DF
Product
Dc112a Firmware
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 10Medium 2Low 1
Watch
Add Dc112a Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-28219 | 9.8 | Mar 28 | Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usb_adv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName"… Affected: 1.0.0.64 |
| CVE-2021-45638 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.56 |
| CVE-2021-45611 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.0.52 |
| CVE-2021-45610 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.0.52 |
| CVE-2021-45527 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.0.54 |
| CVE-2021-38516 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 1.0.0.40 |
| CVE-2020-35796 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.0.48 |
| CVE-2019-20730 | 9.8 | Apr 16 | Certain NETGEAR devices are affected by SQL injection Affected: before 1.0.0.40 |
| CVE-2020-35800 | 9.4 | Dec 30 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.48 |
| CVE-2021-34982 | 8.8 | May 7 | NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.0.0.62 |
| CVE-2023-38925 | 8.8 | Aug 7 | Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the http_passwd parameter in password.cgi Affected: 1.0.0.64 |
| CVE-2022-27643 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.0.64 |
| CVE-2021-45641 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.42 |
| CVE-2021-34991 | 8.8 | Nov 15 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers Affected: before 1.0.0.62 |
| CVE-2021-27239 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers Affected: before 1.0.0.54 |
| CVE-2019-17372 | 8.1 | Oct 9 | Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi Affected: All versions, or not specified |
| CVE-2022-24655 | 7.8 | Mar 18 | A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution of arbitrary code… Affected: 1.0.0.62 |
| CVE-2018-21139 | 7.5 | Apr 23 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.0.40 |
| CVE-2021-45640 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.42 |
| CVE-2021-34983 | 6.5 | May 7 | NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability Affected: before 1.0.0.62 |
| CVE-2021-38534 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.0.42 |
| CVE-2021-38514 | 2.7 | Aug 11 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.0.42 |
Showing 22