RF
Product
R6250 Firmware
On CISA KEVExploited in the wild
60
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 20Medium 27Low 1
Watch
Add R6250 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6277 In wildKEV | 8.8 | Dec 14 | NETGEAR Multiple Routers Remote Code Execution Vulnerability Affected: through 1.0.4.6_10.1.12 |
| CVE-2021-45641 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.4.34 |
| CVE-2021-27239 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers Affected: before 1.0.4.48 |
| CVE-2020-28373 | 8.8 | Nov 9 | upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overflow Affected: 1.0.4.44 |
| CVE-2018-21093 | 8.8 | Apr 27 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.4.26 |
| CVE-2017-18733 | 8.8 | Apr 23 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.4.8 |
| CVE-2017-18744 | 8.8 | Apr 23 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.4.12 |
| CVE-2017-18742 | 8.8 | Apr 23 | Certain NETGEAR devices are affected by CSRF Affected: before 1.0.4.12 |
| CVE-2017-18756 | 8.8 | Apr 22 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.4.14 |
| CVE-2019-20753 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.4.26 |
| CVE-2020-11770 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.4.34 |
| CVE-2017-18850 | 8.4 | Apr 20 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.4.12 |
| CVE-2019-17372 | 8.1 | Oct 9 | Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi Affected: All versions, or not specified |
| CVE-2017-18849 | 7.8 | Apr 20 | Certain NETGEAR devices are affected by command injection Affected: before 1.0.4.12 |
| CVE-2016-11059 | 7.5 | Apr 28 | Certain NETGEAR devices are affected by password exposure Affected: before 2017-01-06 |
| CVE-2018-21139 | 7.5 | Apr 23 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.4.30 |
| CVE-2017-18799 | 7.5 | Apr 21 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.4.8 |
| CVE-2021-45640 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.4.34 |
| CVE-2021-38519 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.4.36 |
| CVE-2018-21156 | 7.2 | Apr 27 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.4.20 |
Showing 20