[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmleYEEHw3SxH7imB0r0u5JhVavM4z2MO3kyFdxmYAiY":3,"g5a-ex:netgear\u002Fbr500_firmware@*":74,"g5a-family:netgear\u002Fbr500_firmware":76},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":51,"seoMetadata":52,"meta":71},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"netgear","br500_firmware",0,7,"2021-04-14",[],"Br500 Firmware by Netgear is a technology product and 7 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,29,33,37,41,45],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2021-27255","This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the refresh_status.aspx endpoint. The issue results from a lack of authentication required to start a service on the server. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-12360.","2021-03-05",8.8,"v3.1","High",false,0.014,{"cveId":26,"description":27,"publishedDate":11,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":28},"CVE-2021-27253","This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the rc_service parameter provided to apply_bind.cgi. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-12303.",0.01127,{"cveId":30,"description":31,"publishedDate":11,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":32},"CVE-2021-27252","This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the vendor_specific DHCP opcode. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-12216.",0.01118,{"cveId":34,"description":35,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":36},"CVE-2021-27256","This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the rc_service parameter provided to apply_save.cgi. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-12355.",0.00963,{"cveId":38,"description":39,"publishedDate":11,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":40},"CVE-2021-27251","This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Authentication is not required to exploit this vulnerability The specific flaw exists within handling of firmware updates. The issue results from a fallback to a insecure protocol to deliver updates. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-12308.",0.00731,{"cveId":42,"description":43,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":44},"CVE-2021-27254","This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the apply_save.cgi endpoint. This issue results from the use of hard-coded encryption key. An attacker can leverage this vulnerability to execute arbitrary code in the context of root. Was ZDI-CAN-12287.",0.00516,{"cveId":46,"description":47,"publishedDate":19,"cvssScore":48,"cvssVersion":21,"severity":49,"isKev":23,"epssScore":50},"CVE-2021-27257","This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files via FTP. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-12362.",6.5,"Medium",0.00323,[],{"title":53,"metaDescription":54,"keywords":55,"structuredData":56},"Br500 Firmware by Netgear - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Br500 Firmware by Netgear with 7 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Br500 Firmware vulnerabilities, Br500 Firmware security, Br500 Firmware CVE, Netgear Br500 Firmware, Br500 Firmware threat intelligence, Netgear security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":57,"@type":58,"name":59,"description":54,"url":60,"manufacturer":61,"applicationCategory":65,"softwareVersion":66,"mainEntity":67},"https:\u002F\u002Fschema.org","SoftwareApplication","Br500 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetgear\u002Fbr500_firmware",{"@type":62,"name":63,"url":64},"Organization","Netgear","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetgear","Security Software","Multiple versions",{"@type":68,"name":69,"description":70,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Br500 Firmware Security Vulnerabilities","Security vulnerabilities affecting Br500 Firmware by Netgear",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":72,"apiVersion":73},"2026-10-19T21:49:21.596Z","3.0",{"rows":75,"total":9,"capped":23,"failed":9},[],[]]