RF
Product
Rax38 Firmware
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 1Low 1
Watch
Add Rax38 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-27358 | 8.8 | May 3 | NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability Affected: before 1.0.10.94 |
| CVE-2022-27645 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers Affected: before 1.0.10.110 |
| CVE-2022-27642 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.10.110 |
| CVE-2022-27647 | 8.0 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.10.110 |
| CVE-2021-45493 | 7.5 | Dec 26 | Certain NETGEAR devices are affected by disclosure of administrative credentials Affected: before 1.0.4.102 |
| CVE-2021-38526 | 7.5 | Aug 11 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.3.94 |
| CVE-2021-41449 | 7.1 | Dec 9 | A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive… Affected: before 1.0.4.102 |
| CVE-2026-0420 | 5.9 | Jun 9 | Missing TLS certificate validation in NETGEAR's ReadyCloud client app Affected: before 1.0.6.106 |
| CVE-2026-9216 | 3.5 | Sep 8 | Insufficient input validation vulnerability exists in certain NETGEAR RAX Models Affected: before 1.0.6.106 |
Showing 9