RF
Product
R7000p Firmware
155
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 35High 54Medium 65Low 1
Watch
Add R7000p Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-18788 | 6.7 | Apr 22 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.3.0.8 |
| CVE-2017-18796 | 6.7 | Apr 21 | Certain NETGEAR devices are affected by command injection Affected: before 1.0.1.16 |
| CVE-2017-18846 | 6.7 | Apr 20 | Certain NETGEAR devices are affected by a stack-based buffer overflow Affected: before 1.0.0.56 |
| CVE-2019-20733 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.3.1.64 |
| CVE-2019-20732 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.3.0.20 |
| CVE-2019-20731 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.3.0.20 |
| CVE-2019-20728 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.3.0.20 |
| CVE-2019-20700 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.3.1.64 |
| CVE-2019-20692 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.3.1.44 |
| CVE-2021-34983 | 6.5 | May 7 | NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability Affected: before 1.3.3.148 |
| CVE-2017-18853 | 6.5 | Apr 29 | Certain NETGEAR devices are affected by password recovery and file access Affected: through 1.0.0.58 |
| CVE-2017-18704 | 6.5 | Apr 24 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.3.0.8 |
| CVE-2017-18741 | 6.5 | Apr 23 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.58 |
| CVE-2021-45639 | 6.1 | Dec 26 | Certain NETGEAR devices are affected by reflected XSS Affected: before 1.3.2.126 |
| CVE-2017-18700 | 6.1 | Apr 24 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.3.0.8 |
| CVE-2019-20756 | 6.1 | Apr 16 | Certain NETGEAR devices are affected by reflected XSS Affected: before 1.3.0.20 |
| CVE-2020-13245 | 5.9 | May 28 | Certain NETGEAR devices are affected by Missing SSL Certificate Validation Affected: v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100 |
| CVE-2024-52030 | 5.7 | Nov 5 | Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at ru_wan_flow.cgi Affected: 1.3.3.154 |
| CVE-2024-52029 | 5.7 | Nov 5 | Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at genie_pptp.cgi Affected: 1.3.3.154 |
| CVE-2024-52028 | 5.7 | Nov 5 | Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at wiz_pptp.cgi Affected: 1.3.3.154 |
| CVE-2024-52026 | 5.7 | Nov 5 | Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at bsw_pppoe.cgi Affected: 1.3.3.154 |
| CVE-2024-52025 | 5.7 | Nov 5 | Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at geniepppoe.cgi Affected: 1.3.3.154 |
| CVE-2024-52024 | 5.7 | Nov 5 | Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at wizpppoe.cgi Affected: 1.3.3.154 |
| CVE-2024-52023 | 5.7 | Nov 5 | Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe2.cgi Affected: 1.3.3.154 |
| CVE-2024-52016 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component wlg_adv.cgi via… Affected: 1.3.3.154 |
| CVE-2024-52015 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at bsw_pptp.cgi Affected: 1.3.3.154 |
| CVE-2024-52014 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at genie_pptp.cgi Affected: 1.3.3.154 |
| CVE-2024-52013 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at wiz_pptp.cgi Affected: 1.3.3.154 |
| CVE-2024-51020 | 5.7 | Nov 5 | Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the apn parameter at usbISP_detail_edit.cgi Affected: 1.3.3.154 |
| CVE-2024-51019 | 5.7 | Nov 5 | Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pppoe_localnetmask parameter at pppoe.cgi Affected: 1.3.3.154 |
| CVE-2024-51018 | 5.7 | Nov 5 | Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at pptp.cgi Affected: 1.3.3.154 |
| CVE-2024-51017 | 5.7 | Nov 5 | Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the l2tp_user_netmask parameter at l2tp.cgi Affected: 1.3.3.154 |
| CVE-2024-51015 | 5.7 | Nov 5 | Netgear R7000P v1.3.3.154 was discovered to contain a command injection vulnerability via the device_name2 parameter at operation_mode.cgi Affected: 1.3.3.154 |
| CVE-2024-51013 | 5.7 | Nov 5 | Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the RADIUSAddr%d_wla parameter at wireless.cgi Affected: 1.3.3.154 |
| CVE-2024-51011 | 5.7 | Nov 5 | Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe.cgi Affected: 1.3.3.154 |
| CVE-2024-51004 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usb_device.cgi via the cifs_user, read_access, and… Affected: 1.3.3.154 |
| CVE-2024-51003 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component ap_mode.cgi via… Affected: 1.3.3.154 |
| CVE-2024-51002 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the l2tp_user_ip parameter at l2tp.cgi Affected: 1.3.3.154 |
| CVE-2024-50997 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at pptp.cgi Affected: 1.3.3.154 |
| CVE-2024-50996 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpa_server parameter at genie_bpa.cgi Affected: 1.3.3.154 |
| CVE-2021-45649 | 5.5 | Dec 26 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.3.2.126 |
| CVE-2017-18847 | 5.5 | Apr 20 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.0.56 |
| CVE-2021-45673 | 5.4 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.3.3.140 |
| CVE-2018-21231 | 5.4 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.2.0.22 |
| CVE-2018-21230 | 5.4 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.2.0.22 |
| CVE-2021-45670 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.3.2.126 |
| CVE-2021-38534 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.3.1.64 |
| CVE-2017-18785 | 4.8 | Apr 22 | Certain NETGEAR devices are affected by XSS Affected: before 1.3.0.8 |
| CVE-2017-18769 | 4.6 | Apr 22 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.0.58 |
| CVE-2026-0417 | 4.5 | Jun 9 | Insufficient input validation in certain NETGEAR routers Affected: before 1.3.3.152 |