RF
Product
R6400 Firmware
On CISA KEVExploited in the wild
113
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 50Medium 46Low 1
Watch
Add R6400 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-18777 | 7.8 | Apr 22 | Certain NETGEAR devices are affected by administrative password disclosure Affected: before 1.0.1.20 |
| CVE-2017-18849 | 7.8 | Apr 20 | Certain NETGEAR devices are affected by command injection Affected: before 1.01.24; before 1.0.2.30 |
| CVE-2021-38515 | 7.5 | Aug 11 | Certain NETGEAR devices are affected by denial of service Affected: before 1.0.4.98 |
| CVE-2018-21168 | 7.5 | Apr 27 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.1.0.26; before 1.0.2.46 |
| CVE-2018-21139 | 7.5 | Apr 23 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.1.44; before 1.0.2.60 |
| CVE-2021-45640 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.1.46 |
| CVE-2021-45529 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.1.70 |
| CVE-2021-45528 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.1.52 |
| CVE-2021-38523 | 7.2 | Aug 11 | NETGEAR R6400 devices before 1.0.1.70 are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.1.70 |
| CVE-2021-38522 | 7.2 | Aug 11 | NETGEAR R6400 devices before 1.0.1.52 are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.1.52 |
| CVE-2021-38521 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.50 |
| CVE-2021-38520 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.52; before 1.0.4.84 |
| CVE-2021-38519 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.50 |
| CVE-2021-38517 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by out-of-bounds reads and writes Affected: before 1.0.1.70 |
| CVE-2018-21156 | 7.2 | Apr 27 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.1.32; before 1.0.2.52 |
| CVE-2019-20659 | 7.2 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.4.84 |
| CVE-2021-45655 | 6.8 | Dec 26 | NETGEAR R6400 devices before 1.0.1.70 are affected by server-side injection Affected: before 1.0.1.70 |
| CVE-2021-45554 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.74 |
| CVE-2021-45550 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.46; before 1.0.2.66 |
| CVE-2021-45549 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.4.118 |
| CVE-2018-21227 | 6.8 | Apr 24 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.34 |
| CVE-2017-18767 | 6.8 | Apr 22 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.14; before 1.0.2.32 |
| CVE-2019-20762 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.1.44 |
| CVE-2019-20755 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.1.42; before 1.0.2.56 |
| CVE-2019-20754 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.56; before 1.0.1.42 |
| CVE-2019-20719 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.1.44; before 1.0.2.62 |
| CVE-2019-20718 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: All versions, or not specified |
| CVE-2019-20713 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.1.46 |
| CVE-2019-20712 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.1.46; before 1.0.2.62 |
| CVE-2017-18788 | 6.7 | Apr 22 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.32; before 1.0.2.46 |
| CVE-2017-18796 | 6.7 | Apr 21 | Certain NETGEAR devices are affected by command injection Affected: before 1.0.1.24 |
| CVE-2017-18846 | 6.7 | Apr 20 | Certain NETGEAR devices are affected by a stack-based buffer overflow Affected: before 1.0.2.32 |
| CVE-2017-18851 | 6.7 | Apr 20 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.22; before 1.0.2.18 |
| CVE-2019-20737 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.1.42 |
| CVE-2019-20733 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.1.36; before 1.0.2.52 |
| CVE-2019-20732 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.32; before 1.0.2.44 |
| CVE-2019-20731 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.52 |
| CVE-2019-20728 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.1.36; before 1.0.2.52 |
| CVE-2019-20700 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.1.36; before 1.0.2.52 |
| CVE-2019-20692 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.1.36; before 1.0.2.52 |
| CVE-2021-34983 | 6.5 | May 7 | NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability Affected: before 1.0.1.76 |
| CVE-2017-18853 | 6.5 | Apr 29 | Certain NETGEAR devices are affected by password recovery and file access Affected: through 1.0.1.20; through 1.0.2.18 |
| CVE-2017-18704 | 6.5 | Apr 24 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.01.32; before 1.0.2.44 |
| CVE-2017-18765 | 6.5 | Apr 22 | Certain NETGEAR devices are affected by denial of service Affected: before 1.0.1.22; before 1.0.2.32 |
| CVE-2017-18797 | 6.2 | Apr 21 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.1.24 |
| CVE-2017-18700 | 6.1 | Apr 24 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.01.32; before 1.0.2.44 |
| CVE-2017-18745 | 6.1 | Apr 23 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.1.14 |
| CVE-2019-20756 | 6.1 | Apr 16 | Certain NETGEAR devices are affected by reflected XSS Affected: before 1.0.1.32 |
| CVE-2020-13245 | 5.9 | May 28 | Certain NETGEAR devices are affected by Missing SSL Certificate Validation Affected: v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100; v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100 |
| CVE-2017-18778 | 5.5 | Apr 22 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.1.0.26; before 1.0.2.46 |