RF
Product
R8500 Firmware
126
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 50Medium 65Low 1
Watch
Add R8500 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-50993 | 8.0 | Nov 5 | Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at admin_account.cgi Affected: 1.0.2.160 |
| CVE-2022-27647 | 8.0 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.2.158 |
| CVE-2019-20680 | 8.0 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.128 |
| CVE-2017-18709 | 7.8 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.2.94 |
| CVE-2017-18777 | 7.8 | Apr 22 | Certain NETGEAR devices are affected by administrative password disclosure Affected: before 1.0.2.94 |
| CVE-2017-18849 | 7.8 | Apr 20 | Certain NETGEAR devices are affected by command injection Affected: before 1.0.2.100_1.0.82 |
| CVE-2018-21168 | 7.5 | Apr 27 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.2.104 |
| CVE-2018-21139 | 7.5 | Apr 23 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.2.122 |
| CVE-2017-18799 | 7.5 | Apr 21 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.2.74 |
| CVE-2018-21156 | 7.2 | Apr 27 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.116 |
| CVE-2021-45550 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.128 |
| CVE-2017-18865 | 6.8 | May 5 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.2.104 |
| CVE-2018-21225 | 6.8 | Apr 28 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.106 |
| CVE-2017-18707 | 6.8 | Apr 24 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.106 |
| CVE-2017-18767 | 6.8 | Apr 22 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.74 |
| CVE-2017-18759 | 6.8 | Apr 22 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.2.104 |
| CVE-2019-20762 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.128 |
| CVE-2019-20755 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.2.122 |
| CVE-2019-20754 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.122 |
| CVE-2019-20740 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.2.130 |
| CVE-2019-20719 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.128 |
| CVE-2019-20718 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: All versions, or not specified |
| CVE-2019-20713 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.2.128 |
| CVE-2019-20712 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.128 |
| CVE-2017-18788 | 6.7 | Apr 22 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.110 |
| CVE-2017-18846 | 6.7 | Apr 20 | Certain NETGEAR devices are affected by a stack-based buffer overflow Affected: before 1.0.2.100_1.0.82 |
| CVE-2017-18851 | 6.7 | Apr 20 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.94 |
| CVE-2019-20737 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.2.122 |
| CVE-2019-20733 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.2.122 |
| CVE-2019-20732 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.106 |
| CVE-2019-20731 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.116 |
| CVE-2019-20728 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.116 |
| CVE-2019-20700 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.2.122 |
| CVE-2019-20692 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.2.122 |
| CVE-2021-34983 | 6.5 | May 7 | NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability Affected: before 1.0.2.156 |
| CVE-2017-18853 | 6.5 | Apr 29 | Certain NETGEAR devices are affected by password recovery and file access Affected: through 1.0.2.86 |
| CVE-2017-18704 | 6.5 | Apr 24 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.2.106 |
| CVE-2017-18741 | 6.5 | Apr 23 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.2.94 |
| CVE-2017-18752 | 6.5 | Apr 22 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.2.94 |
| CVE-2017-18797 | 6.2 | Apr 21 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.2.100 |
| CVE-2017-18790 | 6.2 | Apr 21 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.2.100 |
| CVE-2017-18700 | 6.1 | Apr 24 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.2.106 |
| CVE-2017-18745 | 6.1 | Apr 23 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.2.74 |
| CVE-2019-20756 | 6.1 | Apr 16 | Certain NETGEAR devices are affected by reflected XSS Affected: before 1.0.2.94 |
| CVE-2024-52016 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component wlg_adv.cgi via… Affected: 1.0.2.160 |
| CVE-2024-52015 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at bsw_pptp.cgi Affected: 1.0.2.160 |
| CVE-2024-52014 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at genie_pptp.cgi Affected: 1.0.2.160 |
| CVE-2024-52013 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at wiz_pptp.cgi Affected: 1.0.2.160 |
| CVE-2024-51012 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6_pri_dns parameter at ipv6_fix.cgi Affected: 1.0.2.160 |
| CVE-2024-51006 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6_static_ip parameter in the ipv6_tunnel function Affected: 1.0.2.160 |