Browse CVEs

MEDIUM 5.3 CVE-2022-31876 netgear wnap320 router WNAP320_V2.0.3_firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies. Wnap320 Firmware No fix yet Fix from $1,6002022-06-17 CRITICAL 9.8 CVE-2022-29383EPSS 49% NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-… Ssl312 Firmware No fix yet Fix from $2,3002022-05-13 HIGH 8.8 CVE-2022-27945 NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysN… R8500 Firmware Patch available Fix from $1,9502022-03-26 HIGH 8.8 CVE-2022-27946 NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysN… R8500 Firmware Patch available Fix from $1,9502022-03-26 HIGH 8.8 CVE-2022-27947 NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the ipv6… R8500 Firmware Patch available Fix from $1,9502022-03-26 HIGH 7.8 CVE-2022-24655 A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the … Ex6100 Firmware Patch available Fix from $1,9502022-03-18 HIGH 7.5 CVE-2021-44262 A vulnerability is in the 'MNU_top.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page wit… Mbr1517 Firmware after 1.0.4.13 Fix from $1,9502022-03-17 MEDIUM 5.3 CVE-2021-44261EPSS 20% A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page wi… Wac104 Firmware after 1.1.0.34_1.0.1 Fix from $1,6002022-03-17 MEDIUM 6.1 CVE-2021-46382 Unauthenticated cross-site scripting (XSS) in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijac… Wac120 Ac Firmware No fix yet Fix from $1,6002022-03-04 HIGH 8.8 CVE-2021-34865 This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers. Authentication i… Ac2100 Firmware 1.0.1.80 / 1.1.0.84+ Fix from $1,9502022-01-25 MEDIUM 6.5 CVE-2021-34870 This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR XR1000 1.0.0.52_1.0.38 ro… Xr1000 Patch available Fix from $1,6002022-01-25 HIGH 8.8 CVE-2021-34977 This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116_10.2.100 routers.… R7000 Firmware Mitigation only Fix from $1,9502022-01-13 HIGH 8.8 CVE-2021-34978 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Aut… R6260 Firmware Mitigation only Fix from $1,9502022-01-13 HIGH 8.8 CVE-2021-34979 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Aut… R6260 Firmware Mitigation only Fix from $1,9502022-01-13 HIGH 8.8 CVE-2021-34980 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Aut… R6260 Firmware Mitigation only Fix from $1,9502022-01-13 HIGH 8.8 CVE-2021-45732 Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipu… R6700 Firmware Mitigation only Fix from $1,9502021-12-30 HIGH 7.5 CVE-2021-45077 Netgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext. All usernames and passwords for the device's associated services… R6700 Firmware Mitigation only Fix from $1,9502021-12-30 HIGH 8.8 CVE-2021-20166 Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router container… Rax43 Firmware Mitigation only Fix from $1,9502021-12-30 HIGH 8.8 CVE-2021-20170 Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal users are intended to be able to manipulate configu… Rax43 Firmware Mitigation only Fix from $1,9502021-12-30 HIGH 8.8 CVE-2021-20173 Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device. By triggering a system up… R6700 Firmware No fix yet Fix from $1,9502021-12-30 HIGH 8.0 CVE-2021-20167EPSS 8% Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. The readycloud cgi application is vulnerable to command injection in the n… Rax43 Firmware Mitigation only Fix from $1,9502021-12-30 HIGH 7.8 CVE-2021-20172 All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. The installer of the macOS version of… Genie Installer No fix yet Fix from $1,9502021-12-30 HIGH 7.5 CVE-2021-20174 Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the web interface. By default, all communication to/from t… R6700 Firmware Mitigation only Fix from $1,9502021-12-30 HIGH 7.5 CVE-2021-20175 Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the SOAP interface. By default, all communication to/from … R6700 Firmware Mitigation only Fix from $1,9502021-12-30 MEDIUM 6.8 CVE-2021-20168 Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface. A malicious actor with physical access to the device is ab… Rax43 Firmware Mitigation only Fix from $1,6002021-12-30 MEDIUM 6.8 CVE-2021-20169 Netgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface. By default, all communication to/from the device is sent … Rax43 Firmware Mitigation only Fix from $1,6002021-12-30 MEDIUM 6.8 CVE-2021-23147 Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console. A malicious actor with physical access to the de… R6700 Firmware Mitigation only Fix from $1,6002021-12-30 MEDIUM 5.5 CVE-2021-20171 Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored… Rax43 Firmware Mitigation only Fix from $1,6002021-12-30 CRITICAL 9.8 CVE-2021-45678 NETGEAR RAX200 devices before 1.0.5.132 are affected by insecure code. Rax200 Firmware 1.0.5.132+ Fix from $2,3002021-12-26 HIGH 7.2 CVE-2021-45679 Certain NETGEAR devices are affected by privilege escalation. This affects R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140,… R6900p Firmware 1.0.11.126 / 1.3.3.140+ Fix from $1,9502021-12-26