Vulnerability index

Browse CVEs

1,134 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

R7800 Firmware MEDIUM 6.7
CVE-2020-35791

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.68, R8900 before 1.0.5.2, and R90…

Fix: 1.0.2.68 / 1.0.5.2+
Fix from $1,600 2020-12-30
D7800 Firmware MEDIUM 6.7
CVE-2020-35793

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.58, R7500v2 before 1.0.3.46, R780…

Fix: 1.0.1.58 / 1.0.2.74+
Fix from $1,600 2020-12-30
Nms300 Firmware MEDIUM 6.5
CVE-2020-35780

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.

Fix: 1.6.0.27+
Fix from $1,600 2020-12-30
Nms300 Firmware MEDIUM 6.5
CVE-2020-35781

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.

Fix: 1.6.0.27+
Fix from $1,600 2020-12-30
Jgs516pe Firmware MEDIUM 6.5
CVE-2020-35783

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 before 2.6.0.48…

Fix: 2.6.0.48+
Fix from $1,600 2020-12-30
Gs716t Firmware HIGH 8.8
CVE-2020-35778

Certain NETGEAR devices are affected by CSRF. This affects GS716Tv3 before 6.3.1.36 and GS724Tv4 before 6.3.1.36.

Fix: 6.3.1.36+
Fix from $1,950 2020-12-30
Nms300 Firmware HIGH 8.6
CVE-2020-35779

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.

Fix: 1.6.0.27+
Fix from $1,950 2020-12-30
Dgn2200v1 Firmware HIGH 8.4
CVE-2020-35777

NETGEAR DGN2200v1 devices before v1.0.0.58 are affected by command injection.

Fix: 1.0.0.58+
Fix from $1,950 2020-12-30
Gs108ev3 Firmware MEDIUM 6.5
CVE-2020-5641

Cross-site request forgery (CSRF) vulnerability in GS108Ev3 firmware version 2.06.10 and earlier allows remote attackers to hijack the authentication…

Fix: after 2.06.10
Fix from $1,600 2020-11-24
R6400v2 Firmware HIGH 8.8
CVE-2020-28373

upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overflow. This affects R6400v2 V1.0…

Mitigation only
Fix from $1,950 2020-11-09
Nighthawk R7000 Firmware MEDIUM 6.5
CVE-2020-28041

The SIP ALG implementation on NETGEAR Nighthawk R7000 1.0.9.64_10.2.64 devices allows remote attackers to communicate with arbitrary TCP and UDP serv…

No fix yet
Fix from $1,600 2020-11-02
R6020 Firmware MEDIUM 6.5
CVE-2020-17409

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R622…

Fix: 1.0.0.44 / 1.0.0.70+
Fix from $1,600 2020-10-13
Ac2100 Firmware CRITICAL 9.8
CVE-2020-26927

Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.42, R60…

Fix: 1.0.0.42 / 1.0.1.26+
Fix from $2,300 2020-10-09
Cbr40 Firmware CRITICAL 9.6
CVE-2020-26926

Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, …

Fix: 2.5.0.10 / 3.2.10.11+
Fix from $2,300 2020-10-09
Cbr40 Firmware CRITICAL 9.6
CVE-2020-26928

Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, …

Fix: 2.5.0.10 / 3.2.10.11+
Fix from $2,300 2020-10-09
R6230 Firmware HIGH 8.0
CVE-2020-26929

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.100 and R6230 before 1.1.0.100.

Fix: 1.1.0.100+
Fix from $1,950 2020-10-09
Wac720 Firmware MEDIUM 6.5
CVE-2020-26924

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC720 before 3.9.1.13 and WAC730 before 3.9.1.13.

Fix: 3.9.1.13+
Fix from $1,600 2020-10-09
Wc7500 Firmware MEDIUM 6.5
CVE-2020-26931

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 be…

Fix: 6.5.5.24+
Fix from $1,600 2020-10-09
Jgs516pe Firmware CRITICAL 9.8
CVE-2020-26919 KEVEPSS 57%

NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.

Fix: 2.6.0.43+
Fix from $2,300 2020-10-09
Srk60 Firmware HIGH 8.8
CVE-2020-26920

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.3.110, SRR60 before 2.5.3.110…

Fix: 2.5.3.110+
Fix from $1,950 2020-10-09
Gs110emx Firmware HIGH 8.8
CVE-2020-26921

Certain NETGEAR devices are affected by authentication bypass. This affects GS110EMX before 1.0.1.7, GS810EMX before 1.7.1.3, XS512EM before 1.0.1.3,…

Fix: 1.0.1.3 / 1.0.1.7+
Fix from $1,950 2020-10-09
D6200 Firmware HIGH 7.1
CVE-2020-26914

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR615…

Fix: 1.0.0.42 / 1.0.0.66+
Fix from $1,950 2020-10-09
D6100 Firmware MEDIUM 6.8
CVE-2020-26913

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.63, R7800 before 1.0.…

Fix: 1.0.0.63 / 1.0.2.60+
Fix from $1,600 2020-10-09
Wc7500 Firmware MEDIUM 6.7
CVE-2020-26922

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC76…

Fix: 6.5.5.24+
Fix from $1,600 2020-10-09
D6200 Firmware MEDIUM 6.3
CVE-2020-26916

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6…

Fix: 1.0.0.42 / 1.0.0.66+
Fix from $1,600 2020-10-09
D6200 Firmware CRITICAL 9.8
CVE-2020-26908

Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 before 1.0.0.30, R6…

Fix: 1.0.0.30 / 1.0.0.42+
Fix from $2,300 2020-10-09
Cbr40 Firmware HIGH 8.8
CVE-2020-26904

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750…

Fix: 2.5.0.10 / 3.2.10.11+
Fix from $1,950 2020-10-09
Cbr40 Firmware HIGH 8.8
CVE-2020-26905

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750…

Fix: 2.5.0.10 / 3.2.10.11+
Fix from $1,950 2020-10-09
Cbr40 Firmware HIGH 8.8
CVE-2020-26906

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750…

Fix: 2.5.0.10 / 3.2.10.11+
Fix from $1,950 2020-10-09
Rbk852 Firmware HIGH 8.8
CVE-2020-26907

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.16.6, RBR850 before 3.2.16.6…

Fix: 3.2.16.6+
Fix from $1,950 2020-10-09