Skip to content
OpenAdvisories

Vendor

NETGEAR

219 known vulnerabilities.

Products

RAX30 26 ProSAFE Network Management System 23 SRX5308 17 RAX43 13 RAX50 13 RAXE500 13 R6700 12 RAX42 11 RAX45 11 XR1000 11 R7000 10 RAX41 10 R7800 9 RAX54Sv2 9 Multiple Routers 9 R6700v3 9 RAX20 9 RAXE450 9 RBSE960 8 RAX41v2 8 RAX42v2 8 RAX43v2 8 RAX49S 8 RAX50v2 8 EX6200 8 RAX35v2 8 RBRE960 8 MR70 7 MS70 7 XR1000v2 7 JWNR2000v2 7 RBR860 7 RBE970 7 RBS860 7 RBSE950 6 RBR750 6 RBS750 6 RBR850 6 RBS850 6 RAX50S 6
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 6.9
    CVE-2013-10063 Public exploit

    Netgear SPH200D <= 1.0.4.80 Path Traversal via HTTP GET

    A path traversal vulnerability exists in the Netgear SPH200D Skype phone firmware versions <= 1.0.4.80 in its embedded web server. Authenticated attackers can exploit crafted GET requests to access arbitrary files outside the web root by injecting traversal s…

    NETGEAR SPH200D Network devices
  • Critical 9.4
    CVE-2013-10060 Public exploit

    Netgear Routers pppoe.cgi RCE

    An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN2200B model) firmware versions 1.0.0.36 and prior via the pppoe.cgi endpoint. A remote attacker with valid credentials can execute arbitrary commands via crafted i…

    NETGEAR DGN2200B Network devices
  • High 8.6
    CVE-2013-10061 Public exploit

    Netgear Routers setup.cgi RCE

    An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN1000B model firmware versions 1.1.00.24 and 1.1.00.45) via the TimeToLive parameter in the setup.cgi endpoint. The vulnerability arises from improper input neutral…

    NETGEAR DGN1000B Network devices
  • Critical 9.8
    CVE-2024-12847 Public exploit EPSS 30%

    NETGEAR DGN setup.cgi OS Command Injection

    NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerabil…

    NETGEAR DGN1000 Network devices
  • High 8.8
    CVE-2024-5246 Public exploit EPSS 31%

    NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability

    NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to ex…

    NETGEAR ProSAFE Network Management System Network devices
  • High 8.8
    CVE-2023-38098 Public exploit EPSS 13%

    NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability

    NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. …

    NETGEAR ProSAFE Network Management System Network devices
  • Critical 9.8
    CVE-2023-38096 Public exploit EPSS 82%

    NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability

    NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of NETGEAR ProSAFE Network Management System. Authentication is n…

    NETGEAR ProSAFE Network Management System Network devices
  • High 8.0
    CVE-2022-27646 Public exploit

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

    NETGEAR R6700v3 Network devices
  • High 8.8
    CVE-2020-15416 Public exploit

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R670…

    NETGEAR R6700 Network devices
  • High 8.8
    CVE-2020-10924 Public exploit EPSS 87%

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R670…

    NETGEAR R6700 Network devices
  • Medium 6.5
    CVE-2020-10923 Public exploit EPSS 85%

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R670…

    NETGEAR R6700 Network devices
  • Critical 9.4
    CVE-2019-17137 Public exploit

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC12…

    NETGEAR AC1200 Network devices