threat
engine
.sh
Back
·
··:··
Home
/
Product
/
netgear r6220 firmware
Product
netgear r6220 firmware
87 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
Sort
Newest first
Oldest first
Highest CVSS
Lowest CVSS
Min CVSS
Any
4.0+
7.0+ (High)
9.0+ (Critical)
Published since
Reset
CVE-2022-27641
< 1.1.0.112
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.
8.8
HIGH
CVE-2022-42221
all versions
Netgear R6220 v1.1.0.114_1.0.1 suffers from Incorrect Access Control, resulting in a command injection vulnerability.
8.8
HIGH
CVE-2021-44261
<= 1.1.0.34_1.0.1
A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to
5.3
MEDIUM
CVE-2021-34865
< 1.1.0.110
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR router
8.8
HIGH
CVE-2021-45672
< 1.1.0.110
Certain NETGEAR devices are affected by Stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0
4.2
MEDIUM
CVE-2021-45657
< 1.1.0.100
Certain NETGEAR devices are affected by server-side injection. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, R6020 b
7.1
HIGH
CVE-2021-45656
< 1.1.0.100
Certain NETGEAR devices are affected by server-side injection. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, R6020 b
7.1
HIGH
CVE-2021-45647
all versions
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EAX80 before 1.0.1.62, EX7000 before 1.0
6.5
MEDIUM
CVE-2021-45644
< 1.1.0.110
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.88, AC2400
6.8
MEDIUM
CVE-2021-45641
< 1.1.0.100
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 be
4.6
MEDIUM
CVE-2021-45640
< 1.1.0.100
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 be
3.9
LOW
CVE-2021-45551
< 1.1.0.110
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6200 before 1.1.00.40, D7000 bef
7.6
HIGH
CVE-2021-45534
< 1.1.0.110
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects AC2100 before 1.2.0.88, AC2400 be
7.8
HIGH
CVE-2021-45511
< 1.1.0.110
Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC
6.8
MEDIUM
CVE-2021-45501
< 1.1.0.110
Certain NETGEAR devices are affected by authentication bypass. This affects AC2400 before 1.1.0.84, AC2600 before 1.1.0.84, D7000
9.4
CRITICAL
CVE-2021-38534
< 1.1.0.80
Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6100 before 1.0.0.
4.1
MEDIUM
CVE-2021-38525
< 1.1.0.80
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76
6.8
MEDIUM
CVE-2021-38516
< 1.1.0.80
Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 be
10.0
CRITICAL
CVE-2021-38514
< 1.1.0.86
Certain NETGEAR devices are affected by authentication bypass. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6100 be
2.4
LOW
CVE-2021-29068
< 1.0.0.70
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6700v3 before 1.0.4.98, R6400v2
9.9
CRITICAL
CVE-2020-27867
< 1.1.0.104
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080,
6.8
MEDIUM
CVE-2020-27866
< 1.1.0.104
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R
8.8
HIGH
CVE-2020-27873
< 1.1.0.104
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450
6.5
MEDIUM
CVE-2020-27872
< 1.1.0.104
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_
8.8
HIGH
CVE-2020-35842
< 1.1.0.100
Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1
6.9
MEDIUM
CVE-2020-35841
< 1.1.0.100
Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1
6.9
MEDIUM
CVE-2020-35840
< 1.1.0.100
Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1
6.9
MEDIUM
CVE-2020-35803
< 1.1.0.100
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D6200 before 1.1.00.40, D7000 before 1.0
4.4
MEDIUM
CVE-2020-35800
< 1.1.0.100
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400
9.4
CRITICAL
CVE-2020-35799
< 1.1.0.80
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.
8.8
HIGH
CVE-2020-35795
< 1.1.0.100
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects AC2100 before 1.2.0.72, AC2
9.8
CRITICAL
CVE-2020-35787
< 1.1.0.80
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 befo
8.0
HIGH
CVE-2020-17409
< 1.1.0.100
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120,
6.5
MEDIUM
CVE-2020-26929
< 1.1.0.100
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.100 and R6230
7.3
HIGH
CVE-2020-26927
< 1.1.0.100
Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 b
9.4
CRITICAL
CVE-2020-26916
< 1.1.0.100
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.38, D7000 b
5.4
MEDIUM
CVE-2020-26914
< 1.1.0.100
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6200 before 1.1.00.38, D7000 bef
6.7
MEDIUM
CVE-2020-26912
< 1.1.0.100
Certain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150 before 1.0.1.24,
7.5
HIGH
CVE-2020-26911
< 1.1.0.100
Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6200 before 1.1.00.38, D7000 b
8.3
HIGH
CVE-2020-26908
< 1.1.0.100
Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000
9.4
CRITICAL
CVE-2020-13245
>= v1.0.9.6_1.2.19 and <= v1.0.11.100_10.2.100
Certain NETGEAR devices are affected by Missing SSL Certificate Validation. This affects R7000 1.0.9.6_1.2.19 through 1.0.11.100_1
5.9
MEDIUM
CVE-2016-11059
< 2017-01-06
Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 be
7.5
HIGH
CVE-2016-11057
< 2017-01-06
Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before
7.5
HIGH
CVE-2018-21209
< 1.1.0.60
Certain NETGEAR devices are affected by reflected XSS. This affects JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.10, JWNR2010v5
4.8
MEDIUM
CVE-2018-21169
< 1.1.0.60
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7000 before 2018-03-01, D7800
8.8
HIGH
CVE-2018-21168
< 1.1.0.60
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D7000 before 1.0.1.52, D7800 before 1.0.
7.5
HIGH
CVE-2018-21231
< 1.1.0.50
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 bef
5.4
MEDIUM
CVE-2018-21230
< 1.1.0.50
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 bef
5.4
MEDIUM
CVE-2017-18703
< 1.1.0.60
Certain NETGEAR devices are affected by CSRF. This affects D1500 before 1.0.0.25, D500 before 1.0.0.25, D6100 before 1.0.0.55, D70
8.8
HIGH
CVE-2017-18702
< 1.1.0.60
NETGEAR R6220 devices before 1.1.0.60 are affected by incorrect configuration of security settings.
5.4
MEDIUM
CVE-2018-21164
< 1.1.0.64
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.64 and WNDR370
7.2
HIGH
CVE-2018-21139
< 1.1.0.68
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D1500 before 1.0.0.27, D500 before 1.0.0
7.5
HIGH
CVE-2017-18739
< 1.1.0.50
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6220 before V1.1.0.50, R78
8.8
HIGH
CVE-2017-18737
< 1.1.0.50
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before 1.1.0.44,
8.8
HIGH
CVE-2017-18736
< 1.1.0.50
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JR6150 before 1.0.1.10, R60
8.8
HIGH
CVE-2017-18734
< 1.1.0.50
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before 1.1.0.44,
8.8
HIGH
CVE-2017-18749
< 1.1.0.50
Certain NETGEAR devices are affected by CSRF. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.
8.8
HIGH
CVE-2017-18755
< 1.1.0.50
Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.4.8, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22,
8.8
HIGH
CVE-2017-18764
< 1.1.0.50
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6100 before 1.0.0.55, D700
8.8
HIGH
CVE-2017-18763
< 1.1.0.50
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JNR1010v2 before 1.1.0.42, JR61
6.5
MEDIUM
CVE-2017-18784
< 1.1.0.60
Certain NETGEAR devices are affected by XSS. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44
6.1
MEDIUM
CVE-2017-18783
< 1.1.0.60
Certain NETGEAR devices are affected by XSS. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44
6.1
MEDIUM
CVE-2017-18782
< 1.1.0.60
Certain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JR6150 before 1.0.1.12,
8.8
HIGH
CVE-2017-18781
< 1.1.0.60
Certain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.4
8.8
HIGH
CVE-2017-18780
< 1.1.0.60
Certain NETGEAR devices are affected by denial of service. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 b
5.5
MEDIUM
CVE-2017-18779
< 1.1.0.60
Certain NETGEAR devices are affected by a buffer overflow. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 b
7.8
HIGH
CVE-2017-18778
< 1.1.0.60
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6220 before 1.0.0.28, D6400 be
5.5
MEDIUM
CVE-2017-18776
< 1.1.0.50
Certain NETGEAR devices are affected by authentication bypass. This affects D6100 before V1.0.0.55, D7000 before V1.0.1.50, D7800
8.4
HIGH
CVE-2017-18769
< 1.1.0.50
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.40, D6400 b
4.6
MEDIUM
CVE-2017-18801
< 1.1.0.50
Certain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.50, R6700v2 before 1.1.0.38, R6800 befo
6.7
MEDIUM
CVE-2017-18791
< 1.1.0.50
Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 before 1.1.0
8.8
HIGH
CVE-2017-18841
< 1.1.0.46
Certain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.46, R6700v2 before 1.1.0.38, R6800 befo
6.7
MEDIUM
CVE-2019-20730
< 1.1.0.66
Certain NETGEAR devices are affected by SQL injection. This affects D3600 before 1.0.0.68, D6000 before 1.0.0.68, D6200 before 1.1
9.8
CRITICAL
CVE-2019-20690
< 1.1.0.68
Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.30, D7000 before 1.0.1.66, R6020 b
8.8
HIGH
CVE-2019-20686
< 1.1.0.86
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.36, D70
8.8
HIGH
CVE-2019-20685
< 1.1.0.80
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.
8.8
HIGH
CVE-2019-20684
< 1.1.0.80
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.
8.8
HIGH
CVE-2019-20683
< 1.1.0.80
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.
8.8
HIGH
CVE-2019-20682
< 1.1.0.80
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.
8.8
HIGH
CVE-2019-20681
< 1.1.0.80
Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.34, D7000 before 1.0.1.68, JR6150
8.8
HIGH
CVE-2019-20680
< 1.1.0.80
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7000v2 before 1.0.0.53, R6220 be
8.0
HIGH
CVE-2019-20657
< 1.1.0.86
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6200 before 1.1.00.36, D7000 bef
8.0
HIGH
CVE-2019-20656
< 1.1.0.86
Certain NETGEAR devices are affected by a hardcoded password. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 b
8.8
HIGH
CVE-2020-11788
< 1.1.0.80
Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.34, D7000 before 1.0.1.68, PR2000
8.8
HIGH
CVE-2019-20640
< 1.1.0.80
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.
8.8
HIGH
CVE-2020-11770
< 1.1.0.80
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6220 before 1.0.0.52, D6400 befo
8.8
HIGH
CVE-2016-10174
all versions
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_ch
9.8
CRITICAL
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin