RF
Product
R7000 Firmware
On CISA KEVExploited in the wild
140
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 64Medium 54Low 1
Watch
Add R7000 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-18762 | 8.8 | Apr 22 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.9.10 |
| CVE-2017-18772 | 8.8 | Apr 22 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.9.6 |
| CVE-2019-20753 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.9.28 |
| CVE-2019-20734 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.9.6 |
| CVE-2020-11770 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.9.42 |
| CVE-2021-45540 | 8.4 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.11.126 |
| CVE-2017-18794 | 8.4 | Apr 21 | Certain NETGEAR devices are affected by command injection Affected: before 1.0.9.10 |
| CVE-2017-18850 | 8.4 | Apr 20 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.9.4 |
| CVE-2021-40847 | 8.1 | Sep 21 | The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code execution as root via a MitM attack Affected: 1.0.11.123 |
| CVE-2021-29080 | 8.1 | Mar 23 | Certain NETGEAR devices are affected by password reset by an unauthenticated attacker Affected: before 1.0.11.116 |
| CVE-2019-17372 | 8.1 | Oct 9 | Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi Affected: All versions, or not specified |
| CVE-2022-27647 | 8.0 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.11.134 |
| CVE-2020-35787 | 8.0 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.9.42 |
| CVE-2019-20758 | 8.0 | Apr 16 | NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user Affected: before 1.0.9.42 |
| CVE-2019-20680 | 8.0 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.9.60 |
| CVE-2022-37234 | 7.8 | Sep 22 | Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware Affected: 1.0.11.134_10.2.119 |
| CVE-2020-35798 | 7.8 | Dec 30 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.11.100 |
| CVE-2017-18777 | 7.8 | Apr 22 | Certain NETGEAR devices are affected by administrative password disclosure Affected: before 1.0.7.10 |
| CVE-2017-18849 | 7.8 | Apr 20 | Certain NETGEAR devices are affected by command injection Affected: before 1.0.9.4 |
| CVE-2022-40619 | 7.7 | Jan 28 | FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices Affected: before 1.0.11.134 |
| CVE-2022-40620 | 7.7 | Jan 28 | FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its… Affected: before 1.0.11.134 |
| CVE-2025-44650 | 7.5 | Jul 21 | In Netgear R7000 V1.3.1.64_10.1.36 and EAX80 V1.0.1.70_1.0.2, the USERLIMIT_GLOBAL option is set to 0 in the bftpd.conf configuration file Affected: 1.3.1.64_10.1.36 |
| CVE-2021-45650 | 7.5 | Dec 26 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.11.110 |
| CVE-2021-45647 | 7.5 | Dec 26 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.11.116 |
| CVE-2021-45646 | 7.5 | Dec 26 | NETGEAR R7000 devices before 1.0.11.116 are affected by disclosure of sensitive information Affected: before 1.0.11.116 |
| CVE-2016-11059 | 7.5 | Apr 28 | Certain NETGEAR devices are affected by password exposure Affected: before 2017-01-06 |
| CVE-2018-21139 | 7.5 | Apr 23 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.9.34 |
| CVE-2017-18799 | 7.5 | Apr 21 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.7.10 |
| CVE-2021-45679 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by privilege escalation Affected: before 1.0.11.126 |
| CVE-2021-45640 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.9.34 |
| CVE-2021-45529 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.11.126 |
| CVE-2021-45528 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.9.88 |
| CVE-2021-38525 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.9.42 |
| CVE-2021-38519 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.9.88 |
| CVE-2018-21156 | 7.2 | Apr 27 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.9.28 |
| CVE-2024-35520 | 6.8 | Oct 14 | Netgear R7000 1.0.11.136 is vulnerable to Command Injection in RMT_invite.cgi via device_name2 parameter Affected: 1.0.11.136 |
| CVE-2021-45554 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.11.126 |
| CVE-2021-45550 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.9.42 |
| CVE-2021-45549 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.11.116 |
| CVE-2018-21225 | 6.8 | Apr 28 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.9.12 |
| CVE-2018-21157 | 6.8 | Apr 27 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.9.28 |
| CVE-2018-21227 | 6.8 | Apr 24 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.9.12 |
| CVE-2017-18767 | 6.8 | Apr 22 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.9.4 |
| CVE-2019-20762 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.9.34 |
| CVE-2019-20755 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.9.32 |
| CVE-2019-20754 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.9.32 |
| CVE-2019-20713 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.9.42 |
| CVE-2019-20712 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.9.60 |
| CVE-2017-18788 | 6.7 | Apr 22 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.9.18 |
| CVE-2017-18796 | 6.7 | Apr 21 | Certain NETGEAR devices are affected by command injection Affected: before 1.0.9.10 |