XF
Product
Xr450 Firmware
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 12Medium 5Low 0
Watch
Add Xr450 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-45618 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 2.3.2.114 |
| CVE-2021-38516 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 2.3.2.32 |
| CVE-2020-35799 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: 2.3.2.32 |
| CVE-2021-34947 | 8.8 | May 7 | NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: before 2.3.2.130 |
| CVE-2021-27253 | 8.8 | Apr 14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800 Affected: before 2.3.2.114 |
| CVE-2021-27252 | 8.8 | Apr 14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 2.3.2.114 |
| CVE-2021-27251 | 8.8 | Apr 14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800 Affected: before 2.3.2.114 |
| CVE-2021-27256 | 8.8 | Mar 5 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 2.3.2.114 |
| CVE-2021-27255 | 8.8 | Mar 5 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 2.3.2.114 |
| CVE-2021-27254 | 8.8 | Mar 5 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800 Affected: before 2.3.2.114 |
| CVE-2021-29069 | 8.4 | Mar 23 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.114 |
| CVE-2026-9212 | 8.0 | Jun 9 | Insufficient authentication and input validation in certain NETGEAR products Affected: before 2.3.3.136 |
| CVE-2021-45602 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.130 |
| CVE-2021-45642 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 2.3.2.66 |
| CVE-2021-45640 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 2.3.2.56 |
| CVE-2020-26913 | 6.8 | Oct 9 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 2.3.2.40 |
| CVE-2021-27257 | 6.5 | Mar 5 | This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 2.3.2.114 |
| CVE-2021-45603 | 5.5 | Dec 26 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 2.3.2.130 |
| CVE-2021-38534 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 2.3.2.40 |
| CVE-2019-20721 | 4.8 | Apr 16 | Certain NETGEAR devices are affected by stored XSS Affected: before 2.3.2.32 |
Showing 20