CF
Product
Cbr40 Firmware
48
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 19High 21Medium 8Low 0
Watch
Add Cbr40 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-36187 | 9.8 | Sep 1 | Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd Affected: before 2.5.0.24 |
| CVE-2021-45630 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 2.5.0.24 |
| CVE-2021-45622 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 2.5.0.24 |
| CVE-2021-45621 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 2.5.0.24 |
| CVE-2021-45620 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 2.5.0.24 |
| CVE-2021-45617 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 2.5.0.24 |
| CVE-2021-45613 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 2.5.0.24 |
| CVE-2021-45612 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 2.5.0.24 |
| CVE-2021-45509 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by authentication bypass Affected: before 2.5.0.24 |
| CVE-2021-45508 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by authentication bypass Affected: before 2.5.0.24 |
| CVE-2021-45507 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by authentication bypass Affected: before 2.5.0.24 |
| CVE-2021-45504 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by authentication bypass Affected: before 2.5.0.24 |
| CVE-2021-38527 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 2.5.0.14 |
| CVE-2021-38513 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by authentication bypass Affected: before 2.5.0.10 |
| CVE-2020-35796 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 2.5.0.10 |
| CVE-2020-35795 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 2.5.0.10 |
| CVE-2020-26928 | 9.6 | Oct 9 | Certain NETGEAR devices are affected by authentication bypass Affected: before 2.5.0.10 |
| CVE-2020-26926 | 9.6 | Oct 9 | Certain NETGEAR devices are affected by authentication bypass Affected: before 2.5.0.10 |
| CVE-2020-35800 | 9.4 | Dec 30 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 2.5.0.10 |
| CVE-2022-27646 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 2.5.0.28 |
| CVE-2022-27644 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 2.5.0.28 |
| CVE-2021-45631 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 2.5.0.24 |
| CVE-2021-45628 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 2.5.0.24 |
| CVE-2021-45615 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 2.5.0.24 |
| CVE-2021-45601 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.5.0.24 |
| CVE-2021-45599 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.5.0.24 |
| CVE-2021-45598 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.5.0.24 |
| CVE-2021-45597 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.5.0.24 |
| CVE-2021-29068 | 8.8 | Mar 23 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 2.5.0.10 |
| CVE-2020-27861 | 8.8 | Feb 12 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers Affected: before 2.6.1.38 |
| CVE-2020-26906 | 8.8 | Oct 9 | Certain NETGEAR devices are affected by disclosure of administrative credentials Affected: before 2.5.0.10 |
| CVE-2020-26905 | 8.8 | Oct 9 | Certain NETGEAR devices are affected by disclosure of administrative credentials Affected: before 2.5.0.10 |
| CVE-2020-26904 | 8.8 | Oct 9 | Certain NETGEAR devices are affected by disclosure of administrative credentials Affected: before 2.5.0.10 |
| CVE-2020-26903 | 8.8 | Oct 9 | Certain NETGEAR devices are affected by disclosure of administrative credentials Affected: before 2.5.0.10 |
| CVE-2020-26900 | 8.8 | Oct 9 | Certain NETGEAR devices are affected by disclosure of administrative credentials Affected: before 2.5.0.10 |
| CVE-2020-26897 | 8.8 | Oct 9 | Certain NETGEAR devices are affected by disclosure of administrative credentials Affected: before 2.5.0.10 |
| CVE-2021-29080 | 8.1 | Mar 23 | Certain NETGEAR devices are affected by password reset by an unauthenticated attacker Affected: before 2.5.0.10 |
| CVE-2024-28340 | 7.5 | Mar 12 | An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive… Affected: 2.5.0.28 |
| CVE-2020-35802 | 7.5 | Dec 30 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 2.5.0.14 |
| CVE-2021-45529 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 2.3.5.12 |
| CVE-2020-26910 | 6.8 | Oct 9 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.5.0.10 |
| CVE-2020-26899 | 6.5 | Oct 9 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 2.5.0.10 |
| CVE-2021-45639 | 6.1 | Dec 26 | Certain NETGEAR devices are affected by reflected XSS Affected: before 2.5.0.10 |
| CVE-2024-28339 | 5.4 | Mar 12 | An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information… Affected: 2.5.0.28 |
| CVE-2021-45671 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 2.5.0.10 |
| CVE-2021-45670 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 2.5.0.10 |
| CVE-2021-45667 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 2.5.0.10 |
| CVE-2021-45666 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 2.5.0.10 |
Showing 48