RF
Product
R8500 Firmware
126
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 50Medium 65Low 1
Watch
Add R8500 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-51004 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usb_device.cgi via the cifs_user, read_access, and… Affected: 1.0.2.160 |
| CVE-2024-51003 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component ap_mode.cgi via… Affected: 1.0.2.160 |
| CVE-2024-51002 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the l2tp_user_ip parameter at l2tp.cgi Affected: 1.0.2.160 |
| CVE-2024-51001 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the sysDNSHost parameter at ddns.cgi Affected: 1.0.2.160 |
| CVE-2024-51000 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component wireless.cgi via the opmode, opmode_an, and opmode_an_2 parameters Affected: 1.0.2.160 |
| CVE-2024-50999 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at password.cgi Affected: 1.0.2.160 |
| CVE-2024-50998 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component openvpn.cgi via the openvpn_service_port and openvpn_service_port_tun… Affected: 1.0.2.160 |
| CVE-2024-50997 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at pptp.cgi Affected: 1.0.2.160 |
| CVE-2024-50996 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpa_server parameter at genie_bpa.cgi Affected: 1.0.2.160 |
| CVE-2024-50995 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the share_name parameter at usb_remote_smb_conf.cgi Affected: 1.0.2.160 |
| CVE-2024-50994 | 5.7 | Nov 5 | Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component ipv6_fix.cgi via the ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length,… Affected: 1.0.2.160 |
| CVE-2017-18778 | 5.5 | Apr 22 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.2.104 |
| CVE-2017-18789 | 5.5 | Apr 22 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.2.100 |
| CVE-2017-18847 | 5.5 | Apr 20 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.2.100_1.0.82 |
| CVE-2018-21231 | 5.4 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.2.104 |
| CVE-2018-21230 | 5.4 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.2.104 |
| CVE-2021-38534 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.2.130 |
| CVE-2020-26918 | 4.8 | Oct 9 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.2.128 |
| CVE-2020-26917 | 4.8 | Oct 9 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.2.128 |
| CVE-2017-18785 | 4.8 | Apr 22 | Certain NETGEAR devices are affected by XSS Affected: before 1.0.2.110 |
| CVE-2017-18769 | 4.6 | Apr 22 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.0.2.104 |
| CVE-2026-0417 | 4.5 | Jun 9 | Insufficient input validation in certain NETGEAR routers Affected: All versions, or not specified |
| CVE-2026-9210 | 4.5 | Jun 9 | Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router Affected: All versions, or not specified |
| CVE-2019-20729 | 4.4 | Apr 16 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.2.116 |
| CVE-2017-18710 | 4.3 | Apr 24 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.2.106 |
| CVE-2021-38514 | 2.7 | Aug 11 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.0.2.128 |