RF
Product
R7000 Firmware
On CISA KEVExploited in the wild
140
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 64Medium 54Low 1
Watch
Add R7000 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-35520 | 6.8 | Oct 14 | Netgear R7000 1.0.11.136 is vulnerable to Command Injection in RMT_invite.cgi via device_name2 parameter Affected: 1.0.11.136 |
| CVE-2021-45554 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.11.126 |
| CVE-2021-45550 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.9.42 |
| CVE-2021-45549 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.11.116 |
| CVE-2018-21225 | 6.8 | Apr 28 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.9.12 |
| CVE-2018-21157 | 6.8 | Apr 27 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.9.28 |
| CVE-2018-21227 | 6.8 | Apr 24 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.9.12 |
| CVE-2017-18767 | 6.8 | Apr 22 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.9.4 |
| CVE-2019-20762 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.9.34 |
| CVE-2019-20755 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.9.32 |
| CVE-2019-20754 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.9.32 |
| CVE-2019-20713 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.9.42 |
| CVE-2019-20712 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.9.60 |
| CVE-2017-18788 | 6.7 | Apr 22 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.9.18 |
| CVE-2017-18796 | 6.7 | Apr 21 | Certain NETGEAR devices are affected by command injection Affected: before 1.0.9.10 |
| CVE-2019-20737 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.9.28 |
| CVE-2019-20733 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.9.28 |
| CVE-2019-20732 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.9.26 |
| CVE-2019-20731 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.9.26 |
| CVE-2019-20728 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.9.26 |
| CVE-2019-20700 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.9.28 |
| CVE-2019-20692 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.9.28 |
| CVE-2021-34983 | 6.5 | May 7 | NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability Affected: before 1.0.11.128 |
| CVE-2024-1431 | 6.5 | Feb 11 | A vulnerability was found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic Affected: 1.0.11.136_10.2.120 |
| CVE-2024-1430 | 6.5 | Feb 11 | A vulnerability has been found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic Affected: 1.0.11.136_10.2.120 |
| CVE-2021-45523 | 6.5 | Dec 26 | NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user Affected: before 1.0.9.42 |
| CVE-2017-18853 | 6.5 | Apr 29 | Certain NETGEAR devices are affected by password recovery and file access Affected: through 1.0.7.10 |
| CVE-2017-18704 | 6.5 | Apr 24 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.9.14 |
| CVE-2017-18741 | 6.5 | Apr 23 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.7.10 |
| CVE-2017-18752 | 6.5 | Apr 22 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.9.6 |
| CVE-2017-18790 | 6.2 | Apr 21 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.9.10 |
| CVE-2021-45639 | 6.1 | Dec 26 | Certain NETGEAR devices are affected by reflected XSS Affected: before 1.0.11.110 |
| CVE-2017-18700 | 6.1 | Apr 24 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.9.14 |
| CVE-2017-18745 | 6.1 | Apr 23 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.9.4 |
| CVE-2021-45649 | 5.5 | Dec 26 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.11.126 |
| CVE-2021-45673 | 5.4 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.11.110 |
| CVE-2021-45663 | 5.4 | Dec 26 | NETGEAR R7000 devices before 1.0.11.126 are affected by stored XSS Affected: before 1.0.11.126 |
| CVE-2021-45662 | 5.4 | Dec 26 | NETGEAR R7000 devices before 1.0.9.88 are affected by stored XSS Affected: before 1.0.9.88 |
| CVE-2018-21231 | 5.4 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.9.6 |
| CVE-2018-21230 | 5.4 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.9.6 |
| CVE-2026-11735 | 4.9 | Aug 11 | Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models Affected: All versions, or not specified |
| CVE-2021-45674 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.11.110 |
| CVE-2021-45670 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.11.116 |
| CVE-2021-45664 | 4.8 | Dec 26 | NETGEAR R7000 devices before 1.0.11.126 are affected by stored XSS Affected: before 1.0.11.126 |
| CVE-2021-38534 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.9.60 |
| CVE-2017-18785 | 4.8 | Apr 22 | Certain NETGEAR devices are affected by XSS Affected: before 1.0.9.18 |
| CVE-2017-18769 | 4.6 | Apr 22 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.9.6 |
| CVE-2026-9214 | 4.5 | Aug 11 | Insufficient input validation in NETGEAR R7000 router allows administrators to tamper with the device. Affected: All versions, or not specified |
| CVE-2026-0417 | 4.5 | Jun 9 | Insufficient input validation in certain NETGEAR routers Affected: before 1.0.11.216 |
| CVE-2026-9210 | 4.5 | Jun 9 | Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router Affected: before 1.0.11.216 |