RF
Product
R7450 Firmware
32
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 14Medium 11Low 0
Watch
Add R7450 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-45644 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.2.0.88 |
| CVE-2021-45637 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.2.0.62 |
| CVE-2021-45511 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.2.0.88 |
| CVE-2021-45501 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.1.0.84 |
| CVE-2021-38516 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 1.2.0.36 |
| CVE-2020-35795 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.2.0.72 |
| CVE-2020-26927 | 9.8 | Oct 9 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.2.0.62 |
| CVE-2021-34865 | 8.8 | Jan 25 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers Affected: before 1.2.0.88 |
| CVE-2021-45573 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.2.0.62 |
| CVE-2021-45551 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.2.0.62 |
| CVE-2020-27866 | 8.8 | Feb 12 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2,… Affected: before 1.2.0.76 |
| CVE-2020-27872 | 8.8 | Feb 4 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers Affected: before 1.2.0.76 |
| CVE-2020-26912 | 8.8 | Oct 9 | Certain NETGEAR devices are affected by CSRF Affected: before 1.2.0.62 |
| CVE-2020-26911 | 8.8 | Oct 9 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 1.2.0.62 |
| CVE-2021-45657 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by server-side injection Affected: before 1.2.0.76 |
| CVE-2021-45656 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by server-side injection Affected: before 1.2.0.76 |
| CVE-2021-45534 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.2.0.88 |
| CVE-2020-35841 | 7.6 | Dec 30 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.2.0.62 |
| CVE-2021-45647 | 7.5 | Dec 26 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.2.0.76 |
| CVE-2021-38531 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.2.0.76 |
| CVE-2020-26914 | 7.1 | Oct 9 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.2.0.62 |
| CVE-2020-27867 | 6.8 | Feb 12 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2,… Affected: before 1.2.0.76 |
| CVE-2020-27873 | 6.5 | Feb 4 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers Affected: before 1.2.0.76 |
| CVE-2020-26916 | 6.3 | Oct 9 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.2.0.50 |
| CVE-2021-44261 | 5.3 | Mar 17 | A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication Affected: All versions, or not specified |
| CVE-2021-45675 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.2.0.76 |
| CVE-2021-45672 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by Stored XSS Affected: before 1.2.0.76 |
| CVE-2021-38537 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.2.0.76 |
| CVE-2021-38536 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.2.0.76 |
| CVE-2021-38535 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.2.0.76 |
| CVE-2021-38534 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.2.0.36 |
| CVE-2020-35803 | 4.4 | Dec 30 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.2.0.74 |
Showing 32