XF
Product
Xr500 Firmware
116
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 42Medium 68Low 0
Watch
Add Xr500 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-34947 | 8.8 | May 7 | NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: before 2.3.2.130 |
| CVE-2021-45641 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 2.3.2.56 |
| CVE-2021-45548 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.66 |
| CVE-2021-27253 | 8.8 | Apr 14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800 Affected: before 2.3.2.114 |
| CVE-2021-27252 | 8.8 | Apr 14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 2.3.2.114 |
| CVE-2021-27251 | 8.8 | Apr 14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800 Affected: before 2.3.2.114 |
| CVE-2021-27256 | 8.8 | Mar 5 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 2.3.2.114 |
| CVE-2021-27255 | 8.8 | Mar 5 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76 Affected: before 2.3.2.114 |
| CVE-2021-27254 | 8.8 | Mar 5 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800 Affected: before 2.3.2.114 |
| CVE-2018-21118 | 8.8 | Apr 22 | NETGEAR XR500 devices before 2.3.2.32 are affected by authentication bypass Affected: before 2.3.2.32 |
| CVE-2018-21117 | 8.8 | Apr 22 | NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler Affected: before 2.3.2.32 |
| CVE-2018-21116 | 8.8 | Apr 22 | NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers Affected: before 2.3.2.32 |
| CVE-2018-21115 | 8.8 | Apr 22 | NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers Affected: before 2.3.2.32 |
| CVE-2019-20685 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 2.3.2.32 |
| CVE-2019-20684 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 2.3.2.32 |
| CVE-2019-20683 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 2.3.2.32 |
| CVE-2019-20682 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 2.3.2.32 |
| CVE-2019-20640 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 2.3.2.32 |
| CVE-2020-11770 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.32 |
| CVE-2021-29069 | 8.4 | Mar 23 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.114 |
| CVE-2020-35839 | 8.1 | Dec 30 | Certain NETGEAR devices are affected by Stored XSS Affected: before 2.3.2.56 |
| CVE-2020-35831 | 8.1 | Dec 30 | Certain NETGEAR devices are affected by stored XSS Affected: before 2.3.2.56 |
| CVE-2026-9212 | 8.0 | Jun 9 | Insufficient authentication and input validation in certain NETGEAR products Affected: before 2.3.3.136 |
| CVE-2020-35787 | 8.0 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 2.3.2.40 |
| CVE-2019-20711 | 8.0 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.32 |
| CVE-2019-20710 | 8.0 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.32 |
| CVE-2019-20709 | 8.0 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.32 |
| CVE-2019-20708 | 8.0 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.32 |
| CVE-2019-20707 | 8.0 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.32 |
| CVE-2019-20706 | 8.0 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.32 |
| CVE-2019-20705 | 8.0 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.32 |
| CVE-2019-20704 | 8.0 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.32 |
| CVE-2019-20703 | 8.0 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.32 |
| CVE-2019-20702 | 8.0 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.32 |
| CVE-2019-20701 | 8.0 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.32 |
| CVE-2019-20680 | 8.0 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.32 |
| CVE-2021-45602 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.130 |
| CVE-2019-20655 | 7.8 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 2.3.2.56 |
| CVE-2019-20650 | 7.5 | Apr 15 | Certain NETGEAR devices are affected by denial of service Affected: before 2.3.2.56 |
| CVE-2021-45642 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 2.3.2.66 |
| CVE-2021-45640 | 7.2 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 2.3.2.56 |
| CVE-2021-38525 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 2.3.2.40 |
Showing 42