← Back

Netgear

netgear

1,334 CVEs • 1,110 products

Products (1,110)

Click to collapse
Toggle
Mr60 Firmware
mr60_firmware
Ms60 Firmware
ms60_firmware

CVEs (1,334)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Netgear
1R7000p Firmware
Jun 17, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_push1.
1Netgear
1R7000p Firmware
Jul 9, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameters apmode_dns1_pri and apmode_dns1_sec.
1Netgear
1R7000p Firmware
Jun 17, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameters: starthour, startminute , endhour, and endminute.
1Netgear
1R7000p Firmware
Jun 17, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameters KEY1 and KEY2.
1Netgear
1R7000p Firmware
Jun 17, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter enable_band_steering.
1Netgear
1R7000p Firmware
Jun 17, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter enable_band_steering.
1Netgear
1R7000p Firmware
Jun 17, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via wan_dns1_pri.
1Netgear
1R7000p Firmware
Jun 17, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_pri.
1Netgear
1R6220 Firmware
Jun 17, 2026
Oct 17, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Netgear R6220 v1.1.0.114_1.0.1 suffers from Incorrect Access Control, resulting in a command injection vulnerability.
1Netgear
1R7000 Firmware
Jun 17, 2026
Sep 23, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware. There is a stack overflow vulnerability caused by strncat
1Netgear
1Wnr2000v4 Firmware
Jun 17, 2026
Sep 23, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Netgear N300 wireless router wnr2000v4-V1.0.0.70 is vulnerable to Buffer Overflow via uhttpd. There is a stack overflow vulnerability caused by strcpy.
1Netgear
1Wnr2000v4 Firmware
Jun 17, 2026
Sep 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Netgear N300 wireless router wnr2000v4-V1.0.0.70 was discovered to contain a stack overflow via strcpy in uhttpd.
1Netgear
1R7000 Firmware
Jun 17, 2026
Sep 22, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware. There is a stack overflow vulnerability caused by strncpy.
1Netgear
1Wpn824ext Firmware
Jun 17, 2026
Sep 20, 2022
N/A· v4
5.3 MEDIUM· v3
N/A· v2
An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to replace the user-uploaded firmware image with an original old firmware...Show more
An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to replace the user-uploaded firmware image with an original old firmware image. This affects Firmware 1.1.1_1.1.9 and earlier.Show less
1Netgear
1Wpn824ext Firmware
Jun 17, 2026
Sep 20, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the CRC check. A...Show more
An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the CRC check. A successful attack can either introduce a backdoor to the device or make the device DoS. This affects Firmware Version: 1.1.1_1.1.9.Show less
1Netgear
1R6200
Jul 9, 2026
Sep 8, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote authenticated attackers the ability to modify values in the vuln...Show more
Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote authenticated attackers the ability to modify values in the vulnerable parameter.Show less
1Netgear
1R8000 Firmware
Jun 17, 2026
Sep 8, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Buffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to execute arbitrary code or cause a denial-of-service by sending a crafted POST to '/bd_genie_create_account.cgi' with a sufficient...Show more
Buffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to execute arbitrary code or cause a denial-of-service by sending a crafted POST to '/bd_genie_create_account.cgi' with a sufficiently long parameter 'register_country'.Show less
1Netgear
2R6200 Firmware
R6300 Firmware
Jul 9, 2026
Sep 7, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharac...Show more
NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, or ipv6_lan_length parameters.Show less
1Netgear
1Wnap320 Firmware
Jun 17, 2026
Jun 17, 2022
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
netgear wnap320 router WNAP320_V2.0.3_firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies.
1Netgear
1Ssl312 Firmware
Jun 17, 2026
May 13, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi.