XF
Product
Xr1000 Firmware
30
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 7Medium 15Low 0
Watch
Add Xr1000 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-45622 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.0.58 |
| CVE-2021-45621 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.0.58 |
| CVE-2021-45620 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.0.58 |
| CVE-2021-45616 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.0.58 |
| CVE-2021-45614 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.0.58 |
| CVE-2021-45613 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.0.58 |
| CVE-2021-45612 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.0.58 |
| CVE-2021-45513 | 9.6 | Dec 26 | NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker Affected: before 1.0.0.58 |
| CVE-2021-34982 | 8.8 | May 7 | NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.0.0.64 |
| CVE-2021-45522 | 8.8 | Dec 26 | NETGEAR XR1000 devices before 1.0.0.58 are affected by a hardcoded password Affected: before 1.0.0.58 |
| CVE-2021-45514 | 8.8 | Dec 26 | NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker Affected: before 1.0.0.58 |
| CVE-2021-45510 | 8.8 | Dec 26 | NETGEAR XR1000 devices before 1.0.0.58 are affected by authentication bypass Affected: before 1.0.0.58 |
| CVE-2026-9213 | 8.1 | Jun 9 | Insufficient input validation in certain NETGEAR routers Affected: before 1.0.2.86 |
| CVE-2021-45654 | 7.5 | Dec 26 | NETGEAR XR1000 devices before 1.0.0.58 are affected by disclosure of sensitive information Affected: before 1.0.0.58 |
| CVE-2024-35517 | 7.2 | Oct 11 | Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usb_remote_smb_conf.cgi via the share_name parameter Affected: 1.0.0.64 |
| CVE-2021-45549 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.0.58 |
| CVE-2026-9215 | 6.7 | Sep 8 | A CSRF vulnerability exists in certain NETGEAR XR series devices Affected: before 1.1.0.22 |
| CVE-2021-34983 | 6.5 | May 7 | NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability Affected: before 1.0.0.64 |
| CVE-2021-45643 | 6.5 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.0.0.58 |
| CVE-2021-45519 | 6.5 | Dec 26 | NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service Affected: before 1.0.0.58 |
| CVE-2021-45518 | 6.5 | Dec 26 | NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service Affected: before 1.0.0.58 |
| CVE-2021-45517 | 6.5 | Dec 26 | NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service Affected: before 1.0.0.58 |
| CVE-2026-11739 | 6.4 | Aug 11 | Command injection vulnerability in some NETGEAR Nighthawk devices Affected: before 1.1.0.22 |
| CVE-2026-11736 | 4.9 | Aug 11 | Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers Affected: before 1.1.0.22 |
| CVE-2026-11735 | 4.9 | Aug 11 | Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models Affected: before 1.1.0.22 |
| CVE-2026-0418 | 4.5 | Jun 9 | Certain NETGEAR devices allow administrators to tamper with system Affected: before 1.0.0.68 |
| CVE-2026-0417 | 4.5 | Jun 9 | Insufficient input validation in certain NETGEAR routers Affected: before 1.0.0.68 |
| CVE-2026-9210 | 4.5 | Jun 9 | Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router Affected: before 1.0.0.68 |
| CVE-2026-0410 | 4.5 | Jun 9 | Insufficient input validation in certain NETGEAR routers Affected: before 1.1.0.22 |
| CVE-2021-45604 | 4.5 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.0.58 |
Showing 30