.0.1.14. It has been rated as problematic. This issue affects some unknown processing of the compone… Wndr3700 Firmware Mitigation only Fix from $1,9502023-02-15 HIGH 7.5 CVE-2023-0850 A vulnerability was found in Netgear WNDR3700v2 1.0.1.14 and classified as problematic. This issue affects some unknown processing of the component W… Wndr3700 Firmware No fix yet Fix from $1,9502023-02-15