Skip to content
OpenAdvisories

Vendor

NETGEAR

219 known vulnerabilities.

4 results · Clear filters · Feed

  • Critical 9.4
    CVE-2013-10060 Public exploit

    Netgear Routers pppoe.cgi RCE

    An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN2200B model) firmware versions 1.0.0.36 and prior via the pppoe.cgi endpoint. A remote attacker with valid credentials can execute arbitrary commands via crafted i…

  • Critical 9.8
    CVE-2024-12847 Public exploit EPSS 30%

    NETGEAR DGN setup.cgi OS Command Injection

    NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerabil…

  • Critical 9.8
    CVE-2023-38096 Public exploit EPSS 82%

    NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability

    NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of NETGEAR ProSAFE Network Management System. Authentication is n…

  • Critical 9.4
    CVE-2019-17137 Public exploit

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC12…