RAX40
by Netgear
CVEs (13)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-20646 | Cri | 0.64 | 9.8 | 0.01 | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials. | ||
| CVE-2020-26898 | Cri | 0.62 | 9.6 | 0.01 | Oct 9, 2020 | NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings. | ||
| CVE-2019-20641 | Hig | 0.57 | 8.8 | 0.01 | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level. | ||
| CVE-2019-20642 | Hig | 0.52 | 8.0 | 0.01 | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass. | ||
| CVE-2021-45493 | Hig | 0.49 | 7.6 | 0.01 | Dec 26, 2021 | Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RAX35 before 1.0.4.102, RAX38 before 1.0.4.102, and RAX40 before 1.0.4.102. | ||
| CVE-2019-20643 | Hig | 0.49 | 7.5 | 0.01 | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information. | ||
| CVE-2022-48196 | Hig | 0.48 | 7.4 | 0.01 | Dec 30, 2022 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX40 before 1.0.2.60, RAX35 before 1.0.2.60, R6400v2 before 1.0.4.122, R6700v3 before 1.0.4.122, R6900P before 1.3.3.152, R7000P before 1.3.3.152, R7000 before 1.0.11.136,… | ||
| CVE-2021-41449 | Hig | 0.46 | 7.1 | 0.02 | Dec 9, 2021 | A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files of the web application, via sending a specially crafted… | ||
| CVE-2019-20647 | Med | 0.37 | 5.7 | 0.00 | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.64 are affected by denial of service. | ||
| CVE-2021-38533 | Med | 0.35 | 5.4 | 0.00 | Aug 11, 2021 | NETGEAR RAX40 devices before 1.0.3.64 are affected by stored XSS. | ||
| CVE-2019-20645 | Med | 0.31 | 4.8 | 0.00 | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS. | ||
| CVE-2019-20644 | Med | 0.31 | 4.8 | 0.00 | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS. | ||
| CVE-2021-38526 | Med | 0.28 | 4.3 | 0.01 | Aug 11, 2021 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX35 before 1.0.3.94, RAX38 before 1.0.3.94, and RAX40 before 1.0.3.94. |
- risk 0.64cvss 9.8epss 0.01
NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials.
- risk 0.62cvss 9.6epss 0.01
NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings.
- risk 0.57cvss 8.8epss 0.01
NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level.
- risk 0.52cvss 8.0epss 0.01
NETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass.
- risk 0.49cvss 7.6epss 0.01
Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RAX35 before 1.0.4.102, RAX38 before 1.0.4.102, and RAX40 before 1.0.4.102.
- risk 0.49cvss 7.5epss 0.01
NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information.
- risk 0.48cvss 7.4epss 0.01
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX40 before 1.0.2.60, RAX35 before 1.0.2.60, R6400v2 before 1.0.4.122, R6700v3 before 1.0.4.122, R6900P before 1.3.3.152, R7000P before 1.3.3.152, R7000 before 1.0.11.136,…
- risk 0.46cvss 7.1epss 0.02
A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files of the web application, via sending a specially crafted…
- risk 0.37cvss 5.7epss 0.00
NETGEAR RAX40 devices before 1.0.3.64 are affected by denial of service.
- risk 0.35cvss 5.4epss 0.00
NETGEAR RAX40 devices before 1.0.3.64 are affected by stored XSS.
- risk 0.31cvss 4.8epss 0.00
NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS.
- risk 0.31cvss 4.8epss 0.00
NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS.
- risk 0.28cvss 4.3epss 0.01
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX35 before 1.0.3.94, RAX38 before 1.0.3.94, and RAX40 before 1.0.3.94.