RF
Product
R7000p Firmware
155
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 35High 54Medium 65Low 1
Watch
Add R7000p Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-36187 | 9.8 | Sep 1 | Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd Affected: before 1.3.3.148 |
| CVE-2022-48322 | 9.8 | Feb 13 | NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability Affected: before 1.3.3.154 |
| CVE-2022-48196 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.3.3.152 |
| CVE-2022-44184 | 9.8 | Nov 22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_sec Affected: 1.3.0.8 |
| CVE-2022-44200 | 9.8 | Nov 22 | Netgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters: stamode_dns1_pri and stamode_dns1_sec Affected: 1.3.0.8; 1.3.1.64 |
| CVE-2022-44199 | 9.8 | Nov 22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_server_ip Affected: 1.3.1.64 |
| CVE-2022-44198 | 9.8 | Nov 22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_push1 Affected: 1.3.1.64 |
| CVE-2022-44197 | 9.8 | Nov 22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_server_ip Affected: 1.3.0.8 |
| CVE-2022-44196 | 9.8 | Nov 22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_push1 Affected: 1.3.0.8 |
| CVE-2022-44194 | 9.8 | Nov 22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameters apmode_dns1_pri and apmode_dns1_sec Affected: 1.3.0.8 |
| CVE-2022-44193 | 9.8 | Nov 22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameters: starthour, startminute , endhour, and endminute Affected: 1.3.1.64 |
| CVE-2022-44191 | 9.8 | Nov 22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameters KEY1 and KEY2 Affected: 1.3.1.64 |
| CVE-2022-44190 | 9.8 | Nov 22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter enable_band_steering Affected: 1.3.1.64 |
| CVE-2022-44188 | 9.8 | Nov 22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter enable_band_steering Affected: 1.3.0.8 |
| CVE-2022-44187 | 9.8 | Nov 22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via wan_dns1_pri Affected: 1.3.0.8 |
| CVE-2022-44186 | 9.8 | Nov 22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_pri Affected: 1.3.1.64 |
| CVE-2021-45638 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.3.2.132 |
| CVE-2021-45625 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.3.3.140 |
| CVE-2021-45624 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.3.2.132 |
| CVE-2021-45622 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.3.3.140 |
| CVE-2021-45621 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.3.3.140 |
| CVE-2021-45620 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.3.3.140 |
| CVE-2021-45617 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.3.2.132 |
| CVE-2021-45616 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.3.3.140 |
| CVE-2021-45612 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.3.3.140 |
| CVE-2021-45610 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.3.2.132 |
| CVE-2021-45609 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.3.2.132 |
| CVE-2021-45527 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.3.2.124 |
| CVE-2021-45512 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by weak cryptography Affected: before 1.3.2.124 |
| CVE-2021-38528 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.3.2.132 |
| CVE-2021-38516 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 1.3.1.44 |
| CVE-2020-35796 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.3.2.124 |
| CVE-2020-35795 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.3.2.124 |
| CVE-2018-21134 | 9.8 | Apr 23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.3.1.44 |
| CVE-2019-20730 | 9.8 | Apr 16 | Certain NETGEAR devices are affected by SQL injection Affected: before 1.3.0.20 |
| CVE-2021-34982 | 8.8 | May 7 | NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.3.3.148 |
| CVE-2022-27646 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.3.3.148 |
| CVE-2022-27644 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.3.3.148 |
| CVE-2022-27643 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.3.3.148 |
| CVE-2022-27642 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.3.3.148 |
| CVE-2021-45607 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.3.3.140 |
| CVE-2021-45606 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.3.3.140 |
| CVE-2021-45605 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.3.3.140 |
| CVE-2021-45553 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.3.2.126 |
| CVE-2021-45530 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.4.2.84 |
| CVE-2021-45526 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.3.2.124 |
| CVE-2021-45525 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.3.2.124 |
| CVE-2021-45500 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.3.3.140 |
| CVE-2021-45499 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.3.3.140 |
| CVE-2021-34991 | 8.8 | Nov 15 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers Affected: before 1.3.3.142 |
