Browse CVEs

MEDIUM 6.1 CVE-2023-2396 A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. This vulnerability affects unknown code of the component Web Ma… Srx5308 Firmware No fix yet Fix from $1,6002023-04-28 MEDIUM 6.5 CVE-2023-2380 A vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. Affected is an unknown function. The manipulation l… Srx5308 Firmware No fix yet Fix from $1,6002023-04-28 CRITICAL 9.8 CVE-2023-30280 Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute arbitrary … R6900 Firmware Mitigation only Fix from $2,3002023-04-26 HIGH 8.8 CVE-2022-27641 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers… D7800 Firmware 1.0.1.68 / 1.0.1.90+ Fix from $1,9502023-03-29 HIGH 8.8 CVE-2022-27642 This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.… Cax80 Firmware 1.0.1.78 / 1.0.4.126+ Fix from $1,9502023-03-29 HIGH 8.8 CVE-2022-27643EPSS 25% This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers… R6400 Firmware 1.0.1.78 / 1.0.4.126+ Fix from $1,9502023-03-29 HIGH 8.8 CVE-2022-27644 This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700… R6400 Firmware 1.0.4.84 / 1.0.4.126+ Fix from $1,9502023-03-29 HIGH 8.8 CVE-2022-27645 This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is… Lax20 Firmware 1.0.4.84 / 1.0.4.126+ Fix from $1,9502023-03-29 HIGH 8.8 CVE-2022-27646 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers… R6400 Firmware 1.0.4.84 / 1.0.4.126+ Fix from $1,9502023-03-29 HIGH 8.0 CVE-2022-27647 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers… Cax80 Firmware 1.0.1.78 / 1.0.4.126+ Fix from $1,9502023-03-29 HIGH 8.8 CVE-2022-37337 A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted HTTP request … Rbs750 Firmware No fix yet Fix from $1,9502023-03-21 HIGH 8.8 CVE-2022-38452 A command execution vulnerability exists in the hidden telnet service functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted networ… Rbs750 Firmware No fix yet Fix from $1,9502023-03-21 MEDIUM 5.9 CVE-2022-38458 A cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted man-i… Rbs750 Firmware No fix yet Fix from $1,6002023-03-21 HIGH 7.2 CVE-2022-36429 A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite RBS750 4.6.8.5. A specially-craft… Rbs750 Firmware No fix yet Fix from $1,9502023-03-21 HIGH 8.8 CVE-2023-28337 When uploading a firmware image to a Netgear Nighthawk Wifi6 Router (RAX30), a hidden “forceFWUpdate” parameter may be provided to force the upgrade … Rax30 Firmware Mitigation only Fix from $1,9502023-03-15 HIGH 7.5 CVE-2023-28338 Any request send to a Netgear Nighthawk Wifi6 Router (RAX30)'s web service containing a “Content-Type” of “multipartboundary=” will result in the req… Rax30 Firmware Mitigation only Fix from $1,9502023-03-15 CRITICAL 9.8 CVE-2023-1327 Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an unauthenticated attacker to ga… Rax30 Firmware 1.0.6.74+ Fix from $2,3002023-03-14 CRITICAL 9.8 CVE-2023-27852 NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms that could allow an attacker to… Rax30 Firmware 1.0.10.94+ Fix from $2,3002023-03-10 CRITICAL 9.8 CVE-2023-27853EPSS 20% NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute a… Rax30 Firmware 1.0.10.94+ Fix from $2,3002023-03-10 HIGH 8.8 CVE-2023-27851 NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users with upload permissions to exe… Rax30 Firmware 1.0.10.94+ Fix from $1,9502023-03-10 HIGH 8.8 CVE-2023-1205 NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented… Rax30 Firmware 1.0.10.94+ Fix from $1,9502023-03-10 MEDIUM 6.8 CVE-2023-27850 NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that allows users with access to this feature to access arbitrar… Rax30 Firmware 1.0.10.94+ Fix from $1,6002023-03-10 CRITICAL 9.8 CVE-2023-0849 A vulnerability has been found in Netgear WNDR3700v2 1.0.1.14 and classified as critical. This vulnerability affects unknown code of the component We… Wndr3700 Firmware Mitigation only Fix from $2,3002023-02-15 HIGH 7.5 CVE-2023-0848 A vulnerability was found in Netgear WNDR3700v2 1.0.1.14. It has been rated as problematic. This issue affects some unknown processing of the compone… Wndr3700 Firmware Mitigation only Fix from $1,9502023-02-15 HIGH 7.5 CVE-2023-0850 A vulnerability was found in Netgear WNDR3700v2 1.0.1.14 and classified as problematic. This issue affects some unknown processing of the component W… Wndr3700 Firmware No fix yet Fix from $1,9502023-02-15 HIGH 7.5 CVE-2023-24498 An uspecified endpoint in the web server of the switch does not properly authenticate the user identity, and may allow downloading a config page with… Prosafe Fs726tp Firmware Mitigation only Fix from $1,9502023-02-15 CRITICAL 9.8 CVE-2022-48322 NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability. This affects MR60 before 1.1.7.132, MS60… Mr60 Firmware 1.1.7.132 / 1.3.3.154+ Fix from $2,3002023-02-13 HIGH 7.4 CVE-2023-23110 An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is e… Wnr612v2 Firmware after 1.1.2.60 Fix from $1,9502023-02-02 HIGH 7.8 CVE-2022-48176 Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a… R7000p Firmware 1.1.7.132 / 1.3.3.154+ Fix from $1,9502023-01-31 MEDIUM 6.1 CVE-2022-47052 The web interface of the 'Nighthawk R6220 AC1200 Smart Wi-Fi Router' is vulnerable to a CRLF Injection attack that can be leveraged to perform Reflec… Ac1200 R6220 Firmware No fix yet Fix from $1,6002023-01-26