RF
Product
R6700 Firmware
On CISA KEVExploited in the wild
173
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 105Medium 56Low 1
Watch
Add R6700 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-45077 | 7.5 | Dec 30 | Netgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext Affected: 1.0.4.120 |
| CVE-2021-20175 | 7.5 | Dec 30 | Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the SOAP interface Affected: 1.0.4.120 |
| CVE-2021-20174 | 7.5 | Dec 30 | Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the web interface Affected: 1.0.4.120 |
| CVE-2021-38515 | 7.5 | Aug 11 | Certain NETGEAR devices are affected by denial of service Affected: before 1.0.4.98 |
| CVE-2016-11059 | 7.5 | Apr 28 | Certain NETGEAR devices are affected by password exposure Affected: before 2017-01-06 |
| CVE-2018-21168 | 7.5 | Apr 27 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.2.0.2 |
| CVE-2018-21139 | 7.5 | Apr 23 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.1.48; before 1.2.0.24 |
| CVE-2017-18799 | 7.5 | Apr 21 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.1.1.20 |
| CVE-2021-45640 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.2.6 |
| CVE-2021-38531 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.2.0.76 |
| CVE-2021-38525 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.2.6; before 1.2.0.36 |
| CVE-2021-38520 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.2.0.62; before 1.0.4.84 |
| CVE-2021-38519 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.66; before 1.0.2.8 |
| CVE-2018-21156 | 7.2 | Apr 27 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.1.44 |
| CVE-2018-21135 | 7.2 | Apr 23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.1.48 |
| CVE-2019-20659 | 7.2 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.8; before 1.0.4.84 |
| CVE-2021-23147 | 6.8 | Dec 30 | Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console Affected: 1.0.4.120 |
| CVE-2021-45550 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.6; before 1.0.2.66 |
| CVE-2021-45549 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.4.118 |
| CVE-2020-27867 | 6.8 | Feb 12 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2,… Affected: before 1.2.0.76 |
| CVE-2018-21225 | 6.8 | Apr 28 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.30; before 1.2.0.16 |
| CVE-2018-21157 | 6.8 | Apr 27 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.44 |
| CVE-2018-21227 | 6.8 | Apr 24 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.30 |
| CVE-2017-18767 | 6.8 | Apr 22 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.22 |
| CVE-2019-20762 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.6 |
| CVE-2019-20755 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.1.46 |
| CVE-2019-20754 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.1.46 |
| CVE-2019-20713 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.2.6 |
| CVE-2019-20712 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.6 |
| CVE-2017-18788 | 6.7 | Apr 22 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.36 |
| CVE-2017-18801 | 6.7 | Apr 21 | Certain NETGEAR devices are affected by command injection Affected: before 1.1.0.38 |
| CVE-2017-18796 | 6.7 | Apr 21 | Certain NETGEAR devices are affected by command injection Affected: before 1.0.1.26 |
| CVE-2017-18841 | 6.7 | Apr 20 | Certain NETGEAR devices are affected by command injection Affected: before 1.1.0.38 |
| CVE-2019-20737 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.1.46; before 1.0.2.52 |
| CVE-2019-20733 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.1.46 |
| CVE-2019-20732 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.46 |
| CVE-2019-20731 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.1.44 |
| CVE-2019-20728 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.1.44 |
| CVE-2019-20700 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.1.46 |
| CVE-2019-20692 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.1.46 |
| CVE-2020-27873 | 6.5 | Feb 4 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers Affected: before 1.2.0.76 |
| CVE-2020-10930 | 6.5 | Jul 28 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers Affected: 1.0.4.84_10.0.58 |
| CVE-2017-18853 | 6.5 | Apr 29 | Certain NETGEAR devices are affected by password recovery and file access Affected: through 1.0.1.22 |
| CVE-2017-18704 | 6.5 | Apr 24 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.1.36 |
| CVE-2017-18713 | 6.5 | Apr 24 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.1.36 |
| CVE-2017-18741 | 6.5 | Apr 23 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.1.20 |
| CVE-2017-18752 | 6.5 | Apr 22 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.1.26 |
| CVE-2017-18765 | 6.5 | Apr 22 | Certain NETGEAR devices are affected by denial of service Affected: before 1.0.1.20 |
| CVE-2017-18763 | 6.5 | Apr 22 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.2.0.4 |
| CVE-2020-15634 | 6.3 | Aug 20 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 routers with firmware 1.0.4.84_10.0.58 Affected: before 1.0.4.98 |