RF
Product
R7000 Firmware
On CISA KEVExploited in the wild
140
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 64Medium 54Low 1
Watch
Add R7000 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-36187 | 9.8 | Sep 1 | Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd Affected: before 1.0.11.130 |
| CVE-2022-48196 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.11.136 |
| CVE-2022-37235 | 9.8 | Sep 23 | Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware Affected: 1.0.11.134_10.2.119 |
| CVE-2021-45638 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.11.116 |
| CVE-2021-45624 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.11.110 |
| CVE-2021-45622 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.11.116 |
| CVE-2021-45621 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.11.126 |
| CVE-2021-45620 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.11.126 |
| CVE-2021-45617 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.11.116 |
| CVE-2021-45616 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.11.126 |
| CVE-2021-45612 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.11.126 |
| CVE-2021-45610 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.11.110 |
| CVE-2021-45609 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.11.116 |
| CVE-2021-45527 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.11.116 |
| CVE-2021-45512 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by weak cryptography Affected: before 1.0.11.106 |
| CVE-2021-38516 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 1.0.9.34 |
| CVE-2020-35796 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.11.106 |
| CVE-2020-35795 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.11.106 |
| CVE-2018-21162 | 9.8 | Apr 23 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.7.10 |
| CVE-2018-21134 | 9.8 | Apr 23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.9.34 |
| CVE-2019-20730 | 9.8 | Apr 16 | Certain NETGEAR devices are affected by SQL injection Affected: before 1.0.9.26 |
Showing 21