CVE-2025-44650

all versions

In Netgear R7000 V1.3.1.64_10.1.36 and EAX80 V1.0.1.70_1.0.2, the USERLIMIT_GLOBAL option is set to 0 in the bftpd.conf configurat

7.5HIGH

CVE-2021-45671

< 1.0.1.62

Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX80 before 1.0.1.62, EX7500 before 1.0.0

6.5MEDIUM

CVE-2021-45670

< 1.0.1.64

Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.

6.5MEDIUM

CVE-2021-45668

< 1.0.1.64

Certain NETGEAR devices are affected by stored XSS. This affects EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX3700 before 1.0.0

6.5MEDIUM

CVE-2021-45667

< 1.0.1.64

Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.

6.5MEDIUM

CVE-2021-45666

< 1.0.1.64

Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX80 before 1.0.1.64, EX3700 before 1.0.0

6.5MEDIUM

CVE-2021-45665

< 1.0.1.62

Certain NETGEAR devices are affected by stored XSS. This affects EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX3700 before 1.0.0

6.5MEDIUM

CVE-2021-45647

< 1.0.1.62

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EAX80 before 1.0.1.62, EX7000 before 1.0

6.5MEDIUM

CVE-2021-45639

< 1.0.1.62

Certain NETGEAR devices are affected by reflected XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.32, EAX80 before 1.0

5.2MEDIUM

CVE-2021-45622

< 1.0.1.68

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR7

9.6CRITICAL

CVE-2021-45621

< 1.0.1.68

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR7

9.6CRITICAL

CVE-2021-45620

< 1.0.1.68

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR7

9.6CRITICAL

CVE-2021-45617

< 1.0.1.64

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, EAX2

9.8CRITICAL

CVE-2021-45612

< 1.0.1.68

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR7

9.6CRITICAL

CVE-2021-45610

< 1.0.1.64

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.66, D640

9.6CRITICAL

CVE-2021-29068

< 1.0.1.62

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6700v3 before 1.0.4.98, R6400v2

9.9CRITICAL

CVE-2020-35800

< 1.0.1.62

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400

9.4CRITICAL

CVE-2020-35796

< 1.0.1.62

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D622

8.8HIGH

CVE-2020-35795

< 1.0.1.62

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects AC2100 before 1.2.0.72, AC2

9.8CRITICAL