netgear Vulnerability Advisory Catalog

Total 1,319 security vulnerabilities recorded for netgear software and firmware.

← Back to All Vendors
Component: r6220_firmware

Netgear R6220 v1.1.0.114_1.0.1 suffers from Incorrect Access Control, resulting in a command injection vulnerability....

📅 2022-10-17
CVSS 8.8 Dossier →
CVE-2022-37235 CRITICAL
Component: r7000_firmware

Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware...

📅 2022-09-23
CVSS 9.8 Dossier →
CVE-2022-37232 CRITICAL
Component: wnr2000v4_firmware

Netgear N300 wireless router wnr2000v4-V1.0.0.70 is vulnerable to Buffer Overflow via uhttpd. There is a stack overflow vulnerability caused by strcpy...

📅 2022-09-23
CVSS 9.8 Dossier →
CVE-2022-31937 CRITICAL
Component: wnr2000v4_firmware

Netgear N300 wireless router wnr2000v4-V1.0.0.70 was discovered to contain a stack overflow via strcpy in uhttpd....

📅 2022-09-22
CVSS 9.8 Dossier →
Component: r7000_firmware

Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware...

📅 2022-09-22
CVSS 7.8 Dossier →
Component: wpn824ext_firmware

An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to ...

📅 2022-09-20
CVSS 5.3 Dossier →
Component: wpn824ext_firmware

An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack ...

📅 2022-09-20
CVSS 7.5 Dossier →
Component: r6200

Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow r...

📅 2022-09-08
CVSS 8.8 Dossier →
CVE-2021-34236 CRITICAL
Component: r8000_firmware

Buffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to execute arbitrary code or cause a denial-of-service by send...

📅 2022-09-08
CVSS 9.8 Dossier →
Component: r6200_firmware

NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow remote aut...

📅 2022-09-07
CVSS 8.8 Dossier →
Component: wnap320_firmware

netgear wnap320 router WNAP320_V2.0.3_firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies....

📅 2022-06-17
CVSS 5.3 Dossier →
CVE-2022-29383 CRITICAL
Component: ssl312_firmware

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-b...

📅 2022-05-13
CVSS 9.8 Dossier →
Component: r8500_firmware

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the ipv6_...

📅 2022-03-26
CVSS 8.8 Dossier →
Component: r8500_firmware

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNe...

📅 2022-03-26
CVSS 8.8 Dossier →
Component: r8500_firmware

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNe...

📅 2022-03-26
CVSS 8.8 Dossier →
Component: ex6100_firmware

A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the e...

📅 2022-03-18
CVSS 7.8 Dossier →
Component: mbr1517_firmware

A vulnerability is in the 'MNU_top.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page with...

📅 2022-03-17
CVSS 7.5 Dossier →
Component: wac104_firmware

A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page wit...

📅 2022-03-17
CVSS 5.3 Dossier →
Component: wac120_ac_firmware

Unauthenticated cross-site scripting (XSS) in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijack...

📅 2022-03-04
CVSS 6.1 Dossier →
Component: xr1000

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR XR1000 1.0.0.52_1.0.38 rou...

📅 2022-01-25
CVSS 6.5 Dossier →
Component: ac2100_firmware

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers. Authentication is...

📅 2022-01-25
CVSS 8.8 Dossier →
Component: r6260_firmware

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Auth...

📅 2022-01-13
CVSS 8.8 Dossier →
Component: r6260_firmware

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Auth...

📅 2022-01-13
CVSS 8.8 Dossier →
Component: r6260_firmware

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Auth...

📅 2022-01-13
CVSS 8.8 Dossier →
Page 13 of 55 (1,319 Total Records)