NETGEAR kayıtları
netgear üreticisine ait 1.349 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 8 · %0,6
- Silahlaştırılmış
- 26 · %1,9
- Pre-auth RCE
- 182
- Düzeltme kaydı olan
- %0,1
- Yayından KEV’e ortanca
- 1843 gün
Tekrar eden sınıflar
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')199
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')180
- CWE-787 Out-of-bounds Write146
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')116
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')67
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor52
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
1.349 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
98Hemen | CVE-2016-1555Silahlaştırılmış | (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 netgear · wnap320 firmware · CWE-77 | Kritik9,8 | KEV | %98,3 | 21 Nis 2017 |
95Hemen | CVE-2016-6277Silahlaştırılmış | NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before netgear · d6220 firmware · CWE-352 | Yüksek8,8 | KEV | %99,8 | 14 Ara 2016 |
94Hemen | CVE-2016-10174Silahlaştırılmış | The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html.netgear · d6100 firmware · CWE-120 | Kritik9,8 | KEV | %83,3 | 30 Oca 2017 |
90Hemen | CVE-2017-6077Silahlaştırılmış | ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via snetgear · dgn2200 firmware · CWE-78 | Kritik9,8 | KEV | %68,7 | 22 Şub 2017 |
89Hemen | CVE-2017-5521Silahlaştırılmış | An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R80netgear · r6200 firmware | Yüksek8,1 | KEV | %89,2 | 17 Oca 2017 |
87Hemen | CVE-2017-6334Silahlaştırılmış | dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands netgear · dgn2200 series firmware · CWE-78 | Yüksek8,8 | KEV | %72,6 | 5 Mar 2017 |
86Hemen | CVE-2020-26919Silahlaştırılmış | NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.netgear · jgs516pe firmware | Kritik9,8 | KEV | %57,5 | 9 Eki 2020 |
83Hemen | CVE-2017-6862Silahlaştırılmış | NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypnetgear · wnr2000 firmware · CWE-120 | Kritik9,8 | KEV | %45,7 | 26 May 2017 |
67Bu hafta | CVE-2016-5674Silahlaştırılmış | __debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1netgear · readynas surveillance · CWE-20 | Kritik9,8 | — | %94,6 | 31 Ağu 2016 |
66Bu hafta | CVE-2016-1524Silahlaştırılmış | Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to executenetgear · prosafe network management software 300 | Kritik9,6 | — | %94,1 | 12 Şub 2016 |
64Bu hafta | CVE-2023-38096Silahlaştırılmış | NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerabilitynetgear · prosafe network management system · CWE-287 | Kritik9,8 | — | %82,0 | 2 May 2024 |
62Bu hafta | CVE-2016-10176Silahlaştırılmış | The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the devnetgear · wnr2000v5 firmware · CWE-20 | Kritik9,8 | — | %77,6 | 30 Oca 2017 |
61Bu hafta | CVE-2020-10924Silahlaştırılmış | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 rnetgear · r6700 firmware · CWE-121 | Yüksek8,8 | — | %87,3 | 28 Tem 2020 |
61Bu hafta | CVE-2013-2751Silahlaştırılmış | Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4netgear · raidiator · CWE-94 | Kritik10,0 | — | %71,6 | 12 Ara 2013 |
60Bu hafta | CVE-2020-10923Silahlaştırılmış | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 rnetgear · r6700 firmware · CWE-305 | Yüksek8,8 | — | %84,7 | 28 Tem 2020 |
60Bu hafta | CVE-2016-5675Silahlaştırılmış | handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETnuuo · crystal · CWE-20 | Kritik9,8 | — | %70,9 | 31 Ağu 2016 |
58Planlayın | CVE-2016-10175Silahlaştırılmış | The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI.netgear · wnr2000v5 firmware · CWE-200 | Kritik9,8 | — | %65,0 | 30 Oca 2017 |
57Planlayın | CVE-2016-1525Silahlaştırılmış | Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticatnetgear · prosafe network management software 300 · CWE-22 | Yüksek8,6 | — | %75,0 | 12 Şub 2016 |
55Planlayın | CVE-2021-27275İstismar yok | This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEARnetgear · prosafe network management system · CWE-22 | Yüksek8,3 | — | %73,3 | 29 Mar 2021 |
55Planlayın | CVE-2023-38095İstismar yok | NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerabilitynetgear · prosafe network management system · CWE-434 | Yüksek8,8 | — | %65,5 | 2 May 2024 |
54Planlayın | CVE-2021-27273İstismar yok | This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System netgear · prosafe network management system · CWE-78 | Yüksek8,8 | — | %65,0 | 29 Mar 2021 |
54Planlayın | CVE-2023-41182İstismar yok | NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerabilitynetgear · prosafe network management system · CWE-22 | Yüksek8,8 | — | %62,3 | 2 May 2024 |
54Planlayın | CVE-2023-50231İstismar yok | NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerabilitynetgear · prosafe network management system · CWE-79 | Kritik9,6 | — | %53,3 | 2 May 2024 |
54Planlayın | CVE-2022-29383Kavram kanıtı | NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainnamnetgear · ssl312 firmware · CWE-89 | Kritik9,8 | — | %48,5 | 13 May 2022 |
53Planlayın | CVE-2024-30568Kavram kanıtı | Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter.netgear · r6850 firmware · CWE-94 | Kritik9,8 | — | %46,9 | 3 Nis 2024 |
- CVE-2016-155598Hemen
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98netgear · wnap320 firmware21 Nis 2017
- CVE-2016-627795Hemen
NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %100netgear · d6220 firmware14 Ara 2016
- CVE-2016-1017494Hemen
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html.
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %83netgear · d6100 firmware30 Oca 2017
- CVE-2017-607790Hemen
ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via s
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %69netgear · dgn2200 firmware22 Şub 2017
- CVE-2017-552189Hemen
An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R80
YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %89netgear · r6200 firmware17 Oca 2017
- CVE-2017-633487Hemen
dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %73netgear · dgn2200 series firmware5 Mar 2017
- CVE-2020-2691986Hemen
NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %57netgear · jgs516pe firmware9 Eki 2020
- CVE-2017-686283Hemen
NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication byp
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %46netgear · wnr2000 firmware26 May 2017
- CVE-2016-567467Bu hafta
__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1
KritikCVSS 9,8SilahlaştırılmışEPSS %95netgear · readynas surveillance31 Ağu 2016
- CVE-2016-152466Bu hafta
Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute
KritikCVSS 9,6SilahlaştırılmışEPSS %94netgear · prosafe network management software 30012 Şub 2016
- CVE-2023-3809664Bu hafta
NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability
KritikCVSS 9,8SilahlaştırılmışEPSS %82netgear · prosafe network management system2 May 2024
- CVE-2016-1017662Bu hafta
The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the dev
KritikCVSS 9,8SilahlaştırılmışEPSS %78netgear · wnr2000v5 firmware30 Oca 2017
- CVE-2020-1092461Bu hafta
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 r
YüksekCVSS 8,8SilahlaştırılmışEPSS %87netgear · r6700 firmware28 Tem 2020
- CVE-2013-275161Bu hafta
Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4
KritikCVSS 10,0SilahlaştırılmışEPSS %72netgear · raidiator12 Ara 2013
- CVE-2020-1092360Bu hafta
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 r
YüksekCVSS 8,8SilahlaştırılmışEPSS %85netgear · r6700 firmware28 Tem 2020
- CVE-2016-567560Bu hafta
handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NET
KritikCVSS 9,8SilahlaştırılmışEPSS %71nuuo · crystal31 Ağu 2016
- CVE-2016-1017558Planlayın
The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI.
KritikCVSS 9,8SilahlaştırılmışEPSS %65netgear · wnr2000v5 firmware30 Oca 2017
- CVE-2016-152557Planlayın
Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticat
YüksekCVSS 8,6SilahlaştırılmışEPSS %75netgear · prosafe network management software 30012 Şub 2016
- CVE-2021-2727555Planlayın
This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR
YüksekCVSS 8,3İstismar yokEPSS %73netgear · prosafe network management system29 Mar 2021
- CVE-2023-3809555Planlayın
NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %66netgear · prosafe network management system2 May 2024
- CVE-2021-2727354Planlayın
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System
YüksekCVSS 8,8İstismar yokEPSS %65netgear · prosafe network management system29 Mar 2021
- CVE-2023-4118254Planlayın
NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %62netgear · prosafe network management system2 May 2024
- CVE-2023-5023154Planlayın
NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability
KritikCVSS 9,6İstismar yokEPSS %53netgear · prosafe network management system2 May 2024
- CVE-2022-2938354Planlayın
NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainnam
KritikCVSS 9,8Kavram kanıtıEPSS %49netgear · ssl312 firmware13 May 2022
- CVE-2024-3056853Planlayın
Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter.
KritikCVSS 9,8Kavram kanıtıEPSS %47netgear · r6850 firmware3 Nis 2024