RF
Product
R8500 Firmware
126
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 50Medium 65Low 1
Watch
Add R8500 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-45624 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.2.144 |
| CVE-2021-45621 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.2.154 |
| CVE-2021-45611 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.144 |
| CVE-2021-45609 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.144 |
| CVE-2021-45527 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.144 |
| CVE-2021-45512 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by weak cryptography Affected: before 1.0.2.134 |
| CVE-2020-35796 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.134 |
| CVE-2018-21162 | 9.8 | Apr 23 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.2.74 |
| CVE-2018-21134 | 9.8 | Apr 23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.2.122 |
| CVE-2019-20730 | 9.8 | Apr 16 | Certain NETGEAR devices are affected by SQL injection Affected: before 1.0.2.116 |
| CVE-2021-34982 | 8.8 | May 7 | NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.0.2.156 |
| CVE-2022-27645 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers Affected: before 1.0.2.158 |
| CVE-2022-27643 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.2.158 |
| CVE-2022-27642 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.2.158 |
| CVE-2022-27947 | 8.8 | Mar 26 | NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr,… Affected: 1.0.2.158 |
| CVE-2022-27946 | 8.8 | Mar 26 | NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd… Affected: 1.0.2.158 |
| CVE-2022-27945 | 8.8 | Mar 26 | NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd… Affected: 1.0.2.158 |
| CVE-2021-45615 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.2.154 |
| CVE-2021-34991 | 8.8 | Nov 15 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers Affected: before 1.0.2.156 |
| CVE-2021-38539 | 8.8 | Aug 11 | Certain NETGEAR devices are affected by privilege escalation Affected: before 1.0.2.130 |
| CVE-2021-27239 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers Affected: before 1.0.2.144 |
| CVE-2020-28373 | 8.8 | Nov 9 | upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overflow Affected: 1.0.2.136 |
| CVE-2017-18864 | 8.8 | May 5 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.104 |
| CVE-2018-21169 | 8.8 | Apr 27 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.2.104 |
| CVE-2018-21093 | 8.8 | Apr 27 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.2.122 |
| CVE-2017-18708 | 8.8 | Apr 24 | Certain NETGEAR devices are affected by CSRF Affected: before 1.0.2.94 |
| CVE-2017-18738 | 8.8 | Apr 23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.2.106 |
| CVE-2017-18733 | 8.8 | Apr 23 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.2.100 |
| CVE-2017-18744 | 8.8 | Apr 23 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.74 |
| CVE-2017-18743 | 8.8 | Apr 23 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.2.94 |
| CVE-2017-18742 | 8.8 | Apr 23 | Certain NETGEAR devices are affected by CSRF Affected: before 1.0.2.74 |
| CVE-2017-18755 | 8.8 | Apr 22 | Certain NETGEAR devices are affected by CSRF Affected: before 1.0.2.106 |
| CVE-2017-18772 | 8.8 | Apr 22 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.2.74 |
| CVE-2017-18848 | 8.8 | Apr 20 | Certain NETGEAR devices are affected by CSRF Affected: before 1.0.2.94 |
| CVE-2017-18842 | 8.8 | Apr 20 | Certain NETGEAR devices are affected by CSRF Affected: before 1.0.2.94 |
| CVE-2017-18852 | 8.8 | Apr 20 | Certain NETGEAR devices are affected by CSRF and authentication bypass Affected: before 1.0.2.100_1.0.82 |
| CVE-2019-20753 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.2.122 |
| CVE-2019-20739 | 8.8 | Apr 16 | NETGEAR R8500 devices before v1.0.2.128 are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.128 |
| CVE-2019-20734 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.106 |
| CVE-2020-11770 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.128 |
| CVE-2017-18794 | 8.4 | Apr 21 | Certain NETGEAR devices are affected by command injection Affected: before 1.0.2.100 |
| CVE-2017-18850 | 8.4 | Apr 20 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.2.100_1.0.82 |
| CVE-2019-17372 | 8.1 | Oct 9 | Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi Affected: All versions, or not specified |
| CVE-2024-52022 | 8.0 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component wlg_adv.cgi via… Affected: 1.0.2.160 |
| CVE-2024-52021 | 8.0 | Nov 5 | Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at bsw_fix.cgi Affected: 1.0.2.160 |
| CVE-2024-52020 | 8.0 | Nov 5 | Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at wiz_fix2.cgi Affected: 1.0.2.160 |
| CVE-2024-52019 | 8.0 | Nov 5 | Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at genie_fix2.cgi Affected: 1.0.2.160 |
| CVE-2024-51010 | 8.0 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component ap_mode.cgi via… Affected: 1.0.2.160 |
| CVE-2024-51009 | 8.0 | Nov 5 | Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at ether.cgi Affected: 1.0.2.160 |
| CVE-2024-51005 | 8.0 | Nov 5 | Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the share_name parameter at usb_remote_smb_conf.cgi Affected: 1.0.2.160 |