RF
Product
Rax40 Firmware
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 11Medium 11Low 1
Watch
Add Rax40 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-48196 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.60 |
| CVE-2019-20646 | 9.8 | Apr 15 | NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials Affected: before 1.0.3.64 |
| CVE-2023-27358 | 8.8 | May 3 | NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability Affected: before 1.0.10.94 |
| CVE-2022-27645 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers Affected: before 1.0.10.110 |
| CVE-2022-27642 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.10.110 |
| CVE-2020-26898 | 8.8 | Oct 9 | NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings Affected: before 1.0.3.80 |
| CVE-2019-20641 | 8.8 | Apr 15 | NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level Affected: before 1.0.3.64 |
| CVE-2022-27647 | 8.0 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.10.110 |
| CVE-2019-20642 | 8.0 | Apr 15 | NETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass Affected: before 1.0.3.64 |
| CVE-2021-45493 | 7.5 | Dec 26 | Certain NETGEAR devices are affected by disclosure of administrative credentials Affected: before 1.0.4.102 |
| CVE-2021-38526 | 7.5 | Aug 11 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.3.94 |
| CVE-2019-20643 | 7.5 | Apr 15 | NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information Affected: before 1.0.3.64 |
| CVE-2021-41449 | 7.1 | Dec 9 | A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive… Affected: before 1.0.4.102 |
| CVE-2021-45549 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.3.96 |
| CVE-2026-0420 | 5.9 | Jun 9 | Missing TLS certificate validation in NETGEAR's ReadyCloud client app Affected: before 1.0.6.106 |
| CVE-2019-20647 | 5.7 | Apr 15 | NETGEAR RAX40 devices before 1.0.3.64 are affected by denial of service Affected: before 1.0.3.64 |
| CVE-2021-38533 | 5.4 | Aug 11 | NETGEAR RAX40 devices before 1.0.3.64 are affected by stored XSS Affected: before 1.0.3.64 |
| CVE-2021-45672 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by Stored XSS Affected: before 1.0.3.62 |
| CVE-2021-38537 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.3.62 |
| CVE-2021-38536 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.3.62 |
| CVE-2021-38535 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.3.62 |
| CVE-2019-20645 | 4.8 | Apr 15 | NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS Affected: before 1.0.3.62 |
| CVE-2019-20644 | 4.8 | Apr 15 | NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS Affected: before 1.0.3.62 |
| CVE-2021-45604 | 4.5 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.3.96 |
| CVE-2026-9216 | 3.5 | Sep 8 | Insufficient input validation vulnerability exists in certain NETGEAR RAX Models Affected: before 1.0.6.106 |
Showing 25