Skip to content
Noroxi

NETGEAR records

1,349 published records for vendor netgear.

Researcher profile

Entered KEV
8 · 0.6%
Weaponized
26 · 1.9%
Pre-auth RCE
182
With a fix record
0.1%
Median publish → KEV
1843 days

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

1,349 records
  • CVE-2016-1555
    98Now

    (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3

    CriticalCVSS 9.8KEVWeaponizedEPSS 98%

    netgear · wnap320 firmwareApr 21, 2017

  • CVE-2016-6277
    95Now

    NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before

    HighCVSS 8.8KEVWeaponizedEPSS 99%

    netgear · d6220 firmwareDec 14, 2016

  • CVE-2016-10174
    94Now

    The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html.

    CriticalCVSS 9.8KEVWeaponizedEPSS 83%

    netgear · d6100 firmwareJan 30, 2017

  • CVE-2017-6077
    90Now

    ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via s

    CriticalCVSS 9.8KEVWeaponizedEPSS 68%

    netgear · dgn2200 firmwareFeb 22, 2017

  • CVE-2017-5521
    89Now

    An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R80

    HighCVSS 8.1KEVWeaponizedEPSS 89%

    netgear · r6200 firmwareJan 17, 2017

  • CVE-2017-6334
    87Now

    dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands

    HighCVSS 8.8KEVWeaponizedEPSS 72%

    netgear · dgn2200 series firmwareMar 5, 2017

  • CVE-2020-26919
    86Now

    NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.

    CriticalCVSS 9.8KEVWeaponizedEPSS 57%

    netgear · jgs516pe firmwareOct 9, 2020

  • CVE-2017-6862
    83Now

    NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication byp

    CriticalCVSS 9.8KEVWeaponizedEPSS 45%

    netgear · wnr2000 firmwareMay 26, 2017

  • CVE-2016-5674
    67This week

    __debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1

    CriticalCVSS 9.8WeaponizedEPSS 94%

    netgear · readynas surveillanceAug 31, 2016

  • CVE-2016-1524
    66This week

    Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute

    CriticalCVSS 9.6WeaponizedEPSS 94%

    netgear · prosafe network management software 300Feb 12, 2016

  • CVE-2023-38096
    64This week

    NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability

    CriticalCVSS 9.8WeaponizedEPSS 82%

    netgear · prosafe network management systemMay 2, 2024

  • CVE-2016-10176
    62This week

    The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the dev

    CriticalCVSS 9.8WeaponizedEPSS 77%

    netgear · wnr2000v5 firmwareJan 30, 2017

  • CVE-2020-10924
    61This week

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 r

    HighCVSS 8.8WeaponizedEPSS 87%

    netgear · r6700 firmwareJul 28, 2020

  • CVE-2013-2751
    61This week

    Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4

    CriticalCVSS 10.0WeaponizedEPSS 71%

    netgear · raidiatorDec 12, 2013

  • CVE-2020-10923
    60This week

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 r

    HighCVSS 8.8WeaponizedEPSS 84%

    netgear · r6700 firmwareJul 28, 2020

  • CVE-2016-1525
    60This week

    Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticat

    HighCVSS 8.6WeaponizedEPSS 75%

    netgear · prosafe network management software 300Feb 12, 2016

  • CVE-2016-5675
    60This week

    handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NET

    CriticalCVSS 9.8WeaponizedEPSS 70%

    nuuo · crystalAug 31, 2016

  • CVE-2016-10175
    60This week

    The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI.

    CriticalCVSS 9.8WeaponizedEPSS 65%

    netgear · wnr2000v5 firmwareJan 30, 2017

  • CVE-2016-5676
    60This week

    cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.

    HighCVSS 7.5WeaponizedEPSS 53%

    netgear · readynas surveillanceAug 31, 2016

  • CVE-2024-12847
    60This week

    NETGEAR DGN setup.cgi OS Command Injection

    CriticalCVSS 9.8WeaponizedEPSS 30%

    netgear · dgn1000 firmwareJan 10, 2025

  • CVE-2019-19494
    60This week

    Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary

    HighCVSS 8.8WeaponizedEPSS 23%

    sagemcom · f\@st 3890 firmwareJan 9, 2020

  • CVE-2021-45511
    60This week

    Certain NETGEAR devices are affected by authentication bypass.

    CriticalCVSS 9.8WeaponizedEPSS 18%

    netgear · ac2100 firmwareDec 25, 2021

  • CVE-2021-27275
    55Plan

    This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR

    HighCVSS 8.3No exploitEPSS 74%

    netgear · prosafe network management systemMar 29, 2021

  • CVE-2021-27273
    55Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System

    HighCVSS 8.8No exploitEPSS 66%

    netgear · prosafe network management systemMar 29, 2021

  • CVE-2023-38095
    55Plan

    NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 65%

    netgear · prosafe network management systemMay 2, 2024