DF
Product
D6400 Firmware
On CISA KEVExploited in the wild
52
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 18Medium 24Low 1
Watch
Add D6400 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6277 In wildKEV | 8.8 | Dec 14 | NETGEAR Multiple Routers Remote Code Execution Vulnerability Affected: through 1.0.0.56 |
| CVE-2017-5521 In wildKEV | 8.1 | Jan 17 | NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability Affected: 1.0.0.44 |
| CVE-2021-45638 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.102 |
| CVE-2021-45610 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.0.100 |
| CVE-2021-45527 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.0.102 |
| CVE-2021-38516 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 1.0.0.82 |
| CVE-2020-35796 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.0.94 |
| CVE-2018-21162 | 9.8 | Apr 23 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.0.78 |
| CVE-2018-21134 | 9.8 | Apr 23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.82 |
| CVE-2019-20730 | 9.8 | Apr 16 | Certain NETGEAR devices are affected by SQL injection Affected: before 1.0.0.74 |
| CVE-2020-35800 | 9.4 | Dec 30 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.94 |
| CVE-2025-7407 | 8.8 | Jul 10 | A vulnerability, which was classified as critical, was found in Netgear D6400 1.0.0.114 Affected: 1.0.0.114 |
| CVE-2021-34982 | 8.8 | May 7 | NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.0.0.108 |
| CVE-2022-27643 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.0.114 |
| CVE-2021-45641 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.86 |
| CVE-2021-34991 | 8.8 | Nov 15 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers Affected: before 1.0.0.108 |
| CVE-2021-27239 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers Affected: before 1.0.0.102 |
| CVE-2017-18733 | 8.8 | Apr 23 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.0.60 |
| CVE-2017-18756 | 8.8 | Apr 22 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.66 |
| CVE-2019-20753 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.78 |
| CVE-2020-11770 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.0.86 |
| CVE-2017-18850 | 8.4 | Apr 20 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.0.60 |
| CVE-2017-18777 | 7.8 | Apr 22 | Certain NETGEAR devices are affected by administrative password disclosure Affected: before 1.0.0.60 |
| CVE-2017-18849 | 7.8 | Apr 20 | Certain NETGEAR devices are affected by command injection Affected: before 1.0.0.60 |
| CVE-2018-21139 | 7.5 | Apr 23 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.0.82 |
| CVE-2021-45640 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.86 |
| CVE-2018-21156 | 7.2 | Apr 27 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.0.74 |
| CVE-2021-45550 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.0.86 |
| CVE-2019-20755 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.0.80 |
| CVE-2019-20754 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.0.80 |
| CVE-2019-20719 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.0.82 |
| CVE-2019-20718 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: All versions, or not specified |
| CVE-2019-20712 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.0.86 |
| CVE-2017-18788 | 6.7 | Apr 22 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.0.66 |
| CVE-2019-20737 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.78 |
| CVE-2019-20733 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.78 |
| CVE-2019-20731 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.0.74 |
| CVE-2019-20728 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.0.74 |
| CVE-2019-20700 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.78 |
| CVE-2019-20692 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.78 |
| CVE-2021-34983 | 6.5 | May 7 | NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability Affected: before 1.0.0.108 |
| CVE-2017-18704 | 6.5 | Apr 24 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.0.60 |
| CVE-2017-18700 | 6.1 | Apr 24 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.0.60 |
| CVE-2017-18778 | 5.5 | Apr 22 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.60 |
| CVE-2017-18789 | 5.5 | Apr 22 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.0.60 |
| CVE-2018-21231 | 5.4 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.74 |
| CVE-2018-21230 | 5.4 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.74 |
| CVE-2021-38534 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.0.86 |
| CVE-2017-18785 | 4.8 | Apr 22 | Certain NETGEAR devices are affected by XSS Affected: before 1.0.0.66 |
| CVE-2017-18769 | 4.6 | Apr 22 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.0.74 |