RF
Product
R6900 Firmware
On CISA KEVExploited in the wild
132
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 76Medium 45Low 1
Watch
Add R6900 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-20733 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.1.46 |
| CVE-2019-20732 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.1.46 |
| CVE-2019-20731 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.1.46 |
| CVE-2019-20728 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.1.44 |
| CVE-2019-20700 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.1.46 |
| CVE-2019-20692 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.1.46 |
| CVE-2020-27873 | 6.5 | Feb 4 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers Affected: before 1.2.0.76 |
| CVE-2017-18853 | 6.5 | Apr 29 | Certain NETGEAR devices are affected by password recovery and file access Affected: through 1.0.1.20 |
| CVE-2017-18704 | 6.5 | Apr 24 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.1.34 |
| CVE-2017-18713 | 6.5 | Apr 24 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.1.34 |
| CVE-2017-18752 | 6.5 | Apr 22 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.1.22 |
| CVE-2017-18765 | 6.5 | Apr 22 | Certain NETGEAR devices are affected by denial of service Affected: before 1.0.1.20 |
| CVE-2017-18763 | 6.5 | Apr 22 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.2.0.4 |
| CVE-2017-18701 | 6.1 | Apr 24 | Certain NETGEAR devices are affected by reflected XSS Affected: before 1.0.1.34 |
| CVE-2017-18700 | 6.1 | Apr 24 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.1.34 |
| CVE-2017-18745 | 6.1 | Apr 23 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.1.22 |
| CVE-2017-18784 | 6.1 | Apr 22 | Certain NETGEAR devices are affected by XSS Affected: before 1.2.0.12 |
| CVE-2017-18783 | 6.1 | Apr 22 | Certain NETGEAR devices are affected by XSS Affected: before 1.2.0.12 |
| CVE-2017-18780 | 5.5 | Apr 22 | Certain NETGEAR devices are affected by denial of service Affected: before 1.2.0.12 |
| CVE-2017-18778 | 5.5 | Apr 22 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.2.0.2 |
| CVE-2018-21231 | 5.4 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.1.26 |
| CVE-2018-21230 | 5.4 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.1.26 |
| CVE-2019-20738 | 5.4 | Apr 16 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.2.0.14 |
| CVE-2021-44261 | 5.3 | Mar 17 | A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication Affected: All versions, or not specified |
| CVE-2021-38537 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.2.0.76 |
| CVE-2021-38536 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.2.0.76 |
| CVE-2021-38535 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.2.0.76 |
| CVE-2021-38534 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.2.4; before 1.2.0.36 |
| CVE-2017-18785 | 4.8 | Apr 22 | Certain NETGEAR devices are affected by XSS Affected: before 1.2.0.12; before 1.0.1.34 |
| CVE-2017-18769 | 4.6 | Apr 22 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.1.26; before 1.2.0.4 |
| CVE-2019-20729 | 4.4 | Apr 16 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.1.44 |
| CVE-2021-38514 | 2.7 | Aug 11 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.2.0.36; before 1.0.1.48 |