EF
Product
Ex8000 Firmware
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 11Medium 10Low 1
Watch
Add Ex8000 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-50526 | 9.8 | Dec 23 | Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via the switch_status function Affected: 1.0.0.126 |
| CVE-2025-45492 | 9.8 | May 6 | Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the Iface parameter in the action_wireless function Affected: 1.0.0.126 |
| CVE-2021-45619 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.1.232 |
| CVE-2021-45618 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.1.232 |
| CVE-2021-38527 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.1.232 |
| CVE-2020-35799 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.1.186 |
| CVE-2018-21153 | 9.8 | Apr 27 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.0.114 |
| CVE-2019-20730 | 9.8 | Apr 16 | Certain NETGEAR devices are affected by SQL injection Affected: before 1.0.0.118 |
| CVE-2020-35800 | 9.4 | Dec 30 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.1.224 |
| CVE-2021-34947 | 8.8 | May 7 | NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: before 1.0.1.238 |
| CVE-2022-27641 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.1.240 |
| CVE-2021-27253 | 8.8 | Apr 14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800 Affected: before 1.0.1.232 |
| CVE-2021-27252 | 8.8 | Apr 14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 1.0.1.232 |
| CVE-2021-27251 | 8.8 | Apr 14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800 Affected: before 1.0.1.232 |
| CVE-2021-27256 | 8.8 | Mar 5 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 1.0.1.232 |
| CVE-2021-27255 | 8.8 | Mar 5 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 1.0.1.232 |
| CVE-2021-27254 | 8.8 | Mar 5 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800 Affected: before 1.0.1.232 |
| CVE-2020-27861 | 8.8 | Feb 12 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers Affected: before 1.0.1.224 |
| CVE-2020-35787 | 8.0 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.1.186 |
| CVE-2021-38525 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.1.186 |
| CVE-2019-20751 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.1.180 |
| CVE-2019-20723 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.1.180 |
| CVE-2019-20689 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.180 |
| CVE-2019-20688 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.180 |
| CVE-2017-18788 | 6.7 | Apr 22 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.0.102 |
| CVE-2025-45493 | 6.5 | Dec 23 | Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in the action_bandwidth function Affected: 1.0.0.126 |
| CVE-2021-27257 | 6.5 | Mar 5 | This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 1.0.1.232 |
| CVE-2019-20717 | 6.5 | Apr 16 | Certain NETGEAR devices are affected by denial of service Affected: before 1.0.1.180 |
| CVE-2018-21167 | 5.5 | Apr 27 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.0.114 |
| CVE-2017-18785 | 4.8 | Apr 22 | Certain NETGEAR devices are affected by XSS Affected: before 1.0.0.102 |
| CVE-2021-38514 | 2.7 | Aug 11 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.1.180 |
Showing 31