RF
Product
Rax40 Firmware
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 11Medium 11Low 1
Watch
Add Rax40 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-27358 | 8.8 | May 3 | NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability Affected: before 1.0.10.94 |
| CVE-2022-27645 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers Affected: before 1.0.10.110 |
| CVE-2022-27642 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.10.110 |
| CVE-2020-26898 | 8.8 | Oct 9 | NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings Affected: before 1.0.3.80 |
| CVE-2019-20641 | 8.8 | Apr 15 | NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level Affected: before 1.0.3.64 |
| CVE-2022-27647 | 8.0 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.10.110 |
| CVE-2019-20642 | 8.0 | Apr 15 | NETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass Affected: before 1.0.3.64 |
| CVE-2021-45493 | 7.5 | Dec 26 | Certain NETGEAR devices are affected by disclosure of administrative credentials Affected: before 1.0.4.102 |
| CVE-2021-38526 | 7.5 | Aug 11 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.3.94 |
| CVE-2019-20643 | 7.5 | Apr 15 | NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information Affected: before 1.0.3.64 |
| CVE-2021-41449 | 7.1 | Dec 9 | A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive… Affected: before 1.0.4.102 |
Showing 11
