Skip to content
OpenAdvisories

Category

Network devices

11,298 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3,920 results · Clear filters · Feed

  • High 7.5
    CVE-2024-33608

    BIG-IP IPsec vulnerability

    When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

    F5 BIG-IP Network devices
  • High 7.5
    CVE-2024-25560

    TMM Vulnerability

    When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

    F5 BIG-IP BIG-IP Next CNF Network devices
  • High 7.4
    CVE-2024-28883

    BIG-IP APM browser network access VPN client vulnerability

    An origin validation vulnerability exists in BIG-IP APM browser network access VPN client for Windows, macOS and Linux which may allow an attacker to bypass F5 endpoint inspection. Note: Software versions which have reached End of Technical Support (EoTS) are…

    F5 BIG-IP BIG-IP Edge Client Network devices Browsers
  • High 8.8
    CVE-2023-35757

    D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication i…

    D-Link DAP-2622 Network devices
  • High 8.8
    CVE-2023-35749

    D-Link DAP-2622 DDP Firmware Upgrade Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-2622 DDP Firmware Upgrade Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication …

    D-Link DAP-2622 Network devices
  • High 8.8
    CVE-2023-35748

    D-Link DAP-2622 DDP Firmware Upgrade Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-2622 DDP Firmware Upgrade Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Auth…

    D-Link DAP-2622 Network devices
  • High 8.8
    CVE-2022-43654

    NETGEAR CAX30S SSO Command Injection Remote Code Execution Vulnerability

    NETGEAR CAX30S SSO Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR CAX30S routers. Authentication is not required to exploit this vulner…

    NETGEAR CAX30S Network devices
  • High 8.8
    CVE-2021-34982

    NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability

    NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple NETGEAR routers. Authentication is not require…

    NETGEAR Multiple Routers Network devices
  • High 8.8
    CVE-2021-34947

    NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability

    NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 routers. Authentication is not required to exploit this vu…

    NETGEAR R7800 Network devices
  • High 7.5
    CVE-2024-29207

    An Improper Certificate Validation could allow a malicious actor with access to an adjacent network to take control of …

    Ubiquiti UniFi Connect EV Station Pro UniFi Connect Display Cast UniFi Connect Display Network devices
  • High 8.0
    CVE-2023-51628

    D-Link DCS-8300LHV2 ONVIF SetHostName Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DCS-8300LHV2 ONVIF SetHostName Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Although authent…

    D-Link DCS-8300LHV2 Network devices
  • High 8.0
    CVE-2023-51627

    D-Link DCS-8300LHV2 ONVIF Duration Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DCS-8300LHV2 ONVIF Duration Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Although authentica…

    D-Link DCS-8300LHV2 Network devices
  • High 8.8
    CVE-2023-51626

    D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Username Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Username Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP c…

    D-Link DCS-8300LHV2 Network devices
  • High 8.0
    CVE-2023-51625

    D-Link DCS-8300LHV2 ONVIF SetSystemDateAndTime Command Injection Remote Code Execution Vulnerability

    D-Link DCS-8300LHV2 ONVIF SetSystemDateAndTime Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Although authenti…

    D-Link DCS-8300LHV2 Network devices
  • High 8.8
    CVE-2023-51624

    D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Nonce Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Nonce Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP came…

    D-Link DCS-8300LHV2 Network devices
  • High 8.0
    CVE-2023-50231 EPSS 53%

    NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability

    NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Minimal …

    NETGEAR ProSAFE Network Management System Network devices
  • High 8.8
    CVE-2023-50217

    D-Link G416 awsfile rm Command Injection Remote Code Execution Vulnerability

    D-Link G416 awsfile rm Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulne…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50216

    D-Link G416 awsfile tar File Handling Command Injection Remote Code Execution Vulnerability

    D-Link G416 awsfile tar File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exp…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50215

    D-Link G416 nodered gz File Handling Command Injection Remote Code Execution Vulnerability

    D-Link G416 nodered gz File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to expl…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50214

    D-Link G416 nodered tar File Handling Command Injection Remote Code Execution Vulnerability

    D-Link G416 nodered tar File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exp…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50213

    D-Link G416 nodered File Handling Command Injection Remote Code Execution Vulnerability

    D-Link G416 nodered File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50211

    D-Link G416 httpd API-AUTH Timestamp Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link G416 httpd API-AUTH Timestamp Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50210

    D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is no…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50209

    D-Link G416 cfgsave Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link G416 cfgsave Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to ex…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50208

    D-Link G416 ovpncfg Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link G416 ovpncfg Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit thi…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50207

    D-Link G416 flupl filename Command Injection Remote Code Execution Vulnerability

    D-Link G416 flupl filename Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this v…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50206

    D-Link G416 flupl query_type edit Command Injection Remote Code Execution Vulnerability

    D-Link G416 flupl query_type edit Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50205

    D-Link G416 awsfile chmod Command Injection Remote Code Execution Vulnerability

    D-Link G416 awsfile chmod Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vu…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50204

    D-Link G416 flupl pythonapp Command Injection Remote Code Execution Vulnerability

    D-Link G416 flupl pythonapp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to expl…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50203

    D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability

    D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vu…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50202

    D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability

    D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to …

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50201

    D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability

    D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vu…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50200

    D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability

    D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this …

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50198

    D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability

    D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50199

    D-Link G416 httpd Missing Authentication for Critical Function Remote Code Execution Vulnerability

    D-Link G416 httpd Missing Authentication for Critical Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link G416 routers. Authentication is not required …

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-44450 EPSS 54%

    NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability

    NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management Syste…

    NETGEAR ProSAFE Network Management System Network devices
  • High 8.8
    CVE-2023-44449 EPSS 53%

    NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability

    NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Authenticatio…

    NETGEAR ProSAFE Network Management System Network devices
  • High 8.8
    CVE-2023-44445

    NETGEAR CAX30 SSO Stack-based Buffer Overflow Remote Code Execution Vulnerability

    NETGEAR CAX30 SSO Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR CAX30 routers. Authentication is not required to exploit thi…

    NETGEAR CAX30 Network devices
  • High 8.0
    CVE-2023-44427

    D-Link DIR-X3260 SetSysEmailSettings SMTPServerAddress Command Injection Remote Code Execution Vulnerability

    D-Link DIR-X3260 SetSysEmailSettings SMTPServerAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authen…

    D-Link DIR-X3260 Network devices
  • High 8.0
    CVE-2023-44426

    D-Link DIR-X3260 SetSysEmailSettings AccountPassword Command Injection Remote Code Execution Vulnerability

    D-Link DIR-X3260 SetSysEmailSettings AccountPassword Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authenti…

    D-Link DIR-X3260 Network devices