Browse CVEs

HIGH 7.2 CVE-2021-38532 NETGEAR WAC104 devices before 1.0.4.15 are affected by incorrect configuration of security settings. Wac104 Firmware 1.0.4.15+ Fix from $1,9502021-08-11 HIGH 7.2 CVE-2021-38531 Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R60… D6200 Firmware 1.0.0.42 / 1.0.0.66+ Fix from $1,9502021-08-11 CRITICAL 9.8 CVE-2021-38530 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.16, … Rbk40 Firmware 2.5.1.16+ Fix from $2,3002021-08-11 CRITICAL 9.8 CVE-2021-38529 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, … D7800 Firmware 1.0.1.56 / 1.0.2.68+ Fix from $2,3002021-08-11 CRITICAL 9.8 CVE-2021-38528 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D8500 before 1.0.3.58, R6900P before 1.3.2.132… D8500 Firmware 1.0.0.64 / 1.0.1.38+ Fix from $2,3002021-08-11 CRITICAL 9.8 CVE-2021-38527 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.14, EX6100v2 before 1.0.1.9… Cbr40 Firmware 1.0.0.132 / 1.0.1.98+ Fix from $2,3002021-08-11 HIGH 7.5 CVE-2021-38526 Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX35 before 1.0.3.94, RAX38 before 1.0.3.94, … Rax35 Firmware 1.0.3.94+ Fix from $1,9502021-08-11 HIGH 7.2 CVE-2021-38525 Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.… D3600 Firmware 1.0.0.76 / 1.0.1.18+ Fix from $1,9502021-08-11 HIGH 7.2 CVE-2021-38523 NETGEAR R6400 devices before 1.0.1.70 are affected by a stack-based buffer overflow by an authenticated user. R6400 Firmware 1.0.1.70+ Fix from $1,9502021-08-11 HIGH 7.2 CVE-2021-38522 NETGEAR R6400 devices before 1.0.1.52 are affected by a stack-based buffer overflow by an authenticated user. R6400 Firmware 1.0.1.52+ Fix from $1,9502021-08-11 HIGH 7.2 CVE-2021-38521 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.50, R7900P before 1.4.1.50, R8000… R6400 Firmware 1.0.1.50 / 1.0.1.62+ Fix from $1,9502021-08-11 HIGH 7.2 CVE-2021-38520 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.52, R6400v2 before 1.0.4.84, R670… R6400 Firmware 1.0.1.52 / 1.0.4.84+ Fix from $1,9502021-08-11 HIGH 7.2 CVE-2021-38519 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6250 before 1.0.4.36, R6300v2 before 1.0.4.36, R640… R6250 Firmware 1.0.1.50 / 1.0.2.8+ Fix from $1,9502021-08-11 HIGH 7.2 CVE-2021-38518 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RAX200 before 1.0.4.120, RAX75 before 1.0.4.120, RAX… Rax200 Firmware 1.0.4.120 / 3.2.17.12+ Fix from $1,9502021-08-11 HIGH 7.2 CVE-2021-38517 Certain NETGEAR devices are affected by out-of-bounds reads and writes. This affects R6400 before 1.0.1.70, RAX75 before 1.0.4.120, RAX80 before 1.0.… R6400 Firmware 1.0.1.70 / 1.0.3.50+ Fix from $1,9502021-08-11 CRITICAL 9.8 CVE-2021-38516 Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D700… D6220 Firmware 1.0.0.40 / 1.0.0.48+ Fix from $2,3002021-08-11 HIGH 7.5 CVE-2021-38515 Certain NETGEAR devices are affected by denial of service. This affects R6400v2 before 1.0.4.98, R6700v3 before 1.0.4.98, R7900 before 1.0.3.18, and … R6400 Firmware 1.0.3.18 / 1.0.4.46+ Fix from $1,9502021-08-11 CRITICAL 9.8 CVE-2021-38513 Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11… Rbk852 Firmware 1.0.0.48 / 1.0.6.110+ Fix from $2,3002021-08-11 HIGH 8.0 CVE-2021-32122 Certain NETGEAR devices are affected by CSRF. This affects EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before 1.0.0.64, and EX6130 before … Ex3700 Firmware 1.0.0.44 / 1.0.0.64+ Fix from $1,9502021-08-11 CRITICAL 9.8 CVE-2021-35973 NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/mini_httpd, allowing an unauthenticated at… Wac104 Firmware 1.0.4.15+ Fix from $2,3002021-06-30 CRITICAL 9.8 CVE-2021-33514EPSS 8% Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/libsal.so.0.0 library used by a… Gc108p Firmware 1.0.2.3 / 1.0.4.3+ Fix from $2,3002021-05-21 HIGH 8.8 CVE-2021-31802EPSS 14% NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without authentication. The vulnerabili… R7000 Firmware after 1.0.11.116 Fix from $1,9502021-04-26 HIGH 8.8 CVE-2021-27251 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Authentication i… Br200 Firmware 1.0.0.134 / 1.0.1.60+ Fix from $1,9502021-04-14 HIGH 8.8 CVE-2021-27252 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. … Br200 Firmware 1.0.0.134 / 1.0.1.60+ Fix from $1,9502021-04-14 HIGH 8.8 CVE-2021-27253 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Although authent… Br200 Firmware 1.0.0.134 / 1.0.1.60+ Fix from $1,9502021-04-14 CRITICAL 9.8 CVE-2021-27274EPSS 8% This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26.… Prosafe Network Management System Mitigation only Fix from $2,3002021-03-29 HIGH 8.8 CVE-2021-27273EPSS 65% This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26.… Prosafe Network Management System Mitigation only Fix from $1,9502021-03-29 HIGH 8.3 CVE-2021-27275EPSS 73% This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE … Prosafe Network Management System Mitigation only Fix from $1,9502021-03-29 HIGH 7.1 CVE-2021-27272EPSS 74% This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26.… Prosafe Network Management System Mitigation only Fix from $1,9502021-03-29 HIGH 7.1 CVE-2021-27276EPSS 72% This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26.… Prosafe Network Management System Mitigation only Fix from $1,9502021-03-29