EF
Product
Ex6120 Firmware
44
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 14Medium 23Low 1
Watch
Add Ex6120 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-4140 | 9.8 | Apr 30 | A vulnerability, which was classified as critical, has been found in Netgear EX6120 1.0.3.94 Affected: 1.0.3.94 |
| CVE-2021-45621 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.0.64 |
| CVE-2021-45512 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by weak cryptography Affected: before 1.0.0.54 |
| CVE-2020-35796 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.0.54 |
| CVE-2018-21134 | 9.8 | Apr 23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.42 |
| CVE-2020-35800 | 9.4 | Dec 30 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.54 |
| CVE-2025-4139 | 8.8 | Apr 30 | A vulnerability classified as critical was found in Netgear EX6120 1.0.0.68 Affected: 1.0.0.68 |
| CVE-2021-34982 | 8.8 | May 7 | NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.0.0.66 |
| CVE-2022-27643 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.0.68 |
| CVE-2021-45641 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.46 |
| CVE-2021-45526 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.0.48 |
| CVE-2021-34991 | 8.8 | Nov 15 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers Affected: before 1.0.0.66 |
| CVE-2018-21093 | 8.8 | Apr 27 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.40 |
| CVE-2017-18772 | 8.8 | Apr 22 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.0.32 |
| CVE-2019-20734 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.0.40 |
| CVE-2019-20691 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by CSRF Affected: before 1.0.0.40 |
| CVE-2021-32122 | 8.0 | Aug 11 | Certain NETGEAR devices are affected by CSRF Affected: before 1.0.0.64 |
| CVE-2021-45640 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.46 |
| CVE-2018-21156 | 7.2 | Apr 27 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.0.40 |
| CVE-2018-21163 | 7.2 | Apr 23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.0.40 |
| CVE-2024-35519 | 6.8 | Oct 14 | Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operating_mode.cgi via the ap_mode parameter Affected: through 1.0.0.68 |
| CVE-2024-35518 | 6.8 | Oct 14 | Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in genie_fix2.cgi via the wan_dns1_pri parameter Affected: through 1.0.0.68 |
| CVE-2021-45533 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.0.66 |
| CVE-2019-20737 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.40 |
| CVE-2019-20733 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.40 |
| CVE-2019-20732 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.0.40 |
| CVE-2019-20731 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.0.40 |
| CVE-2019-20700 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.40 |
| CVE-2019-20692 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.0.40 |
| CVE-2021-34983 | 6.5 | May 7 | NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability Affected: before 1.0.0.66 |
| CVE-2017-18752 | 6.5 | Apr 22 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.0.32 |
| CVE-2021-45639 | 6.1 | Dec 26 | Certain NETGEAR devices are affected by reflected XSS Affected: before 1.0.0.64 |
| CVE-2017-18715 | 6.1 | Apr 24 | Certain NETGEAR devices are affected by reflected XSS Affected: before 1.0.0.34 |
| CVE-2019-20756 | 6.1 | Apr 16 | Certain NETGEAR devices are affected by reflected XSS Affected: before 1.0.0.40 |
| CVE-2018-21231 | 5.4 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.32 |
| CVE-2018-21230 | 5.4 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.32 |
| CVE-2021-45670 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.0.64 |
| CVE-2021-45668 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.0.64 |
| CVE-2021-45667 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.0.64 |
| CVE-2021-45666 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.0.64 |
| CVE-2021-45665 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.0.64 |
| CVE-2026-0418 | 4.5 | Jun 9 | Certain NETGEAR devices allow administrators to tamper with system Affected: All versions, or not specified |
| CVE-2026-9210 | 4.5 | Jun 9 | Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router Affected: before 1.0.0.72 |
| CVE-2021-38514 | 2.7 | Aug 11 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.0.42 |
Showing 44