LF
Product
Lax20 Firmware
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 4Medium 3Low 0
Watch
Add Lax20 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-36187 | 9.8 | Sep 1 | Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd Affected: before 1.1.6.34 |
| CVE-2021-45622 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.1.6.28 |
| CVE-2021-45621 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.1.6.28 |
| CVE-2021-45620 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.1.6.28 |
| CVE-2021-45616 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.1.6.28 |
| CVE-2021-45614 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.1.6.28 |
| CVE-2021-45613 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.1.6.28 |
| CVE-2021-45612 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.1.6.28 |
| CVE-2021-34982 | 8.8 | May 7 | NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.1.6.30 |
| CVE-2022-27645 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers Affected: before 1.1.6.34 |
| CVE-2022-27642 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.1.6.34 |
| CVE-2022-27647 | 8.0 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.1.6.34 |
| CVE-2021-45549 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.1.6.28 |
| CVE-2021-34983 | 6.5 | May 7 | NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability Affected: before 1.1.6.30 |
| CVE-2021-45604 | 4.5 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.1.6.28 |
Showing 15