RF
Product
R7960p Firmware
47
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 23Medium 11Low 0
Watch
Add R7960p Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-48322 | 9.8 | Feb 13 | NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability Affected: before 1.4.4.94 |
| CVE-2022-48196 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.4.4.94 |
| CVE-2021-45622 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.4.2.84 |
| CVE-2021-45621 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.4.2.84 |
| CVE-2021-45620 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.4.2.84 |
| CVE-2021-45617 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.4.1.66 |
| CVE-2021-45616 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.4.2.84 |
| CVE-2021-45612 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.4.2.84 |
| CVE-2021-45610 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.4.1.64 |
| CVE-2021-45527 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.4.1.68 |
| CVE-2021-38516 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 1.4.1.44 |
| CVE-2020-35796 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.4.1.62 |
| CVE-2020-35795 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.4.1.62 |
| CVE-2021-34982 | 8.8 | May 7 | NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.4.2.84 |
| CVE-2022-27646 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.4.3.88 |
| CVE-2022-27645 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers Affected: before 1.4.3.88 |
| CVE-2022-27644 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.4.3.88 |
| CVE-2022-27643 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.4.3.88 |
| CVE-2022-27642 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.4.3.88 |
| CVE-2021-45615 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.4.2.84 |
| CVE-2021-45606 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.4.2.84 |
| CVE-2021-45547 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.4.2.84 |
| CVE-2021-45546 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.4.2.84 |
| CVE-2021-45544 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.4.2.84 |
| CVE-2021-45530 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.4.2.84 |
| CVE-2021-45499 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.4.2.84 |
| CVE-2021-34991 | 8.8 | Nov 15 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers Affected: before 1.4.2.84 |
| CVE-2021-27239 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers Affected: before 1.4.1.68 |
| CVE-2021-29068 | 8.8 | Mar 23 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.4.1.62 |
| CVE-2021-45540 | 8.4 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.4.2.84 |
| CVE-2021-29073 | 8.4 | Mar 23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.4.1.66 |
| CVE-2021-29080 | 8.1 | Mar 23 | Certain NETGEAR devices are affected by password reset by an unauthenticated attacker Affected: before 1.4.1.66 |
| CVE-2022-27647 | 8.0 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.4.3.88 |
| CVE-2022-48176 | 7.8 | Jan 31 | Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authentication stack… Affected: before 1.4.4.94 |
| CVE-2020-35798 | 7.8 | Dec 30 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.4.1.50 |
| CVE-2021-45647 | 7.5 | Dec 26 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.4.1.66 |
| CVE-2021-45555 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.4.2.84 |
| CVE-2021-45549 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.4.2.84 |
| CVE-2021-45545 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.4.2.84 |
| CVE-2021-45539 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.4.2.84 |
| CVE-2021-34983 | 6.5 | May 7 | NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability Affected: before 1.4.2.84 |
| CVE-2021-45639 | 6.1 | Dec 26 | Certain NETGEAR devices are affected by reflected XSS Affected: before 1.4.1.66 |
| CVE-2021-45668 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.4.1.66 |
| CVE-2021-45667 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.4.1.66 |
| CVE-2026-0417 | 4.5 | Jun 9 | Insufficient input validation in certain NETGEAR routers Affected: before 1.4.4.92 |
| CVE-2026-9210 | 4.5 | Jun 9 | Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router Affected: before 1.4.4.92 |
| CVE-2021-45604 | 4.5 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.4.2.84 |
Showing 47
