VYPR

Vendor CVEs

Netgear

All CVEs

1,377 total · sorted by risk
  • CVE-2022-38956MedSep 20, 2022
    risk 0.34cvss 5.3epss 0.00

    An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to replace the user-uploaded firmware image with an original old firmware image. This affects Firmware 1.1.1_1.1.9 and earlier.

  • CVE-2021-45677MedDec 26, 2021
    risk 0.34cvss 5.2epss 0.01

    Certain NETGEAR devices are affected by stored XSS. This affects GS108Tv2 before 5.4.2.36 and GS110TPv2 before 5.4.2.36.

  • CVE-2021-45639MedDec 26, 2021
    risk 0.34cvss 5.2epss 0.01

    Certain NETGEAR devices are affected by reflected XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.32, EAX80 before 1.0.1.62, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7000 before 1.0.1.104, EX7500 before 1.0.0.72, R7000 before 1.0.11.110, R7900 before…

  • CVE-2019-20759MedApr 16, 2020
    risk 0.34cvss 5.2epss 0.00

    NETGEAR R9000 devices before 1.0.4.26 are affected by stored XSS.

  • CVE-2019-20743MedApr 16, 2020
    risk 0.34cvss 5.2epss 0.00

    NETGEAR WAC510 devices before 8.0.1.3 are affected by stored XSS.

  • CVE-2019-20742MedApr 16, 2020
    risk 0.34cvss 5.2epss 0.00

    NETGEAR WAC510 devices before 8.0.1.3 are affected by stored XSS.

  • CVE-2016-10864MedAug 8, 2019
    risk 0.34cvss 5.2epss 0.01

    NETGEAR EX7000 V1.0.0.42_1.0.94 devices allow XSS via the SSID.

  • CVE-2026-11814MedAug 11, 2026
    risk 0.32cvss epss 0.01

    A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited…

  • CVE-2026-11739MedAug 11, 2026
    risk 0.32cvss epss 0.01

    A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.

  • CVE-2026-9210MedJun 9, 2026
    risk 0.32cvss epss 0.00

    Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

  • CVE-2026-3088MedJun 9, 2026
    risk 0.32cvss epss 0.00

    Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.

  • CVE-2018-21159MedApr 27, 2020
    risk 0.32cvss 4.9epss 0.01

    NETGEAR ReadyNAS devices before 6.9.3 are affected by incorrect configuration of security settings.

  • CVE-2018-21166MedApr 23, 2020
    risk 0.32cvss 4.9epss 0.01

    Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.54,…

  • CVE-2018-21165MedApr 23, 2020
    risk 0.32cvss 4.9epss 0.01

    Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.54,…

  • CVE-2018-21142MedApr 23, 2020
    risk 0.32cvss 4.9epss 0.01

    Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.54,…

  • CVE-2026-0409MedJun 9, 2026
    risk 0.31cvss epss 0.00

    A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when the device administrator performs certain specific management actions. This issue affects NETGEAR…

  • CVE-2024-36788MedJun 7, 2024
    risk 0.31cvss 4.8epss 0.00

    Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices.

  • CVE-2023-0849MedFeb 15, 2023
    risk 0.31cvss 4.7epss 0.03

    A vulnerability has been found in Netgear WNDR3700v2 1.0.1.14 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to…

  • CVE-2022-46422MedDec 20, 2022
    risk 0.31cvss 4.8epss 0.00

    An issue in Netgear WNR2000 v1 1.2.3.7 and earlier allows authenticated attackers to cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process.

  • CVE-2021-45673MedDec 26, 2021
    risk 0.31cvss 4.8epss 0.00

    Certain NETGEAR devices are affected by stored XSS. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before 1.0.4.62, RAX200 before 1.0.3.106, R7000P before 1.3.3.140, RAX80 before 1.0.3.106, R6900P before 1.3.3.140, and RAX75 before 1.0.3.106.

  • CVE-2021-38531MedAug 11, 2021
    risk 0.31cvss 4.7epss 0.00

    Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.42, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before…

  • CVE-2020-35228MedMar 10, 2021
    risk 0.31cvss 4.8epss 0.01

    A cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote attackers to inject arbitrary web script or HTML via the language parameter.

  • CVE-2020-35808MedDec 30, 2020
    risk 0.31cvss 4.8epss 0.01

    Certain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.63, DM200 before 1.0.0.61, R7800 before 1.0.2.52, R8900 before 1.0.4.12, R9000 before 1.0.4.12, WN3000RPv2 before 1.0.0.68, and WNR2000v5 before 1.0.0.66.

  • CVE-2018-21209MedApr 28, 2020
    risk 0.31cvss 4.8epss 0.01

    Certain NETGEAR devices are affected by reflected XSS. This affects JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.46, PR2000 before 1.0.0.20, R6050 before 1.0.1.10, R6220 before 1.1.0.60, WNDR3700v5 before 1.1.0.50, WNR1000v4 before 1.1.0.46, WNR2020…

  • CVE-2017-18785MedApr 22, 2020
    risk 0.31cvss 4.8epss 0.01

    Certain NETGEAR devices are affected by XSS. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, D6200 before 1.1.00.24, D6220 before 1.0.0.32, D6400 before 1.0.0.66, D7000 before 1.0.1.52, D7000v2 before 1.0.0.44, D7800 before 1.0.1.30, D8500…

  • CVE-2017-18809MedApr 21, 2020
    risk 0.31cvss 4.8epss 0.01

    NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • CVE-2017-18807MedApr 21, 2020
    risk 0.31cvss 4.8epss 0.01

    NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • CVE-2017-18820MedApr 21, 2020
    risk 0.31cvss 4.8epss 0.00

    NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • CVE-2017-18816MedApr 21, 2020
    risk 0.31cvss 4.8epss 0.00

    NETGEAR ReadyNAS OS 6 devices, running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • CVE-2017-18815MedApr 21, 2020
    risk 0.31cvss 4.8epss 0.00

    NETGEAR ReadyNAS OS 6 devices, running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • CVE-2017-18814MedApr 21, 2020
    risk 0.31cvss 4.8epss 0.00

    NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • CVE-2017-18813MedApr 21, 2020
    risk 0.31cvss 4.8epss 0.01

    NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • CVE-2017-18812MedApr 21, 2020
    risk 0.31cvss 4.8epss 0.01

    NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • CVE-2017-18811MedApr 21, 2020
    risk 0.31cvss 4.8epss 0.00

    NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • CVE-2017-18810MedApr 21, 2020
    risk 0.31cvss 4.8epss 0.01

    NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • CVE-2017-18821MedApr 21, 2020
    risk 0.31cvss 4.8epss 0.01

    Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,…

  • CVE-2017-18832MedApr 20, 2020
    risk 0.31cvss 4.8epss 0.00

    Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,…

  • CVE-2017-18831MedApr 20, 2020
    risk 0.31cvss 4.8epss 0.01

    Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,…

  • CVE-2017-18828MedApr 20, 2020
    risk 0.31cvss 4.8epss 0.00

    Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,…

  • CVE-2017-18827MedApr 20, 2020
    risk 0.31cvss 4.8epss 0.00

    Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,…

  • CVE-2017-18825MedApr 20, 2020
    risk 0.31cvss 4.8epss 0.00

    Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,…

  • CVE-2017-18839MedApr 20, 2020
    risk 0.31cvss 4.8epss 0.00

    Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,…

  • CVE-2019-20752MedApr 16, 2020
    risk 0.31cvss 4.8epss 0.01

    Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, DM200 before 1.0.0.58, R7800 before 1.0.2.58, R8900 before 1.0.4.12, R9000 before 1.0.4.12, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20…

  • CVE-2019-20750MedApr 16, 2020
    risk 0.31cvss 4.8epss 0.01

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.47, EX6150v2 before 1.0.1.76, R7500v2 before 1.0.3.38, R7800 before 1.0.2.52, R8900 before 1.0.4.12, R9000 before 1.0.4.12, WN2000RPTv3 before 1.0.1.32, WN3000RPv3 before 1.0.2.70, and WN3100RPv2…

  • CVE-2019-20749MedApr 16, 2020
    risk 0.31cvss 4.8epss 0.01

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.47, EX6100v2 before 1.0.1.76, EX6150v2 before 1.0.1.76, R7500v2 before 1.0.3.38, R7800 before 1.0.2.52, R8900 before 1.0.4.12, R9000 before 1.0.4.12, WN2000RPTv3 before 1.0.1.32, WN3000RPv3…

  • CVE-2019-20746MedApr 16, 2020
    risk 0.31cvss 4.8epss 0.01

    Certain NETGEAR devices are affected by reflected XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, DM200 before 1.0.0.58, R7800 before 1.0.2.58, R8900 before 1.0.4.12, R9000 before 1.0.4.8, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20…

  • CVE-2019-20721MedApr 16, 2020
    risk 0.31cvss 4.8epss 0.01

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.47, EX2700 before 1.0.1.48, EX6100v2 before 1.0.1.76, EX6150v2 before 1.0.1.76, EX6200v2 before 1.0.1.72, EX6400 before 1.0.2.136, EX7300 before 1.0.2.136, R7500v2 before 1.0.3.38, R7800 before…

  • CVE-2019-20720MedApr 16, 2020
    risk 0.31cvss 4.8epss 0.01

    Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D7800 before 1.0.1.47, R7500v2 before 1.0.3.38, R7800 before 1.0.2.52, R8900 before 1.0.4.12, R9000 before 1.0.4.12, WN2000RPTv3 before 1.0.1.32, WN3000RPv3 before…

  • CVE-2019-20715MedApr 16, 2020
    risk 0.31cvss 4.8epss 0.01

    Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6100 before 1.0.0.63, D7800 before 1.0.1.47, DM200 before 1.0.0.61, R7500v2 before 1.0.3.40, R7800 before 1.0.2.60, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, and…

  • CVE-2019-20714MedApr 16, 2020
    risk 0.31cvss 4.8epss 0.01

    Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, DM200 before 1.0.0.58, R7500v2 before 1.0.3.40, R7800 before 1.0.2.60, R8900 before 1.0.4.12, R9000 before 1.0.4.12, RBK20 before 2.3.0.22, RBR20…

Page 24 of 28