Vulnerability index

Browse CVEs

1,134 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wnap320 Firmware MEDIUM 5.3
CVE-2022-31876

netgear wnap320 router WNAP320_V2.0.3_firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies.

No fix yet
Fix from $1,600 2022-06-17
Ssl312 Firmware CRITICAL 9.8
CVE-2022-29383EPSS 49%

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-…

No fix yet
Fix from $2,300 2022-05-13
R8500 Firmware HIGH 8.8
CVE-2022-27945

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysN…

Patch available
Fix from $1,950 2022-03-26
R8500 Firmware HIGH 8.8
CVE-2022-27946

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysN…

Patch available
Fix from $1,950 2022-03-26
R8500 Firmware HIGH 8.8
CVE-2022-27947

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the ipv6…

Patch available
Fix from $1,950 2022-03-26
Ex6100 Firmware HIGH 7.8
CVE-2022-24655

A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the …

Patch available
Fix from $1,950 2022-03-18
Mbr1517 Firmware HIGH 7.5
CVE-2021-44262

A vulnerability is in the 'MNU_top.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page wit…

Fix: after 1.0.4.13
Fix from $1,950 2022-03-17
Wac104 Firmware MEDIUM 5.3
CVE-2021-44261EPSS 20%

A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page wi…

Fix: after 1.1.0.34_1.0.1
Fix from $1,600 2022-03-17
Wac120 Ac Firmware MEDIUM 6.1
CVE-2021-46382

Unauthenticated cross-site scripting (XSS) in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijac…

No fix yet
Fix from $1,600 2022-03-04
Ac2100 Firmware HIGH 8.8
CVE-2021-34865

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers. Authentication i…

Fix: 1.0.1.80 / 1.1.0.84+
Fix from $1,950 2022-01-25
Xr1000 MEDIUM 6.5
CVE-2021-34870

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR XR1000 1.0.0.52_1.0.38 ro…

Patch available
Fix from $1,600 2022-01-25
R7000 Firmware HIGH 8.8
CVE-2021-34977

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116_10.2.100 routers.…

Mitigation only
Fix from $1,950 2022-01-13
R6260 Firmware HIGH 8.8
CVE-2021-34978

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Aut…

Mitigation only
Fix from $1,950 2022-01-13
R6260 Firmware HIGH 8.8
CVE-2021-34979

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Aut…

Mitigation only
Fix from $1,950 2022-01-13
R6260 Firmware HIGH 8.8
CVE-2021-34980

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Aut…

Mitigation only
Fix from $1,950 2022-01-13
R6700 Firmware HIGH 8.8
CVE-2021-45732

Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipu…

Mitigation only
Fix from $1,950 2021-12-30
R6700 Firmware HIGH 7.5
CVE-2021-45077

Netgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext. All usernames and passwords for the device's associated services…

Mitigation only
Fix from $1,950 2021-12-30
Rax43 Firmware HIGH 8.8
CVE-2021-20166

Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router container…

Mitigation only
Fix from $1,950 2021-12-30
Rax43 Firmware HIGH 8.8
CVE-2021-20170

Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal users are intended to be able to manipulate configu…

Mitigation only
Fix from $1,950 2021-12-30
R6700 Firmware HIGH 8.8
CVE-2021-20173

Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device. By triggering a system up…

No fix yet
Fix from $1,950 2021-12-30
Rax43 Firmware HIGH 8.0
CVE-2021-20167EPSS 8%

Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. The readycloud cgi application is vulnerable to command injection in the n…

Mitigation only
Fix from $1,950 2021-12-30
Genie Installer HIGH 7.8
CVE-2021-20172

All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. The installer of the macOS version of…

No fix yet
Fix from $1,950 2021-12-30
R6700 Firmware HIGH 7.5
CVE-2021-20174

Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the web interface. By default, all communication to/from t…

Mitigation only
Fix from $1,950 2021-12-30
R6700 Firmware HIGH 7.5
CVE-2021-20175

Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the SOAP interface. By default, all communication to/from …

Mitigation only
Fix from $1,950 2021-12-30
Rax43 Firmware MEDIUM 6.8
CVE-2021-20168

Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface. A malicious actor with physical access to the device is ab…

Mitigation only
Fix from $1,600 2021-12-30
Rax43 Firmware MEDIUM 6.8
CVE-2021-20169

Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface. By default, all communication to/from the device is sent …

Mitigation only
Fix from $1,600 2021-12-30
R6700 Firmware MEDIUM 6.8
CVE-2021-23147

Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console. A malicious actor with physical access to the de…

Mitigation only
Fix from $1,600 2021-12-30
Rax43 Firmware MEDIUM 5.5
CVE-2021-20171

Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored…

Mitigation only
Fix from $1,600 2021-12-30
Rax200 Firmware CRITICAL 9.8
CVE-2021-45678

NETGEAR RAX200 devices before 1.0.5.132 are affected by insecure code.

Fix: 1.0.5.132+
Fix from $2,300 2021-12-26
R6900p Firmware HIGH 7.2
CVE-2021-45679

Certain NETGEAR devices are affected by privilege escalation. This affects R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140,…

Fix: 1.0.11.126 / 1.3.3.140+
Fix from $1,950 2021-12-26