← Back

Wnr614 Firmware

wnr614_firmware

Vendor: Netgear • 11 CVEs

CVEs (11)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Netgear
1Wnr614 Firmware
Jun 17, 2026
Jun 3, 2025
6.9 MEDIUM· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW. It has been classified as critical. This affects an unknown part of the component URL Handler. The manipulation with the input %00currentsetting.htm leads to...Show more
A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW. It has been classified as critical. This affects an unknown part of the component URL Handler. The manipulation with the input %00currentsetting.htm leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This issue appears to have been circulating as an 0day since 2024.Show less
1Netgear
1Wnr614 Firmware
Jun 17, 2026
Jun 7, 2024
N/A· v4
8.2 HIGH· v3
N/A· v2
An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain access to the router's pin.
1Netgear
1Wnr614 Firmware
Jun 17, 2026
Jun 7, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plaintext.
1Netgear
1Wnr614 Firmware
Jun 17, 2026
Jun 7, 2024
N/A· v4
8.1 HIGH· v3
N/A· v2
An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create passwords that do not conform to defined security standards.
1Netgear
1Wnr614 Firmware
Jun 17, 2026
Jun 7, 2024
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices.
1Netgear
1Wnr614 Firmware
Jun 17, 2026
Jun 7, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass authentication and access the administrative interface via unspecified vectors.
1Netgear
1Wnr614 Firmware
Jun 17, 2026
Jun 6, 2024
N/A· v4
4.0 MEDIUM· v3
N/A· v2
Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to access URLs and directories embedded within the firmware via unspecified vectors.
1Netgear
9Jnr1010 Firmware
Jwnr2000 FirmwareJwnr2010 Firmware+6 more
Nov 21, 2024
Apr 28, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618 before 2017-01-06, JWNR2000v5 before 2017-01-06, WNR2020 before 2017-0...Show more
Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618 before 2017-01-06, JWNR2000v5 before 2017-01-06, WNR2020 before 2017-01-06, JWNR2010v5 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2020v2 before 2017-01-06, R6220 before 2017-01-06, and WNDR3700v5 before 2017-01-06.Show less
1Netgear
13D7000 Firmware
Jnr1010 FirmwareJr6150 Firmware+10 more
Nov 21, 2024
Apr 21, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 before 1.1.0.50, WNDR3700v5 before 1.1.0.48, JNR1010v2 before 1.1.0.40, JWNR2010v5 before 1.1.0.40, WN...Show more
Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 before 1.1.0.50, WNDR3700v5 before 1.1.0.48, JNR1010v2 before 1.1.0.40, JWNR2010v5 before 1.1.0.40, WNR1000v4 before 1.1.0.40, WNR2020 before 1.1.0.40, WNR2050 before 1.1.0.40, WNR614 before 1.1.0.40, WNR618 before 1.1.0.40, and D7000 before 1.0.1.50.Show less
1Netgear
8D6200 Firmware
D7000 FirmwareR6020 Firmware+5 more
Jun 17, 2026
Apr 16, 2020
N/A· v4
8.8 HIGH· v3
5.8 MEDIUM· v2
Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.30, D7000 before 1.0.1.66, R6020 before 1.0.0.34, R6080 before 1.0.0.34, R6120 before 1.0.0.44, R6220 before 1.1.0.68, WNR20...Show more
Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.30, D7000 before 1.0.1.66, R6020 before 1.0.0.34, R6080 before 1.0.0.34, R6120 before 1.0.0.44, R6220 before 1.1.0.68, WNR2020 before 1.1.0.54, and WNR614 before 1.1.0.54.Show less
1Netgear
28D6100 Firmware
D7000 FirmwareD7800 Firmware+25 more
Apr 21, 2026
Jan 30, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve...Show more
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.Show less