netgear Vulnerability Advisory Catalog

Total 1,319 security vulnerabilities recorded for netgear software and firmware.

← Back to All Vendors
Component: xr300_firmware

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe...

📅 2024-11-05
CVSS 5.7 Dossier →
Component: r8500_firmware

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in t...

📅 2024-11-05
CVSS 8.0 Dossier →
Component: r8500_firmware

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at ether.cgi. This vulnerability all...

📅 2024-11-05
CVSS 8.0 Dossier →
Component: xr300_firmware

Netgear XR300 v1.0.3.78 was discovered to contain a command injection vulnerability in the system_name parameter at wiz_dyn.cgi. This vulnerability al...

📅 2024-11-05
CVSS 8.0 Dossier →
Component: xr300_firmware

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at wireless.cgi. This vulnerability allows attackers t...

📅 2024-11-05
CVSS 5.7 Dossier →
Component: r8500_firmware

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6_static_ip parameter in the ipv6_tunnel function. This vulnerability a...

📅 2024-11-05
CVSS 5.7 Dossier →
Component: r8500_firmware

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the share_name parameter at usb_remote_smb_conf.cgi. This vuln...

📅 2024-11-05
CVSS 8.0 Dossier →
Component: r8500_firmware

Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usb_device.cgi via the cifs...

📅 2024-11-05
CVSS 5.7 Dossier →
Component: r8500_firmware

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the...

📅 2024-11-05
CVSS 5.7 Dossier →
Component: r8500_firmware

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the l2tp_user_ip ...

📅 2024-11-05
CVSS 5.7 Dossier →
Component: r8500_firmware

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the sysDNSHost parameter at ddns.cgi. This vulnerability allows attackers to c...

📅 2024-11-05
CVSS 5.7 Dossier →
Component: r8500_firmware

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component wireless.cgi via the opmode, opmode_an, an...

📅 2024-11-05
CVSS 5.7 Dossier →
Component: r8500_firmware

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at password.cgi. This vulnerability...

📅 2024-11-05
CVSS 5.7 Dossier →
Component: r8500_firmware

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component openvpn.cgi via the openvpn_service_port a...

📅 2024-11-05
CVSS 5.7 Dossier →
Component: r8500_firmware

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip ...

📅 2024-11-05
CVSS 5.7 Dossier →
Component: r8500_firmware

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpa_server pa...

📅 2024-11-05
CVSS 5.7 Dossier →
Component: r8500_firmware

Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the share_name parameter at usb_remote_smb_conf.cgi. This vulnerability allows...

📅 2024-11-05
CVSS 5.7 Dossier →
Component: r8500_firmware

Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component ipv6_fix.cgi via the ipv6_wan_ipaddr, ipv6...

📅 2024-11-05
CVSS 5.7 Dossier →
Component: r8500_firmware

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at admin_account.cgi. This vulnerab...

📅 2024-11-05
CVSS 8.0 Dossier →
Component: r7000_firmware

Netgear R7000 1.0.11.136 is vulnerable to Command Injection in RMT_invite.cgi via device_name2 parameter....

📅 2024-10-14
CVSS 8.4 Dossier →
Component: ex3700_firmware

Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operating_mode.cgi via the ap_...

📅 2024-10-14
CVSS 8.4 Dossier →
Component: ex6120_firmware

Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in genie_fix2.cgi via the wan_dns1_pri parameter....

📅 2024-10-14
CVSS 8.4 Dossier →
Component: ex3700_firmware

Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injection in operating_mode.cgi via th...

📅 2024-10-11
CVSS 8.4 Dossier →
Component: xr1000_firmware

Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usb_remote_smb_conf.cgi via the share_name parameter....

📅 2024-10-11
CVSS 8.4 Dossier →
Page 6 of 55 (1,319 Total Records)