CVE-2022-40620

< 1.1.0.112

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates

7.7HIGH

CVE-2022-40619

< 1.1.0.112

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interfa

7.7HIGH

CVE-2022-27641

< 1.1.0.112

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.

8.8HIGH

CVE-2021-34865

< 1.1.0.110

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR router

8.8HIGH

CVE-2021-45672

< 1.1.0.110

Certain NETGEAR devices are affected by Stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0

4.2MEDIUM

CVE-2021-45657

< 1.1.0.110

Certain NETGEAR devices are affected by server-side injection. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, R6020 b

7.1HIGH

CVE-2021-45656

< 1.1.0.110

Certain NETGEAR devices are affected by server-side injection. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, R6020 b

7.1HIGH

CVE-2021-45647

< 1.1.0.110

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EAX80 before 1.0.1.62, EX7000 before 1.0

6.5MEDIUM

CVE-2021-45644

< 1.1.0.110

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.88, AC2400

6.8MEDIUM

CVE-2021-45641

< 1.1.0.100

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 be

4.6MEDIUM

CVE-2021-45640

< 1.1.0.100

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 be

3.9LOW

CVE-2021-45551

< 1.1.0.110

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6200 before 1.1.00.40, D7000 bef

7.6HIGH

CVE-2021-45534

< 1.1.0.110

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects AC2100 before 1.2.0.88, AC2400 be

7.8HIGH

CVE-2021-45511

< 1.1.0.110

Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC

6.8MEDIUM

CVE-2021-45501

< 1.1.0.110

Certain NETGEAR devices are affected by authentication bypass. This affects AC2400 before 1.1.0.84, AC2600 before 1.1.0.84, D7000

9.4CRITICAL

CVE-2021-38534

< 1.1.0.80

Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6100 before 1.0.0.

4.1MEDIUM

CVE-2021-38516

< 1.1.0.80

Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 be

10.0CRITICAL

CVE-2021-29068

< 1.0.0.70

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6700v3 before 1.0.4.98, R6400v2

9.9CRITICAL

CVE-2020-27867

< 1.1.0.104

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080,

6.8MEDIUM

CVE-2020-27866

< 1.1.0.104

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R

8.8HIGH

CVE-2020-27873

< 1.1.0.104

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450

6.5MEDIUM

CVE-2020-27872

< 1.1.0.104

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_

8.8HIGH

CVE-2020-35803

< 1.1.0.100

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D6200 before 1.1.00.40, D7000 before 1.0

4.4MEDIUM

CVE-2020-35800

< 1.1.0.100

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400

9.4CRITICAL

CVE-2020-35799

< 1.1.0.80

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.

8.8HIGH

CVE-2020-35795

< 1.1.0.100

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects AC2100 before 1.2.0.72, AC2

9.8CRITICAL

CVE-2020-17409

< 1.1.0.100

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120,

6.5MEDIUM

CVE-2020-26929

< 1.1.0.100

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.100 and R6230

7.3HIGH

CVE-2020-26908

< 1.1.0.100

Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000

9.4CRITICAL

CVE-2019-20657

< 1.1.0.86

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6200 before 1.1.00.36, D7000 bef

8.0HIGH

CVE-2019-20656

< 1.1.0.86

Certain NETGEAR devices are affected by a hardcoded password. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 b

8.8HIGH

CVE-2020-11788

< 1.1.0.80

Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.34, D7000 before 1.0.1.68, PR2000

8.8HIGH