Netgear

R7800 Firmware

245 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2021-34947

  • EPSS 0.39%
  • Published 07.05.2024 23:15:07
  • Last modified 14.08.2025 01:42:44

NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 routers. Authentication is not required to exploi...

8.8

CVE-2022-27641

  • EPSS 0.14%
  • Published 29.03.2023 19:15:08
  • Last modified 21.11.2024 06:56:04

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the N...

5.3

CVE-2021-44261

Exploit
  • EPSS 1.61%
  • Published 17.03.2022 13:15:07
  • Last modified 21.11.2024 06:30:40

A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes firmware version information for the device.

9.8

CVE-2021-45658

  • EPSS 0.36%
  • Published 26.12.2021 01:15:20
  • Last modified 21.11.2024 06:32:48

Certain NETGEAR devices are affected by server-side injection. This affects D7800 before 1.0.1.58, DM200 before 1.0.0.66, EX2700 before 1.0.1.56, EX6150v2 before 1.0.1.86, EX6100v2 before 1.0.1.86, EX6200v2 before 1.0.1.78, EX6250 before 1.0.0.110, E...

10

CVE-2021-45618

  • EPSS 1.53%
  • Published 26.12.2021 01:15:18
  • Last modified 21.11.2024 06:32:41

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7800 before 1.0.1.64, EX6200v2 before 1.0.1.86, EX6250 before 1.0.0.134, EX7700 before 1.0.0.216, EX8000 before 1.0.1.232, LBR20 before 2.6.3.50, ...

10

CVE-2021-45619

  • EPSS 0.87%
  • Published 26.12.2021 01:15:18
  • Last modified 21.11.2024 06:32:41

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects EX6200v2 before 1.0.1.86, EX6250 before 1.0.0.134, EX7700 before 1.0.0.216, EX8000 before 1.0.1.232, LBR1020 before 2.6.3.58, LBR20 before 2.6.3.50...

9.8

CVE-2021-45623

  • EPSS 1.61%
  • Published 26.12.2021 01:15:18
  • Last modified 21.11.2024 06:32:42

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R7800 before 1.0.2.74, R9000 before 1.0.5.2, and XR500 before 2.3.2.66.

7.8

CVE-2021-45602

  • EPSS 0.16%
  • Published 26.12.2021 01:15:17
  • Last modified 21.11.2024 06:32:38

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.66, EX2700 before 1.0.1.68, WN3000RPv2 before 1.0.0.90, WN3000RPv3 before 1.0.2.100, LBR1020 before 2.6.5.20, LBR20 before 2.6.5.32, R...

5.5

CVE-2021-45603

  • EPSS 0.02%
  • Published 26.12.2021 01:15:17
  • Last modified 21.11.2024 06:32:38

Certain NETGEAR devices are affected by disclosure of sensitive information. A UPnP request reveals a device's serial number, which can be used for a password reset. This affects D7800 before 1.0.1.66, EX2700 before 1.0.1.68, WN3000RPv2 before 1.0.0....

8.8

CVE-2021-45548

  • EPSS 0.35%
  • Published 26.12.2021 01:15:15
  • Last modified 21.11.2024 06:32:29

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.60, DM200 before 1.0.0.66, EX2700 before 1.0.1.56, EX6150v2 before 1.0.1.86, EX6200v2 before 1.0.1.86, EX6250 before 1.0.0.128, EX6400...