RF
Product
R6220 Firmware
On CISA KEVExploited in the wild
87
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 52Medium 23Low 1
Watch
Add R6220 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-45656 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by server-side injection Affected: before 1.1.0.100 |
| CVE-2021-45534 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.1.0.110 |
| CVE-2017-18779 | 7.8 | Apr 22 | Certain NETGEAR devices are affected by a buffer overflow Affected: before 1.1.0.60 |
| CVE-2020-35841 | 7.6 | Dec 30 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.1.0.100 |
| CVE-2021-45647 | 7.5 | Dec 26 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: 1.1.0.110 |
| CVE-2016-11059 | 7.5 | Apr 28 | Certain NETGEAR devices are affected by password exposure Affected: before 2017-01-06 |
| CVE-2016-11057 | 7.5 | Apr 28 | Certain NETGEAR devices are affected by mishandling of repeated URL calls Affected: before 2017-01-06 |
| CVE-2018-21168 | 7.5 | Apr 27 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.1.0.60 |
| CVE-2018-21139 | 7.5 | Apr 23 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.1.0.68 |
| CVE-2021-45640 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.1.0.100 |
| CVE-2021-38525 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.1.0.80 |
| CVE-2018-21164 | 7.2 | Apr 23 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.1.0.64 |
| CVE-2020-26914 | 7.1 | Oct 9 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.1.0.100 |
| CVE-2020-27867 | 6.8 | Feb 12 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2,… Affected: before 1.1.0.104 |
| CVE-2017-18801 | 6.7 | Apr 21 | Certain NETGEAR devices are affected by command injection Affected: before 1.1.0.50 |
| CVE-2017-18841 | 6.7 | Apr 20 | Certain NETGEAR devices are affected by command injection Affected: before 1.1.0.46 |
| CVE-2020-27873 | 6.5 | Feb 4 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers Affected: before 1.1.0.104 |
| CVE-2020-17409 | 6.5 | Oct 13 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020… Affected: before 1.1.0.100 |
| CVE-2017-18763 | 6.5 | Apr 22 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.1.0.50 |
| CVE-2020-26916 | 6.3 | Oct 9 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.1.0.100 |
| CVE-2017-18784 | 6.1 | Apr 22 | Certain NETGEAR devices are affected by XSS Affected: before 1.1.0.60 |
| CVE-2017-18783 | 6.1 | Apr 22 | Certain NETGEAR devices are affected by XSS Affected: before 1.1.0.60 |
| CVE-2020-13245 | 5.9 | May 28 | Certain NETGEAR devices are affected by Missing SSL Certificate Validation Affected: v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100 |
| CVE-2017-18780 | 5.5 | Apr 22 | Certain NETGEAR devices are affected by denial of service Affected: before 1.1.0.60 |
| CVE-2017-18778 | 5.5 | Apr 22 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.1.0.60 |
| CVE-2020-35842 | 5.4 | Dec 30 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.1.0.100 |
| CVE-2020-35840 | 5.4 | Dec 30 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.1.0.100 |
| CVE-2018-21231 | 5.4 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.1.0.50 |
| CVE-2018-21230 | 5.4 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.1.0.50 |
| CVE-2017-18702 | 5.4 | Apr 24 | NETGEAR R6220 devices before 1.1.0.60 are affected by incorrect configuration of security settings Affected: before 1.1.0.60 |
| CVE-2021-44261 | 5.3 | Mar 17 | A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication Affected: through 1.1.0.34_1.0.1 |
| CVE-2021-45672 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by Stored XSS Affected: before 1.1.0.110 |
| CVE-2021-38534 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.1.0.80 |
| CVE-2018-21209 | 4.8 | Apr 28 | Certain NETGEAR devices are affected by reflected XSS Affected: before 1.1.0.60 |
| CVE-2017-18769 | 4.6 | Apr 22 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.1.0.50 |
| CVE-2020-35803 | 4.4 | Dec 30 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.1.0.100 |
| CVE-2021-38514 | 2.7 | Aug 11 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.1.0.86 |