Skip to content
OpenAdvisories

Vendor

NETGEAR

219 known vulnerabilities.

Products

RAX30 26 ProSAFE Network Management System 23 SRX5308 17 RAX43 13 RAX50 13 RAXE500 13 R6700 12 RAX42 11 RAX45 11 XR1000 11 R7000 10 RAX41 10 R7800 9 RAX54Sv2 9 Multiple Routers 9 R6700v3 9 RAX20 9 RAXE450 9 RBSE960 8 RAX41v2 8 RAX42v2 8 RAX43v2 8 RAX49S 8 RAX50v2 8 EX6200 8 RAX35v2 8 RBRE960 8 MR70 7 MS70 7 XR1000v2 7 JWNR2000v2 7 RBR860 7 RBE970 7 RBS860 7 RBSE950 6 RBR750 6 RBS750 6 RBR850 6 RBS850 6 RAX50S 6
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.4
    CVE-2013-10060 Public exploit

    Netgear Routers pppoe.cgi RCE

    An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN2200B model) firmware versions 1.0.0.36 and prior via the pppoe.cgi endpoint. A remote attacker with valid credentials can execute arbitrary commands via crafted i…

    NETGEAR DGN2200B Network devices
  • Critical 9.8
    CVE-2025-4978 EPSS 22%

    Netgear DGND3700 Basic Authentication BRS_top.html improper authentication

    A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of the file /BRS_top.html of the component Basic Authentication. The manipulation leads to improper authentication. It is p…

    NETGEAR DGND3700 Network devices
  • Critical 9.8
    CVE-2024-12847 Public exploit EPSS 30%

    NETGEAR DGN setup.cgi OS Command Injection

    NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerabil…

    NETGEAR DGN1000 Network devices
  • Critical 9.8
    CVE-2023-38096 Public exploit EPSS 82%

    NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability

    NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of NETGEAR ProSAFE Network Management System. Authentication is n…

    NETGEAR ProSAFE Network Management System Network devices
  • Critical 9.8
    CVE-2023-49693

    NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol

    NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.

    NETGEAR NETGEAR ProSAFE Network Management System Network devices
  • Critical 9.1
    CVE-2022-37337

    A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A s…

    NETGEAR Orbi Router RBR750 Network devices
  • Critical 9.8
    CVE-2021-27274

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Netwo…

    NETGEAR ProSAFE Network Management System Network devices
  • Critical 9.4
    CVE-2019-17137 Public exploit

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC12…

    NETGEAR AC1200 Network devices