netgear Vulnerability Advisory Catalog

Total 1,319 security vulnerabilities recorded for netgear software and firmware.

← Back to All Vendors
CVE-2025-4117 MEDIUM
Component: jwnr2000_firmware

A vulnerability, which was classified as critical, was found in Netgear JWNR2000v2 1.0.0.11. This affects the function sub_41A914. The manipulation of...

📅 2025-04-30
CVSS 5.5 Dossier →
Component: jwnr2000_firmware

A vulnerability, which was classified as critical, has been found in Netgear JWNR2000v2 1.0.0.11. Affected by this issue is the function get_cur_lang_...

📅 2025-04-30
CVSS 8.8 Dossier →
Component: jwnr2000_firmware

A vulnerability classified as critical was found in Netgear JWNR2000v2 1.0.0.11. Affected by this vulnerability is the function default_version_is_new...

📅 2025-04-30
CVSS 8.8 Dossier →
Component: jwnr2000_firmware

A vulnerability classified as critical has been found in Netgear JWNR2000v2 1.0.0.11. Affected is the function check_language_file. The manipulation o...

📅 2025-04-30
CVSS 8.8 Dossier →
CVE-2025-29044 CRITICAL
Component: r6100_firmware

Buffer Overflow vulnerability in Netgear- R61 router V1.0.1.28 allows a remote attacker to execute arbitrary code via the QUERY_STRING key value...

📅 2025-04-17
CVSS 9.8 Dossier →
CVE-2024-54809 CRITICAL
Component: wnr854t_firmware

Netgear Inc WNR854T 1.5.2 (North America) contains a stack-based buffer overflow vulnerability in the parse_st_header function due to use of a request...

📅 2025-03-31
CVSS 9.8 Dossier →
CVE-2024-54808 CRITICAL
Component: wnr854t_firmware

Netgear WNR854T 1.5.2 (North America) contains a stack-based buffer overflow vulnerability in the SetDefaultConnectionService function due to an uncon...

📅 2025-03-31
CVSS 9.8 Dossier →
CVE-2024-54807 CRITICAL
Component: wnr854t_firmware

In Netgear WNR854T 1.5.2 (North America), the UPNP service is vulnerable to command injection in the function addmap_exec which parses the NewInternal...

📅 2025-03-31
CVSS 9.8 Dossier →
CVE-2024-54806 CRITICAL
Component: wnr854t_firmware

Netgear WNR854T 1.5.2 (North America) is vulnerable to Arbitrary command execution in cmd.cgi which allows for the execution of system commands via th...

📅 2025-03-31
CVSS 9.8 Dossier →
CVE-2024-54805 CRITICAL
Component: wnr854t_firmware

Netgear WNR854T 1.5.2 (North America) is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the n...

📅 2025-03-31
CVSS 9.8 Dossier →
CVE-2024-54804 CRITICAL
Component: wnr854t_firmware

Netgear WNR854T 1.5.2 (North America) is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the n...

📅 2025-03-31
CVSS 9.8 Dossier →
CVE-2024-54803 CRITICAL
Component: wnr854t_firmware

Netgear WNR854T 1.5.2 (North America) is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the n...

📅 2025-03-31
CVSS 9.8 Dossier →
CVE-2024-54802 CRITICAL
Component: wnr854t_firmware

In Netgear WNR854T 1.5.2 (North America), the UPNP service (/usr/sbin/upnp) is vulnerable to stack-based buffer overflow in the M-SEARCH Host header....

📅 2025-03-31
CVSS 9.8 Dossier →
CVE-2025-28219 CRITICAL
Component: dc112a_firmware

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usb_adv.cgi, which allows remote attackers to execute arbitrary commands via...

📅 2025-03-28
CVSS 9.8 Dossier →
Component: c7800_firmware

The administrative web interface of a Netgear C7800 Router running firmware version 6.01.07 (and possibly others) authenticates users via basic authen...

📅 2025-02-18
CVSS 6.4 Dossier →
Component: dgn2200_firmware

A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authenticatio...

📅 2025-02-18
CVSS 8.8 Dossier →
CVE-2024-12847 CRITICAL
Component: dgn1000_firmware

NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary ...

📅 2025-01-10
CVSS 9.8 Dossier →
Component: r6900p_firmware

A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_1...

📅 2024-12-27
CVSS 7.3 Dossier →
Component: rax30_firmware

NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execut...

📅 2024-11-22
CVSS 8.8 Dossier →
Component: rax30_firmware

NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to compromise ...

📅 2024-11-22
CVSS 7.5 Dossier →
Component: r7000p_firmware

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at ru_wan_flow.cgi. This vulnerability allows...

📅 2024-11-05
CVSS 5.7 Dossier →
Component: r7000p_firmware

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at genie_pptp.cgi. This vulnerability allows ...

📅 2024-11-05
CVSS 5.7 Dossier →
Component: r7000p_firmware

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at wiz_pptp.cgi. This vulnerability allows at...

📅 2024-11-05
CVSS 5.7 Dossier →
Component: xr300_firmware

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at bsw_p...

📅 2024-11-05
CVSS 5.7 Dossier →
Page 4 of 55 (1,319 Total Records)