Vulnerability index

Browse CVEs

1,134 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Br200 Firmware HIGH 8.8
CVE-2021-27255

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentica…

Fix: 1.0.0.134 / 1.0.1.60+
Fix from $1,950 2021-03-05
Br200 Firmware HIGH 8.8
CVE-2021-27256

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. …

Fix: 1.0.0.134 / 1.0.1.60+
Fix from $1,950 2021-03-05
Br200 Firmware MEDIUM 6.5
CVE-2021-27257

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800…

Fix: 1.0.0.134 / 1.0.1.60+
Fix from $1,600 2021-03-05
Cbk40 Firmware HIGH 8.8
CVE-2020-27861

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentica…

Fix: 1.0.0.210 / 1.0.1.82+
Fix from $1,950 2021-02-12
Ac2100 Firmware HIGH 8.8
CVE-2020-27866EPSS 9%

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260,…

Fix: 1.2.0.76+
Fix from $1,950 2021-02-12
Ac2100 Firmware MEDIUM 6.8
CVE-2020-27867

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260…

Fix: 1.2.0.76+
Fix from $1,600 2021-02-12
Ac2100 Firmware HIGH 8.8
CVE-2020-27872

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers. Auth…

Fix: 1.2.0.76+
Fix from $1,950 2021-02-04
Ac2100 Firmware MEDIUM 6.5
CVE-2020-27873

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 rout…

Fix: 1.2.0.76+
Fix from $1,600 2021-02-04
D7800 Firmware HIGH 8.1
CVE-2020-35831

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before …

Fix: 1.0.0.78 / 1.0.1.56+
Fix from $1,950 2020-12-30
D7800 Firmware HIGH 8.1
CVE-2020-35839

Certain NETGEAR devices are affected by Stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before …

Fix: 1.0.0.78 / 1.0.1.10+
Fix from $1,950 2020-12-30
D6200 Firmware HIGH 7.6
CVE-2020-35841

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 bef…

Fix: 1.0.0.42 / 1.0.1.24+
Fix from $1,950 2020-12-30
D6200 Firmware MEDIUM 5.4
CVE-2020-35840

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 bef…

Fix: 1.0.0.42 / 1.0.1.24+
Fix from $1,600 2020-12-30
D6200 Firmware MEDIUM 5.4
CVE-2020-35842

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 bef…

Fix: 1.0.0.42 / 1.0.1.24+
Fix from $1,600 2020-12-30
Ac2100 Firmware CRITICAL 9.8
CVE-2020-35795

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72…

Fix: 1.0.0.36 / 1.0.1.58+
Fix from $2,300 2020-12-30
Cbr40 Firmware CRITICAL 9.8
CVE-2020-35796

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, …

Fix: 1.0.0.36 / 1.0.0.48+
Fix from $2,300 2020-12-30
Nms300 Firmware CRITICAL 9.8
CVE-2020-35797

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an unauthenticated attacker.

Fix: 1.6.0.27+
Fix from $2,300 2020-12-30
D3600 Firmware CRITICAL 9.8
CVE-2020-35799

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 befor…

Fix: 1.0.0.61 / 1.0.0.76+
Fix from $2,300 2020-12-30
Ac2100 Firmware CRITICAL 9.4
CVE-2020-35800

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC…

Fix: 1.0.0.60 / 1.0.0.80+
Fix from $2,300 2020-12-30
R6400v2 Firmware HIGH 7.8
CVE-2020-35798

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700v3 before 1.0.4.…

Fix: 1.0.2.74 / 1.0.4.26+
Fix from $1,950 2020-12-30
Cbr40 Firmware HIGH 7.5
CVE-2020-35802

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects CBR40 before 2.5.0.14, RBW30 before 2.6.1.4, RAX75 before 1…

Fix: 1.0.3.102 / 2.5.0.14+
Fix from $1,950 2020-12-30
Jgs516pe Firmware HIGH 7.3
CVE-2020-35801

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.4…

Fix: 2.6.0.48+
Fix from $1,950 2020-12-30
Rbs40v Firmware MEDIUM 6.8
CVE-2020-35794

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBS40V before 2.6.1.4, RBK752 before 3.2.15.25, RBR7…

Fix: 2.6.1.4 / 3.2.15.25+
Fix from $1,600 2020-12-30
Dgn2200 Firmware HIGH 8.8
CVE-2020-35785

NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication (aka PSV-2020-0363, PSV-2020-0364, and PSV-2020-0365).

Fix: 1.0.0.60+
Fix from $1,950 2020-12-30
Nms300 Firmware HIGH 8.8
CVE-2020-35789

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user.

Fix: 1.6.0.27+
Fix from $1,950 2020-12-30
Jgs516pe Firmware HIGH 8.1
CVE-2020-35782

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.4…

Fix: 2.6.0.48+
Fix from $1,950 2020-12-30
D3600 Firmware HIGH 8.0
CVE-2020-35787

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 …

Fix: 1.0.0.76 / 1.0.1.18+
Fix from $1,950 2020-12-30
Jgs516pe Firmware HIGH 7.2
CVE-2020-35784

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48…

Fix: 2.6.0.48+
Fix from $1,950 2020-12-30
Wac104 Firmware MEDIUM 6.8
CVE-2020-35788

NETGEAR WAC104 devices before 1.0.4.13 are affected by a buffer overflow by an authenticated user.

Fix: 1.0.4.13+
Fix from $1,600 2020-12-30
D7800 Firmware MEDIUM 6.8
CVE-2020-35790

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 …

Fix: 1.0.1.56 / 1.0.2.68+
Fix from $1,600 2020-12-30
R7500 Firmware MEDIUM 6.8
CVE-2020-35792

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7500v2 before 1.0.3.48, R8900 before 1.0.5.2, R9000…

Fix: 1.0.2.68 / 1.0.3.48+
Fix from $1,600 2020-12-30