RF
Product
R9000 Firmware
214
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 57Medium 145Low 1
Watch
Add R9000 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-34947 | 8.8 | May 7 | NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: before 1.0.5.36 |
| CVE-2021-45641 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.4.12 |
| CVE-2021-45548 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.5.2 |
| CVE-2021-27253 | 8.8 | Apr 14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800 Affected: before 1.0.5.28 |
| CVE-2021-27252 | 8.8 | Apr 14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 1.0.5.28 |
| CVE-2021-27251 | 8.8 | Apr 14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800 Affected: before 1.0.5.28 |
| CVE-2021-27256 | 8.8 | Mar 5 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 1.0.5.28 |
| CVE-2021-27255 | 8.8 | Mar 5 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 1.0.5.28 |
| CVE-2021-27254 | 8.8 | Mar 5 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800 Affected: before 1.0.5.28 |
| CVE-2018-21224 | 8.8 | Apr 28 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.52 |
| CVE-2018-21223 | 8.8 | Apr 28 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.52 |
| CVE-2018-21222 | 8.8 | Apr 28 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.52 |
| CVE-2018-21221 | 8.8 | Apr 28 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.52 |
| CVE-2018-21220 | 8.8 | Apr 28 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.52 |
| CVE-2018-21219 | 8.8 | Apr 28 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.52 |
| CVE-2018-21218 | 8.8 | Apr 28 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.52 |
| CVE-2018-21215 | 8.8 | Apr 28 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.52 |
| CVE-2018-21214 | 8.8 | Apr 28 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.52 |
| CVE-2018-21213 | 8.8 | Apr 28 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.52 |
| CVE-2018-21211 | 8.8 | Apr 28 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.52 |
| CVE-2018-21204 | 8.8 | Apr 28 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.2.52 |
| CVE-2018-21203 | 8.8 | Apr 28 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.2.52 |
| CVE-2018-21202 | 8.8 | Apr 28 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.2.52 |
| CVE-2018-21169 | 8.8 | Apr 27 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.2.52 |
| CVE-2017-18705 | 8.8 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.2.52 |
| CVE-2017-18703 | 8.8 | Apr 24 | Certain NETGEAR devices are affected by CSRF Affected: before 1.0.2.52 |
| CVE-2017-18711 | 8.8 | Apr 24 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.2.52 |
| CVE-2017-18751 | 8.8 | Apr 23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.0.2.52 |
| CVE-2017-18749 | 8.8 | Apr 23 | Certain NETGEAR devices are affected by CSRF Affected: before 1.0.2.40 |
| CVE-2017-18748 | 8.8 | Apr 23 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.2.30 |
| CVE-2017-18764 | 8.8 | Apr 22 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.2.52 |
| CVE-2018-21113 | 8.8 | Apr 22 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.4.12 |
| CVE-2019-20760 | 8.8 | Apr 16 | NETGEAR R9000 devices before 1.0.4.26 are affected by authentication bypass Affected: before 1.0.4.26 |
| CVE-2020-11770 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.4.12 |
| CVE-2020-35839 | 8.1 | Dec 30 | Certain NETGEAR devices are affected by Stored XSS Affected: before 1.0.4.28 |
| CVE-2020-35831 | 8.1 | Dec 30 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.4.28 |
| CVE-2026-9212 | 8.0 | Jun 9 | Insufficient authentication and input validation in certain NETGEAR products Affected: before 1.0.6.46 |
| CVE-2020-35787 | 8.0 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.4.12 |
| CVE-2019-20680 | 8.0 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.4.12 |
| CVE-2021-45602 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.5.38 |
| CVE-2022-40619 | 7.7 | Jan 28 | FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices Affected: before 1.0.5.42 |
| CVE-2022-40620 | 7.7 | Jan 28 | FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its… Affected: before 1.0.5.42 |
| CVE-2018-21168 | 7.5 | Apr 27 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.2.52 |
| CVE-2020-11792 | 7.5 | Apr 15 | NETGEAR R8900, R9000, RAX120, and XR700 devices before 2020-01-20 are affected by Transport Layer Security (TLS) certificate private key disclosure Affected: All versions, or not specified |
| CVE-2019-20650 | 7.5 | Apr 15 | Certain NETGEAR devices are affected by denial of service Affected: before 1.0.5.2 |
| CVE-2023-23110 | 7.4 | Feb 2 | An exploitable firmware modification vulnerability was discovered in certain Netgear products Affected: through 1.0.3.6 |
| CVE-2021-45642 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.5.26 |
| CVE-2021-45640 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.4.12 |
| CVE-2021-45552 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.5.2 |
| CVE-2021-38525 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.4.12 |