Ex7000 Firmware (Netgear) - vulnerabilities (CVEs)

42 CVEs, 0 in the last 30 days, 16 known versions, newest CVE from 2024-05-07. Vendor: Netgear.

CVEs of Ex7000 Firmware

CVE-2021-34983 - CVSS 6.5 (medium), 2024-05-07: NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability. This vulnerability allows network-adjacent…
CVE-2021-34982 - CVSS 8.8 (high), 2024-05-07: NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…
CVE-2021-45639 - CVSS 6.1 (medium), 2021-12-26: Certain NETGEAR devices are affected by reflected XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.32, EAX80 before 1.0.1.62, EX6120 before…
CVE-2021-45647 - CVSS 7.5 (high), 2021-12-26: Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EAX80 before 1.0.1.62, EX7000 before 1.0.1.104, R6120 before…
CVE-2021-45641 - CVSS 8.8 (high), 2021-12-26: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before…
CVE-2021-45640 - CVSS 7.2 (high), 2021-12-26: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before…
CVE-2021-45621 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 3.2.18.2, EAX20…
CVE-2021-45527 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.102, D7000v2 before…
CVE-2021-45525 - CVSS 8.8 (high), 2021-12-26: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX7000 before 1.0.1.80, R6400 before 1.0.1.50, R6400v2 before…
CVE-2021-45533 - CVSS 8.4 (high), 2021-12-26: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects EX6120 before 1.0.0.66, EX6130 before 1.0.0.46, EX7000 before…
CVE-2021-45512 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, EX3700 before 1.0.0.84, EX3800 before…
CVE-2021-38525 - CVSS 7.2 (high), 2021-08-11: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76,…
CVE-2021-38514 - CVSS 2.7 (low), 2021-08-11: Certain NETGEAR devices are affected by authentication bypass. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6100 before 1.0.0.63, D6200 before…
CVE-2021-27239 - CVSS 8.8 (high), 2021-03-29: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98…
CVE-2020-35800 - CVSS 9.4 (critical), 2020-12-30: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600…
CVE-2020-35796 - CVSS 9.8 (critical), 2020-12-30: Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, D6400…
CVE-2020-35787 - CVSS 8 (high), 2020-12-30: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before…
CVE-2020-26917 - CVSS 4.8 (medium), 2020-10-09: Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 before 1.0.1.46, R6400v2 before…
CVE-2020-26918 - CVSS 4.8 (medium), 2020-10-09: Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 before 1.0.1.46, R6400v2 before…
CVE-2018-21156 - CVSS 7.2 (high), 2020-04-27: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.38, D6400 before 1.0.0.74, D7000v2 before…
CVE-2018-21093 - CVSS 8.8 (high), 2020-04-27: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D8500 before 1.0.3.42, EX3700 before…
CVE-2018-21231 - CVSS 5.4 (medium), 2020-04-24: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before…
CVE-2018-21230 - CVSS 5.4 (medium), 2020-04-24: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before…
CVE-2017-18700 - CVSS 6.1 (medium), 2020-04-24: Certain NETGEAR devices are affected by stored XSS. This affects D6400 before 1.0.0.60, D7000 before 1.0.1.50, D8500 before 1.0.3.29, EX6200 before 1.0.3.84,…
CVE-2017-18715 - CVSS 6.1 (medium), 2020-04-24: Certain NETGEAR devices are affected by reflected XSS. This affects EX3700 before 1.0.0.66, EX3800 before 1.0.0.66, EX6100 before 1.0.2.20, EX6120 before…
CVE-2018-21163 - CVSS 7.2 (high), 2020-04-23: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects DGN2200Bv4 before 1.0.0.102, DGN2200v4 before…
CVE-2018-21162 - CVSS 9.8 (critical), 2020-04-23: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6400 before 1.0.0.78, EX6200 before 1.0.3.86, EX7000…
CVE-2018-21134 - CVSS 9.8 (critical), 2020-04-23: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6700 before 1.0.1.48, R7900 before…
CVE-2017-18747 - CVSS 8.8 (high), 2020-04-23: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6000…
CVE-2017-18746 - CVSS 6.5 (medium), 2020-04-23: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6000…
CVE-2017-18769 - CVSS 4.6 (medium), 2020-04-22: Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000 before…
CVE-2019-20756 - CVSS 7.1 (high), 2020-04-16: Certain NETGEAR devices are affected by reflected XSS. This affects EX7000 before 1.0.0.64, EX6200 before 1.0.3.86, EX6150 before 1.0.0.38, EX6130 before…
CVE-2019-20754 - CVSS 6.8 (medium), 2020-04-16: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects DGN2200 before 1.0.0.58, DGN2200B before 1.0.0.58, D8500…
CVE-2019-20731 - CVSS 6.7 (medium), 2020-04-16: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000v2 before…
CVE-2019-20734 - CVSS 8.8 (high), 2020-04-16: Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.40, D8500 before 1.0.3.39, EX3700…
CVE-2019-20733 - CVSS 6.7 (medium), 2020-04-16: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.44, D6400 before…
CVE-2019-20732 - CVSS 6.7 (medium), 2020-04-16: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6220 before 1.0.0.40, D7000v2 before 1.0.0.74, D8500 before…
CVE-2019-20737 - CVSS 6.7 (medium), 2020-04-16: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.44, D6400 before…
CVE-2019-20691 - CVSS 8.8 (high), 2020-04-16: Certain NETGEAR devices are affected by CSRF. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70,…
CVE-2019-20700 - CVSS 6.7 (medium), 2020-04-16: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.44, D6400 before…
CVE-2019-20692 - CVSS 6.7 (medium), 2020-04-16: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.44, D6400 before…
CVE-2016-10864 - CVSS 5.2 (medium), 2019-08-08: NETGEAR EX7000 V1.0.0.42_1.0.94 devices allow XSS via the SSID.