RF
Product
R8000 Firmware
On CISA KEVExploited in the wild
118
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 19High 52Medium 46Low 1
Watch
Add R8000 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6277 In wildKEV | 8.8 | Dec 14 | NETGEAR Multiple Routers Remote Code Execution Vulnerability Affected: through 1.0.3.26 |
| CVE-2021-34236 | 9.8 | Sep 8 | Buffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to execute arbitrary code or cause a denial-of-service by sending a crafted POST to… Affected: 1.0.4.56 |
| CVE-2021-45624 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.4.62 |
| CVE-2021-45622 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.4.68 |
| CVE-2021-45621 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.4.74 |
| CVE-2021-45620 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.4.74 |
| CVE-2021-45617 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.4.66 |
| CVE-2021-45616 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.4.68 |
| CVE-2021-45612 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.4.74 |
| CVE-2021-45610 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.4.62 |
| CVE-2021-45527 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.4.52 |
| CVE-2021-45512 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by weak cryptography Affected: before 1.0.4.58 |
| CVE-2021-38516 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 1.0.4.28 |
| CVE-2020-35796 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.4.58 |
| CVE-2020-35795 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.4.58 |
| CVE-2018-21162 | 9.8 | Apr 23 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.3.36 |
| CVE-2018-21134 | 9.8 | Apr 23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.4.18 |
| CVE-2019-20730 | 9.8 | Apr 16 | Certain NETGEAR devices are affected by SQL injection Affected: before 1.0.4.12 |
| CVE-2021-45524 | 9.1 | Dec 26 | NETGEAR R8000 devices before 1.0.4.62 are affected by a buffer overflow by an authenticated user Affected: before 1.0.4.62 |
| CVE-2019-5016 | 9.1 | Jun 17 | An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least two NETGEAR… Affected: 1.0.4.28_10.1.54 |
| CVE-2021-34982 | 8.8 | May 7 | NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.0.4.76 |
| CVE-2022-27646 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.4.84 |
| CVE-2022-27645 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers Affected: before 1.0.4.84 |
| CVE-2022-27644 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.4.84 |
| CVE-2022-27643 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.4.84 |
| CVE-2022-27642 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.4.84 |
| CVE-2021-45606 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.4.74 |
| CVE-2021-45547 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.4.74 |
| CVE-2021-45546 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.4.74 |
| CVE-2021-45544 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.4.74 |
| CVE-2021-45541 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.4.68 |
| CVE-2021-45530 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.4.74 |
| CVE-2021-45526 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.4.52 |
| CVE-2021-45525 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.4.46 |
| CVE-2021-45500 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.4.68 |
| CVE-2021-34991 | 8.8 | Nov 15 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers Affected: before 1.0.4.76 |
| CVE-2021-27239 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers Affected: before 1.0.4.68 |
| CVE-2021-29068 | 8.8 | Mar 23 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.4.58 |
| CVE-2020-28373 | 8.8 | Nov 9 | upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overflow Affected: 1.0.4.62 |
| CVE-2018-21093 | 8.8 | Apr 27 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.4.18 |
| CVE-2017-18738 | 8.8 | Apr 23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.3.48 |
| CVE-2017-18744 | 8.8 | Apr 23 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.3.24 |
| CVE-2017-18743 | 8.8 | Apr 23 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.3.36 |
| CVE-2017-18742 | 8.8 | Apr 23 | Certain NETGEAR devices are affected by CSRF Affected: before 1.0.3.32 |
| CVE-2017-18756 | 8.8 | Apr 22 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.4.2 |
| CVE-2017-18772 | 8.8 | Apr 22 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.3.24 |
| CVE-2019-20753 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.4.18 |
| CVE-2020-11770 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.4.28 |
| CVE-2021-45540 | 8.4 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.4.74 |
| CVE-2017-18794 | 8.4 | Apr 21 | Certain NETGEAR devices are affected by command injection Affected: before 1.0.3.54 |