RF
Product
R6850 Firmware
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 10Medium 10Low 0
Watch
Add R6850 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-30568 | 9.8 | Apr 3 | Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter Affected: 1.1.0.88 |
| CVE-2021-45644 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.1.0.84 |
| CVE-2021-45511 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.1.0.84 |
| CVE-2021-45501 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.1.0.84 |
| CVE-2021-38516 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 1.1.0.40 |
| CVE-2020-35795 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.1.0.76 |
| CVE-2020-35800 | 9.4 | Dec 30 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.1.0.76 |
| CVE-2021-34865 | 8.8 | Jan 25 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers Affected: before 1.1.0.84 |
| CVE-2021-29068 | 8.8 | Mar 23 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.1.0.76 |
| CVE-2020-27866 | 8.8 | Feb 12 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2,… Affected: before 1.1.0.78 |
| CVE-2020-27872 | 8.8 | Feb 4 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers Affected: before 1.1.0.78 |
| CVE-2024-30572 | 8.0 | Apr 3 | Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntp_server parameter Affected: 1.1.0.88 |
| CVE-2021-45534 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.1.0.84 |
| CVE-2025-12942 | 7.5 | Nov 11 | Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over… Affected: before 1.1.0.86 |
| CVE-2024-30571 | 7.5 | Apr 3 | An information leak in the BRS_top.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required Affected: 1.1.0.88 |
| CVE-2024-30569 | 7.5 | Apr 3 | An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required Affected: 1.1.0.88 |
| CVE-2021-45647 | 7.5 | Dec 26 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.1.0.78 |
| CVE-2020-27867 | 6.8 | Feb 12 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2,… Affected: before 1.1.0.78 |
| CVE-2020-27873 | 6.5 | Feb 4 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers Affected: before 1.1.0.78 |
| CVE-2020-17409 | 6.5 | Oct 13 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020… Affected: before 1.1.0.76 |
| CVE-2020-13245 | 5.9 | May 28 | Certain NETGEAR devices are affected by Missing SSL Certificate Validation Affected: v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100 |
| CVE-2024-30570 | 5.3 | Apr 3 | An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required Affected: 1.1.0.88 |
| CVE-2021-45675 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.1.0.78 |
| CVE-2021-45672 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by Stored XSS Affected: before 1.1.0.78 |
| CVE-2021-38537 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.1.0.78 |
| CVE-2021-38536 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.1.0.78 |
| CVE-2021-38535 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.1.0.78 |
Showing 27