DF
Product
Dgn2200 Firmware
On CISA KEVExploited in the wild
38
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 14Medium 19Low 1
Watch
Add Dgn2200 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-6077 In wildKEV | 9.8 | Feb 22 | NETGEAR DGN2200 Remote Code Execution Vulnerability Affected: through 10.0.0.50 |
| CVE-2021-38516 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 1.0.0.108 |
| CVE-2019-17373 | 9.8 | Oct 9 | Certain NETGEAR devices allow unauthenticated access to critical .cgi and .htm pages via a substring ending with .jpg, such as by appending ?x=1.jpg to a URL Affected: All versions, or not specified |
| CVE-2016-5649 | 9.8 | Jul 24 | A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a… Affected: 1.0.0.50_7.0.50 |
| CVE-2025-12944 | 8.8 | Nov 11 | Improper input validation in NETGEAR DGN2200v4 (N300 Wireless ADSL2+ Modem Router) allows attackers with direct network access to the device to potentially execute code on the… Affected: before 1.0.0.132 |
| CVE-2024-57046 | 8.8 | Feb 18 | A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authentication Affected: through 1.0.0.46 |
| CVE-2020-35785 | 8.8 | Dec 30 | NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication (aka PSV-2020-0363, PSV-2020-0364, and PSV-2020-0365) Affected: before 1.0.0.60 |
| CVE-2017-18756 | 8.8 | Apr 22 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.94 |
| CVE-2017-18755 | 8.8 | Apr 22 | Certain NETGEAR devices are affected by CSRF Affected: before 1.0.0.86 |
| CVE-2017-18842 | 8.8 | Apr 20 | Certain NETGEAR devices are affected by CSRF Affected: before 1.0.0.55 |
| CVE-2019-20753 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.58 |
| CVE-2017-6366 | 8.8 | Mar 15 | Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50 allows remote attackers to hijack the authentication of users… Affected: through 10.0.0.50 |
| CVE-2017-18777 | 7.8 | Apr 22 | Certain NETGEAR devices are affected by administrative password disclosure Affected: before 1.0.0.82 |
| CVE-2016-11059 | 7.5 | Apr 28 | Certain NETGEAR devices are affected by password exposure Affected: before 2017-01-06; before 2017-01-06; before 2017-01-06 |
| CVE-2018-21139 | 7.5 | Apr 23 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.0.102 |
| CVE-2016-11054 | 7.2 | Apr 28 | NETGEAR DGN2200v4 devices before 2017-01-06 are affected by command execution and an FTP insecure root directory Affected: before 2017-01-06 |
| CVE-2018-21156 | 7.2 | Apr 27 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.0.102 |
| CVE-2018-21163 | 7.2 | Apr 23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.0.102 |
| CVE-2021-45550 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.0.110 |
| CVE-2019-20755 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.0.58 |
| CVE-2019-20754 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.0.58 |
| CVE-2019-20740 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.0.110 |
| CVE-2019-20716 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.110 |
| CVE-2019-20712 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.0.110 |
| CVE-2017-18788 | 6.7 | Apr 22 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.0.96 |
| CVE-2019-20737 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.106 |
| CVE-2019-20733 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.110 |
| CVE-2019-20732 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.0.102 |
| CVE-2019-20728 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.0.102 |
| CVE-2019-20700 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.110 |
| CVE-2019-20692 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.110 |
| CVE-2017-18853 | 6.5 | Apr 29 | Certain NETGEAR devices are affected by password recovery and file access Affected: through 1.0.0.82 |
| CVE-2018-21231 | 5.4 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.94 |
| CVE-2018-21230 | 5.4 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.94 |
| CVE-2021-38534 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.0.110 |
| CVE-2017-18785 | 4.8 | Apr 22 | Certain NETGEAR devices are affected by XSS Affected: before 1.0.0.96 |
| CVE-2017-18769 | 4.6 | Apr 22 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.0.94 |
| CVE-2021-38514 | 2.7 | Aug 11 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.0.108 |
Showing 38
