Skip to content
OpenAdvisories

Vendor

NETGEAR

219 known vulnerabilities.

Products

RAX30 26 ProSAFE Network Management System 23 SRX5308 17 RAX43 13 RAX50 13 RAXE500 13 R6700 12 RAX42 11 RAX45 11 XR1000 11 R7000 10 RAX41 10 R7800 9 RAX54Sv2 9 Multiple Routers 9 R6700v3 9 RAX20 9 RAXE450 9 RBSE960 8 RAX41v2 8 RAX42v2 8 RAX43v2 8 RAX49S 8 RAX50v2 8 EX6200 8 RAX35v2 8 RBRE960 8 MR70 7 MS70 7 XR1000v2 7 JWNR2000v2 7 RBR860 7 RBE970 7 RBS860 7 RBSE950 6 RBR750 6 RBS750 6 RBR850 6 RBS850 6 RAX50S 6
All Critical High Medium Low Exploited only Public exploit

101 results · Clear filters · Feed

  • High 8.8
    CVE-2023-44449 EPSS 53%

    NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability

    NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Authenticatio…

    NETGEAR ProSAFE Network Management System Network devices
  • High 8.8
    CVE-2023-44445

    NETGEAR CAX30 SSO Stack-based Buffer Overflow Remote Code Execution Vulnerability

    NETGEAR CAX30 SSO Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR CAX30 routers. Authentication is not required to exploit thi…

    NETGEAR CAX30 Network devices
  • High 8.8
    CVE-2023-41183 EPSS 14%

    NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability

    NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR Orbi 760 routers. Authentication is not required to exploit this vulnerability. T…

    NETGEAR Orbi 760 Network devices
  • High 7.2
    CVE-2023-41182 EPSS 62%

    NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability

    NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although a…

    NETGEAR ProSAFE Network Management System Network devices
  • High 8.8
    CVE-2023-40480

    NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability

    NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this …

    NETGEAR RAX30 Network devices
  • High 8.8
    CVE-2023-40479

    NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability

    NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnera…

    NETGEAR RAX30 Network devices
  • High 8.0
    CVE-2023-40478

    NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability

    NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is requ…

    NETGEAR RAX30 Network devices
  • High 8.8
    CVE-2023-38102

    NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability

    NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Although a…

    NETGEAR ProSAFE Network Management System Network devices
  • High 7.2
    CVE-2023-38101

    NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability

    NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Managem…

    NETGEAR ProSAFE Network Management System Network devices
  • High 8.8
    CVE-2023-38100

    NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability

    NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Although auth…

    NETGEAR ProSAFE Network Management System Network devices
  • High 8.8
    CVE-2023-38099 EPSS 57%

    NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability

    NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management Syste…

    NETGEAR ProSAFE Network Management System Network devices
  • High 8.8
    CVE-2023-38098 Public exploit EPSS 13%

    NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability

    NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. …

    NETGEAR ProSAFE Network Management System Network devices
  • High 7.2
    CVE-2023-38097

    NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution Vulnerability

    NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management Sy…

    NETGEAR ProSAFE Network Management System Network devices
  • High 8.8
    CVE-2023-38095 EPSS 66%

    NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability

    NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management …

    NETGEAR ProSAFE Network Management System Network devices
  • High 8.8
    CVE-2023-35722

    NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability

    NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnera…

    NETGEAR RAX30 Network devices
  • High 8.1
    CVE-2023-35721

    NETGEAR Multiple Routers curl_post Improper Certificate Validation Remote Code Execution Vulnerability

    NETGEAR Multiple Routers curl_post Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of multiple NETGEAR ro…

    NETGEAR Multiple Routers Network devices
  • High 8.8
    CVE-2023-34285

    NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability

    NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not require…

    NETGEAR RAX30 Network devices
  • High 8.8
    CVE-2023-27369

    NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability

    NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30. Authentication is not required to exploit th…

    NETGEAR RAX30 Network devices
  • High 8.8
    CVE-2023-27368

    NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability

    NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to ex…

    NETGEAR RAX30 Network devices
  • High 8.0
    CVE-2023-27367

    NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability

    NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit t…

    NETGEAR RAX30 Network devices
  • High 7.5
    CVE-2023-27360

    NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability

    NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30. Authentication is not required to exploit this vulnerabilit…

    NETGEAR RAX30 Network devices
  • High 8.8
    CVE-2023-27358

    NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability

    NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vul…

    NETGEAR RAX30 Network devices
  • High 7.2
    CVE-2023-48725 EPSS 19%

    A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX3…

    NETGEAR RAX30 Network devices
  • High 7.8
    CVE-2023-49694

    NETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL Server

    A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYS…

    NETGEAR NETGEAR ProSAFE Network Management System Network devices
  • High 8.8
    CVE-2022-27643 EPSS 25%

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

    NETGEAR R6700v3 Network devices
  • High 8.0
    CVE-2022-27646 Public exploit

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

    NETGEAR R6700v3 Network devices
  • High 8.8
    CVE-2022-27645

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R670…

    NETGEAR R6700v3 Network devices
  • High 8.8
    CVE-2022-27641

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

    NETGEAR R6700v3 Network devices
  • High 8.0
    CVE-2022-27647

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

    NETGEAR R6700v3 Network devices
  • High 7.2
    CVE-2022-38452

    A command execution vulnerability exists in the hidden telnet service functionality of Netgear Orbi Router RBR750 4.6.8…

    NETGEAR Orbi Router RBR750 Network devices
  • High 7.2
    CVE-2022-36429

    A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite RBS…

    NETGEAR Orbi Satellite RBS750 Network devices
  • High 7.5
    CVE-2023-24498

    Netgear ProSAFE 24 Port 10/100 FS726TP - CWE-522: Insufficiently Protected Credentials.

    An uspecified endpoint in the web server of the switch does not properly authenticate the user identity, and may allow downloading a config page with the password to the switch in clear text.

    NETGEAR ProSAFE 24 Port 10/100 FS726TP Network devices
  • High 8.8
    CVE-2021-34865

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NET…

    NETGEAR Multiple Routers Network devices
  • High 8.8
    CVE-2021-34980

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R62…

    NETGEAR R6260 Network devices
  • High 8.8
    CVE-2021-34979

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R62…

    NETGEAR R6260 Network devices
  • High 8.8
    CVE-2021-34978

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R62…

    NETGEAR R6260 Network devices
  • High 8.8
    CVE-2021-34977

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R700…

    NETGEAR R7000 Network devices
  • High 8.8
    CVE-2021-34991

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R64…

    NETGEAR R6400v2 Network devices
  • High 8.8
    CVE-2021-27253

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nig…

    NETGEAR R7800 Network devices
  • High 8.8
    CVE-2021-27252

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R78…

    NETGEAR R7800 Network devices