RF
Product
R6900 Firmware
On CISA KEVExploited in the wild
132
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 76Medium 45Low 1
Watch
Add R6900 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-18782 | 8.8 | Apr 22 | Certain NETGEAR devices are affected by CSRF Affected: before 1.2.0.12 |
| CVE-2017-18781 | 8.8 | Apr 22 | Certain NETGEAR devices are affected by CSRF Affected: before 1.2.0.12 |
| CVE-2017-18772 | 8.8 | Apr 22 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.1.22 |
| CVE-2019-20753 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.1.46 |
| CVE-2019-20734 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.1.22 |
| CVE-2019-20686 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.2.0.36 |
| CVE-2019-20685 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.2.0.36 |
| CVE-2019-20684 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.2.0.36 |
| CVE-2019-20683 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.2.0.36 |
| CVE-2019-20682 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.2.0.36 |
| CVE-2019-20681 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.2.0.36 |
| CVE-2019-20656 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by a hardcoded password Affected: before 1.2.0.62 |
| CVE-2020-11788 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.2.0.36 |
| CVE-2019-20640 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.2.0.36 |
| CVE-2020-11770 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.4; before 1.2.0.36 |
| CVE-2017-18850 | 8.4 | Apr 20 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.1.22 |
| CVE-2021-40847 | 8.1 | Sep 21 | The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code execution as root via a MitM attack Affected: 1.0.2.16 |
| CVE-2019-17372 | 8.1 | Oct 9 | Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi Affected: All versions, or not specified |
| CVE-2020-35787 | 8.0 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.4; before 1.2.0.36 |
| CVE-2017-18758 | 8.0 | Apr 22 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.1.0.42 |
| CVE-2019-20680 | 8.0 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.4; before 1.2.0.36 |
| CVE-2019-20657 | 8.0 | Apr 15 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.2.0.62 |
| CVE-2021-45656 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by server-side injection Affected: before 1.2.0.76 |
| CVE-2017-18779 | 7.8 | Apr 22 | Certain NETGEAR devices are affected by a buffer overflow Affected: before 1.2.0.12 |
| CVE-2017-18777 | 7.8 | Apr 22 | Certain NETGEAR devices are affected by administrative password disclosure Affected: before 1.0.1.20 |
| CVE-2017-18849 | 7.8 | Apr 20 | Certain NETGEAR devices are affected by command injection Affected: before 1.0.1.22 |
| CVE-2018-21168 | 7.5 | Apr 27 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.2.0.2 |
| CVE-2018-21139 | 7.5 | Apr 23 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.1.48; before 1.2.0.24 |
| CVE-2021-45640 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.2.6 |
| CVE-2021-45528 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.8 |
| CVE-2021-38531 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.2.0.76 |
| CVE-2021-38525 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.2.4; before 1.2.0.36 |
| CVE-2021-38520 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.2.0.62 |
| CVE-2021-38519 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.8 |
| CVE-2018-21156 | 7.2 | Apr 27 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.1.44 |
| CVE-2019-20659 | 7.2 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.8 |
| CVE-2021-45550 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.4 |
| CVE-2020-27867 | 6.8 | Feb 12 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2,… Affected: before 1.2.0.76 |
| CVE-2018-21225 | 6.8 | Apr 28 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.30; before 1.2.0.16 |
| CVE-2018-21157 | 6.8 | Apr 27 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.44 |
| CVE-2018-21227 | 6.8 | Apr 24 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.30 |
| CVE-2017-18767 | 6.8 | Apr 22 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.22 |
| CVE-2019-20762 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.4 |
| CVE-2019-20755 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.1.46 |
| CVE-2019-20754 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.1.46 |
| CVE-2019-20713 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.2.4 |
| CVE-2019-20712 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.4 |
| CVE-2017-18788 | 6.7 | Apr 22 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.34 |
| CVE-2017-18796 | 6.7 | Apr 21 | Certain NETGEAR devices are affected by command injection Affected: before 1.0.1.28 |
| CVE-2019-20737 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.1.46 |