Netgear vulnerabilities8 known to be exploited.
Netgear has 1,290 published vulnerabilities across 1,104 products in our catalogue. 8 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is R7800 Firmware, with 245. If you run Netgear software, patch the exploited flaws first.
The most recent Netgear flaw added to the known-exploited list is CVE-2017-5521, on 8 September 2022. We keep watching the known-exploited list.
Which Netgear products have the most vulnerabilities?
R7800 Firmware leads with 245 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Netgear vulnerabilities are being exploited?
8 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.1NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server.
- 9.8NETGEAR Multiple Devices Buffer Overflow Vulnerability
Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution.
- 9.8NETGEAR Multiple WAP Devices Command Injection Vulnerability
Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface.
- 9.8NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution.
- 8.8NETGEAR DGN2200 Devices OS Command Injection Vulnerability
dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands
- 9.8NETGEAR DGN2200 Remote Code Execution Vulnerability
NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.
- 8.8NETGEAR Multiple Routers Remote Code Execution Vulnerability
NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.
- 9.8Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability
Netgear JGS516PE devices contain a missing function level access control vulnerability.
Which Netgear flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta,...
- 98%
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before...
- 95%CVE-2016-5674Critical
__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via...
- 94%CVE-2016-1524Critical
Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileUpload.do or (2)...
- 89%
An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices.
- 87%CVE-2020-10924High
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers.
- 85%CVE-2020-10923High
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers.
- 83%
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html.
- 77%CVE-2016-10176Critical
The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device.
- 75%CVE-2016-1525High
Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read arbitrary files via a ..
All Netgear products we track.
528 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- R7800 Firmwarer7800_firmware245 vulnerabilities23 versions
- R9000 Firmwarer9000_firmware213 vulnerabilities19 versions
- R6700r6700173 vulnerabilities2 versions
- R6700 Firmwarer6700_firmware173 vulnerabilities39 versions
- D7800 Firmwared7800_firmware172 vulnerabilities15 versions
- R7000p Firmwarer7000p_firmware153 vulnerabilities26 versions
- Rbr850 Firmwarerbr850_firmware145 vulnerabilities21 versions
- Rbs850 Firmwarerbs850_firmware143 vulnerabilities21 versions
- Rbk852 Firmwarerbk852_firmware142 vulnerabilities6 versions
- R7000 Firmwarer7000_firmware133 vulnerabilities30 versions
- R8900 Firmwarer8900_firmware133 vulnerabilities12 versions
- R6900r6900132 vulnerabilities1 version
- R6900 Firmwarer6900_firmware132 vulnerabilities25 versions
- Rbs750 Firmwarerbs750_firmware128 vulnerabilities18 versions
- R7500r7500126 vulnerabilities1 version
- R7500 Firmwarer7500_firmware126 vulnerabilities20 versions
- R8500 Firmwarer8500_firmware125 vulnerabilities18 versions
- Rbr750 Firmwarerbr750_firmware125 vulnerabilities18 versions
- Wndr4500wndr4500124 vulnerabilities3 versions
- Wndr4500 Firmwarewndr4500_firmware124 vulnerabilities13 versions
- Wndr4300wndr4300123 vulnerabilities2 versions
- Wndr4300 Firmwarewndr4300_firmware123 vulnerabilities14 versions
- Rbk752 Firmwarerbk752_firmware120 vulnerabilities5 versions
- R8000 Firmwarer8000_firmware119 vulnerabilities29 versions
This directory lists the 528 Netgear products with at least one tracked version, of 1,104 in our catalogue.
Running Netgear? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server.
- Matched to
- R6700 on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 1,290 published vulnerabilities across 1,104 products and 2,632 versions from Netgear. The most recent Netgear flaw added to the known-exploited list is CVE-2017-5521, on 8 September 2022.
8 Netgear vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2017-5521, CVE-2017-6862 and CVE-2016-1555. The full list is on this page.
R7800 Firmware, with 245 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Netgear products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.