RF
Product
Rbr20 Firmware
79
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 25Medium 46Low 0
Watch
Add Rbr20 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-45658 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by server-side injection Affected: before 2.5.1.16 |
| CVE-2021-45619 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 2.7.3.22 |
| CVE-2021-45618 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 2.6.2.104 |
| CVE-2021-38530 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 2.5.1.16 |
| CVE-2021-38527 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 2.6.1.36 |
| CVE-2021-38516 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 2.3.0.28 |
| CVE-2020-35799 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 2.3.0.28 |
| CVE-2020-35795 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 2.6.1.36 |
| CVE-2021-34947 | 8.8 | May 7 | NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: before 2.7.4.24 |
| CVE-2022-27646 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 2.7.4.24 |
| CVE-2022-27644 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 2.7.4.24 |
| CVE-2021-45641 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 2.3.0.28 |
| CVE-2021-45626 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 2.6.1.36 |
| CVE-2021-45595 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.7.3.22 |
| CVE-2021-45548 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.7.3.22 |
| CVE-2021-27253 | 8.8 | Apr 14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800 Affected: before 2.6.2.104 |
| CVE-2021-27252 | 8.8 | Apr 14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 2.6.2.104 |
| CVE-2021-27251 | 8.8 | Apr 14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800 Affected: before 2.6.2.104 |
| CVE-2021-29068 | 8.8 | Mar 23 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 2.6.1.38 |
| CVE-2021-27256 | 8.8 | Mar 5 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 2.6.2.104 |
| CVE-2021-27255 | 8.8 | Mar 5 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 2.6.2.104 |
| CVE-2021-27254 | 8.8 | Mar 5 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800 Affected: before 2.6.2.104 |
| CVE-2020-27861 | 8.8 | Feb 12 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers Affected: before 2.6.1.36 |
| CVE-2026-9212 | 8.0 | Jun 9 | Insufficient authentication and input validation in certain NETGEAR products Affected: All versions, or not specified |
| CVE-2021-45661 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by server-side injection Affected: before 2.5.1.16 |
| CVE-2021-45660 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by server-side injection Affected: before 2.5.1.16 |
| CVE-2021-45659 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by server-side injection Affected: before 2.5.1.16 |
| CVE-2021-45657 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by server-side injection Affected: before 2.5.1.16 |
| CVE-2021-45656 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by server-side injection Affected: before 2.5.1.16 |
| CVE-2022-40620 | 7.7 | Jan 28 | FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its… Affected: before 2.7.2.26 |
| CVE-2022-40619 | 7.7 | Jan 28 | FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices Affected: before 2.7.2.26 |
| CVE-2021-45642 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 2.7.3.22 |
| CVE-2021-45640 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 2.3.0.28 |
| CVE-2021-45594 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.7.3.22 |
| CVE-2021-45593 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.7.3.22 |
| CVE-2020-26913 | 6.8 | Oct 9 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 2.3.0.28 |
| CVE-2019-20748 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 2.3.0.28 |
| CVE-2019-20747 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 2.3.0.22 |
| CVE-2019-20724 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.0.28 |
| CVE-2019-20722 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.0.28 |
| CVE-2021-27257 | 6.5 | Mar 5 | This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 2.6.2.104 |
| CVE-2019-20717 | 6.5 | Apr 16 | Certain NETGEAR devices are affected by denial of service Affected: before 2.3.0.28 |
| CVE-2021-38538 | 6.1 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 2.3.5.26 |
| CVE-2020-13245 | 5.9 | May 28 | Certain NETGEAR devices are affected by Missing SSL Certificate Validation Affected: v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100 |
| CVE-2020-35833 | 4.8 | Dec 30 | Certain NETGEAR devices are affected by stored XSS Affected: before 2.3.5.26 |
| CVE-2020-35832 | 4.8 | Dec 30 | Certain NETGEAR devices are affected by stored XSS Affected: before 2.3.5.26 |
| CVE-2020-35830 | 4.8 | Dec 30 | Certain NETGEAR devices are affected by stored XSS Affected: before 2.3.5.26 |
| CVE-2020-35829 | 4.8 | Dec 30 | Certain NETGEAR devices are affected by stored XSS Affected: before 2.3.5.26 |
| CVE-2020-35828 | 4.8 | Dec 30 | Certain NETGEAR devices are affected by stored XSS Affected: before 2.3.5.26 |
| CVE-2020-35823 | 4.8 | Dec 30 | Certain NETGEAR devices are affected by stored XSS Affected: before 2.3.5.26 |