netgear Vulnerability Advisory Catalog

Total 1,319 security vulnerabilities recorded for netgear software and firmware.

← Back to All Vendors
Component: dg834gv5_firmware

A vulnerability classified as problematic was found in Netgear DG834Gv5 1.6.01.34. This vulnerability affects unknown code of the component Web Manage...

📅 2024-04-26
CVSS 2.7 Dossier →
Component: r6850_firmware

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntp_server parameter....

📅 2024-04-03
CVSS 8.0 Dossier →
Component: r6850_firmware

An information leak in the BRS_top.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authenticati...

📅 2024-04-03
CVSS 7.5 Dossier →
Component: r6850_firmware

An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required....

📅 2024-04-03
CVSS 5.3 Dossier →
Component: r6850_firmware

An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication requi...

📅 2024-04-03
CVSS 7.5 Dossier →
CVE-2024-30568 CRITICAL
Component: r6850_firmware

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter....

📅 2024-04-03
CVSS 9.8 Dossier →
Component: dgnd4000_firmware

An issue in NETGEAR-DGND4000 v.1.1.00.15_1.00.15 allows a remote attacker to escalate privileges via the next_file parameter to the /setup.cgi compone...

📅 2024-03-14
CVSS 8.8 Dossier →
Component: cbk40_firmware

An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers...

📅 2024-03-12
CVSS 7.5 Dossier →
Component: cbk40_firmware

An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to o...

📅 2024-03-12
CVSS 5.4 Dossier →
Component: rax30_firmware

A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A spe...

📅 2024-03-07
CVSS 7.2 Dossier →
CVE-2024-1431 MEDIUM
Component: r7000_firmware

A vulnerability was found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this issue is some unknown functionality of ...

📅 2024-02-11
CVSS 4.3 Dossier →
CVE-2024-1430 MEDIUM
Component: r7000_firmware

A vulnerability has been found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this vulnerability is an unknown functi...

📅 2024-02-11
CVSS 4.3 Dossier →
CVE-2023-50089 CRITICAL
Component: wnr2000_firmware

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs duri...

📅 2023-12-15
CVSS 9.8 Dossier →
CVE-2023-49007 CRITICAL
Component: rbr750_firmware

In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd....

📅 2023-12-08
CVSS 9.8 Dossier →
Component: prosafe_network_management_system

A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files ...

📅 2023-11-29
CVSS 7.8 Dossier →
CVE-2023-49693 CRITICAL
Component: prosafe_network_management_system

NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticate...

📅 2023-11-29
CVSS 9.8 Dossier →
CVE-2023-36187 CRITICAL
Component: cbr40_firmware

Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via craft...

📅 2023-09-01
CVSS 9.8 Dossier →
Component: jwnr2000v2_firmware

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and h...

📅 2023-08-07
CVSS 8.8 Dossier →
CVE-2023-38928 CRITICAL
Component: r7100lg_firmware

Netgear R7100LG 1.0.0.78 was discovered to contain a command injection vulnerability via the password parameter at usb_remote_invite.cgi....

📅 2023-08-07
CVSS 9.8 Dossier →
Component: ex6200_firmware

Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wla_temp_ssid parameter at acosNvramConfig_set....

📅 2023-08-07
CVSS 8.8 Dossier →
Component: dc112a_firmware

Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the http_passwd parameter in password.cg...

📅 2023-08-07
CVSS 8.8 Dossier →
Component: dgn3500_firmware

Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the http_password parameter at setup.cgi....

📅 2023-08-07
CVSS 6.5 Dossier →
Component: jwnr2000v2_firmware

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and h...

📅 2023-08-07
CVSS 8.8 Dossier →
Component: wg302v2_firmware

Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgrade_handler function via ...

📅 2023-08-07
CVSS 8.8 Dossier →
Page 9 of 55 (1,319 Total Records)