CVE-2025-50526

all versions

Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via the switch_status function.

9.8CRITICAL

CVE-2025-45493

all versions

Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in the action_bandwidth function.

6.5MEDIUM

CVE-2025-45492

all versions

Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the Iface parameter in the action_wireless function.

9.8CRITICAL

CVE-2021-34947

< 1.0.1.238

NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attacker

8.8HIGH

CVE-2022-27641

< 1.0.1.240

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.

8.8HIGH

CVE-2021-45619

< 1.0.1.232

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects EX6200v2 before 1.0.1.86, E

9.6CRITICAL

CVE-2021-45618

< 1.0.1.232

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7800 before 1.0.1.64, EX62

9.6CRITICAL

CVE-2021-38527

< 1.0.1.232

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.14, EX61

8.1HIGH

CVE-2021-38525

< 1.0.1.186

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76

6.8MEDIUM

CVE-2021-38514

< 1.0.1.180

Certain NETGEAR devices are affected by authentication bypass. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6100 be

2.4LOW

CVE-2021-27253

< 1.0.1.232

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R780

8.8HIGH

CVE-2021-27252

< 1.0.1.232

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware

8.8HIGH

CVE-2021-27251

< 1.0.1.232

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R780

8.8HIGH

CVE-2021-27257

< 1.0.1.232

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installatio

6.5MEDIUM

CVE-2021-27256

< 1.0.1.232

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware

8.8HIGH

CVE-2021-27255

< 1.0.1.232

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1

8.8HIGH

CVE-2021-27254

< 1.0.1.232

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. Authenti

8.8HIGH

CVE-2020-27861

< 1.0.1.224

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16

8.8HIGH

CVE-2020-35800

< 1.0.1.224

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400

9.4CRITICAL

CVE-2020-35799

< 1.0.1.186

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.

8.8HIGH

CVE-2020-35787

< 1.0.1.186

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 befo

8.0HIGH

CVE-2018-21167

< 1.0.0.114

Certain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.57, DM200 before 1.0.0.50, EX2700 before 1.0.1

5.5MEDIUM

CVE-2018-21153

< 1.0.0.114

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D7800 before 1.0.1.34, DM20

9.8CRITICAL

CVE-2017-18785

< 1.0.0.102

Certain NETGEAR devices are affected by XSS. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, D62

4.8MEDIUM

CVE-2017-18788

< 1.0.0.102

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.67, D6000 befo

6.7MEDIUM

CVE-2019-20751

< 1.0.1.180

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.60

6.8MEDIUM

CVE-2019-20730

< 1.0.0.118

Certain NETGEAR devices are affected by SQL injection. This affects D3600 before 1.0.0.68, D6000 before 1.0.0.68, D6200 before 1.1

9.8CRITICAL

CVE-2019-20723

< 1.0.1.180

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.75

6.8MEDIUM

CVE-2019-20717

< 1.0.1.180

Certain NETGEAR devices are affected by denial of service. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before

6.5MEDIUM

CVE-2019-20689

< 1.0.1.180

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6000 before 1.0.0.75, D6100 befo

6.8MEDIUM

CVE-2019-20688

< 1.0.1.180

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.75, D6000 befo

6.8MEDIUM