netgear Vulnerability Advisory Catalog

Total 1,319 security vulnerabilities recorded for netgear software and firmware.

← Back to All Vendors
Component: wnr612v2_firmware

An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is en...

๐Ÿ“… 2023-02-02
CVSS 7.4 Dossier →
Component: r7000p_firmware

Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a ...

๐Ÿ“… 2023-01-31
CVSS 7.8 Dossier →
Component: ac1200_r6220_firmware

The web interface of the 'Nighthawk R6220 AC1200 Smart Wi-Fi Router' is vulnerable to a CRLF Injection attack that can be leveraged to perform Reflect...

๐Ÿ“… 2023-01-26
CVSS 6.1 Dossier →
Component: rax40_firmware

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX40 before 1.0.2.60, RAX35 before 1.0.2.60, R...

๐Ÿ“… 2022-12-30
CVSS 7.4 Dossier →
Component: xwn5001_firmware

An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MI...

๐Ÿ“… 2022-12-20
CVSS 8.1 Dossier →
Component: wnr2000_firmware

An exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router. An attacker can conduct a MITM (Man-in-the-Middle) ...

๐Ÿ“… 2022-12-20
CVSS 8.1 Dossier →
Component: wnr2000_firmware

An issue in Netgear WNR2000 v1 1.2.3.7 and earlier allows authenticated attackers to cause a Denial of Service (DoS) via uploading a crafted firmware ...

๐Ÿ“… 2022-12-20
CVSS 4.8 Dossier →
Component: rax30_firmware

The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, however, app...

๐Ÿ“… 2022-12-16
CVSS 7.8 Dossier →
Component: rax30_firmware

A support user exists on the device and appears to be a backdoor for Technical Support staff. The default password for this account is โ€œsupportโ€ and c...

๐Ÿ“… 2022-12-16
CVSS 8.8 Dossier →
Component: nighthawk_ax1800_firmware

The โ€œpuhttpsniffโ€ service, which runs by default, is susceptible to command injection due to improperly sanitized user input. An unauthenticated attac...

๐Ÿ“… 2022-12-16
CVSS 8.8 Dossier →
CVE-2022-4390 CRITICAL
Component: ax2400_firmware

A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interfa...

๐Ÿ“… 2022-12-09
CVSS 10.0 Dossier →
CVE-2022-44184 CRITICAL
Component: r7000p_firmware

Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_sec....

๐Ÿ“… 2022-11-22
CVSS 9.8 Dossier →
CVE-2022-44200 CRITICAL
Component: r7000p_firmware

Netgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters: stamode_dns1_pri and stamode_dns1_sec....

๐Ÿ“… 2022-11-22
CVSS 9.8 Dossier →
CVE-2022-44199 CRITICAL
Component: r7000p_firmware

Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_server_ip....

๐Ÿ“… 2022-11-22
CVSS 9.8 Dossier →
CVE-2022-44198 CRITICAL
Component: r7000p_firmware

Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_push1....

๐Ÿ“… 2022-11-22
CVSS 9.8 Dossier →
CVE-2022-44197 CRITICAL
Component: r7000p_firmware

Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_server_ip....

๐Ÿ“… 2022-11-22
CVSS 9.8 Dossier →
CVE-2022-44196 CRITICAL
Component: r7000p_firmware

Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_push1....

๐Ÿ“… 2022-11-22
CVSS 9.8 Dossier →
CVE-2022-44194 CRITICAL
Component: r7000p_firmware

Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameters apmode_dns1_pri and apmode_dns1_sec....

๐Ÿ“… 2022-11-22
CVSS 9.8 Dossier →
CVE-2022-44193 CRITICAL
Component: r7000p_firmware

Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameters: starthour, startminute , endhour, and endminute....

๐Ÿ“… 2022-11-22
CVSS 9.8 Dossier →
CVE-2022-44191 CRITICAL
Component: r7000p_firmware

Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameters KEY1 and KEY2....

๐Ÿ“… 2022-11-22
CVSS 9.8 Dossier →
CVE-2022-44190 CRITICAL
Component: r7000p_firmware

Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter enable_band_steering....

๐Ÿ“… 2022-11-22
CVSS 9.8 Dossier →
CVE-2022-44188 CRITICAL
Component: r7000p_firmware

Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter enable_band_steering....

๐Ÿ“… 2022-11-22
CVSS 9.8 Dossier →
CVE-2022-44187 CRITICAL
Component: r7000p_firmware

Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via wan_dns1_pri....

๐Ÿ“… 2022-11-22
CVSS 9.8 Dossier →
CVE-2022-44186 CRITICAL
Component: r7000p_firmware

Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_pri....

๐Ÿ“… 2022-11-22
CVSS 9.8 Dossier →
Page 12 of 55 (1,319 Total Records)