R7000p Firmware (Netgear) - vulnerabilities (CVEs)

158 CVEs, 0 in the last 30 days, 28 known versions, newest CVE from 2026-06-09. Vendor: Netgear.

CVEs of R7000p Firmware

CVE-2026-9210 - CVSS 4.9 (medium), 2026-06-09: Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make…
CVE-2026-0417 - CVSS 4.5 (medium), 2026-06-09: Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with…
CVE-2025-12945 - CVSS 7.2 (high), 2025-12-09: An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network…
CVE-2024-12988 - CVSS 7.5 (high), 2024-12-27: A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of…
CVE-2024-52023 - CVSS 5.7 (medium), 2024-11-05: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe2.cgi.…
CVE-2024-52026 - CVSS 5.7 (medium), 2024-11-05: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at…
CVE-2024-52030 - CVSS 5.7 (medium), 2024-11-05: Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at ru_wan_flow.cgi. This vulnerability allows…
CVE-2024-52022 - CVSS 8 (high), 2024-11-05: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the…
CVE-2024-52025 - CVSS 5.7 (medium), 2024-11-05: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at…
CVE-2024-52029 - CVSS 5.7 (medium), 2024-11-05: Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at genie_pptp.cgi. This vulnerability allows…
CVE-2024-52024 - CVSS 5.7 (medium), 2024-11-05: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at wizpppoe.cgi.…
CVE-2024-52028 - CVSS 5.7 (medium), 2024-11-05: Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at wiz_pptp.cgi. This vulnerability allows attackers…
CVE-2024-52013 - CVSS 5.7 (medium), 2024-11-05: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip…
CVE-2024-52016 - CVSS 5.7 (medium), 2024-11-05: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the…
CVE-2024-52015 - CVSS 5.7 (medium), 2024-11-05: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip…
CVE-2024-52021 - CVSS 8 (high), 2024-11-05: Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at bsw_fix.cgi. This vulnerability allows…
CVE-2024-52014 - CVSS 5.7 (medium), 2024-11-05: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip…
CVE-2024-52020 - CVSS 8 (high), 2024-11-05: Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at wiz_fix2.cgi. This vulnerability allows…
CVE-2024-51015 - CVSS 5.7 (medium), 2024-11-05: Netgear R7000P v1.3.3.154 was discovered to contain a command injection vulnerability via the device_name2 parameter at operation_mode.cgi. This vulnerability…
CVE-2024-51019 - CVSS 5.7 (medium), 2024-11-05: Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pppoe_localnetmask parameter at pppoe.cgi. This vulnerability allows attackers to…
CVE-2024-51013 - CVSS 5.7 (medium), 2024-11-05: Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the RADIUSAddr%d_wla parameter at wireless.cgi. This vulnerability allows attackers…
CVE-2024-51018 - CVSS 5.7 (medium), 2024-11-05: Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at pptp.cgi. This vulnerability allows attackers to…
CVE-2024-51021 - CVSS 8 (high), 2024-11-05: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a command injection vulnerability via the wan_gateway parameter…
CVE-2024-51017 - CVSS 5.7 (medium), 2024-11-05: Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the l2tp_user_netmask parameter at l2tp.cgi. This vulnerability allows attackers to…
CVE-2024-51020 - CVSS 5.7 (medium), 2024-11-05: Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the apn parameter at usbISP_detail_edit.cgi. This vulnerability allows attackers to…
CVE-2024-51010 - CVSS 8 (high), 2024-11-05: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the…
CVE-2024-51004 - CVSS 5.7 (medium), 2024-11-05: Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usb_device.cgi via the cifs_user,…
CVE-2024-51003 - CVSS 5.7 (medium), 2024-11-05: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the…
CVE-2024-51011 - CVSS 5.7 (medium), 2024-11-05: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe.cgi.…
CVE-2024-51002 - CVSS 5.7 (medium), 2024-11-05: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the l2tp_user_ip…
CVE-2024-50997 - CVSS 5.7 (medium), 2024-11-05: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip…
CVE-2024-50996 - CVSS 5.7 (medium), 2024-11-05: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpa_server parameter…
CVE-2021-34982 - CVSS 8.8 (high), 2024-05-07: NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…
CVE-2021-34983 - CVSS 6.5 (medium), 2024-05-07: NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability. This vulnerability allows network-adjacent…
CVE-2023-36187 - CVSS 9.8 (critical), 2023-09-01: Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL…
CVE-2022-27642 - CVSS 8.8 (high), 2023-03-29: This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.…
CVE-2022-27646 - CVSS 8.8 (high), 2023-03-29: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.…
CVE-2022-27644 - CVSS 8.8 (high), 2023-03-29: This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3…
CVE-2022-27643 - CVSS 8.8 (high), 2023-03-29: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.…
CVE-2022-27647 - CVSS 8 (high), 2023-03-29: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.…
CVE-2022-48322 - CVSS 9.8 (critical), 2023-02-13: NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability. This affects MR60 before 1.1.7.132, MS60 before…
CVE-2022-48176 - CVSS 7.8 (high), 2023-01-31: Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a…
CVE-2022-48196 - CVSS 9.8 (critical), 2022-12-30: Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX40 before 1.0.2.60, RAX35 before 1.0.2.60, R6400v2…
CVE-2022-44184 - CVSS 9.8 (critical), 2022-11-22: Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_sec.
CVE-2022-44198 - CVSS 9.8 (critical), 2022-11-22: Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_push1.
CVE-2022-44197 - CVSS 9.8 (critical), 2022-11-22: Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_server_ip.
CVE-2022-44200 - CVSS 9.8 (critical), 2022-11-22: Netgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters: stamode_dns1_pri and stamode_dns1_sec.
CVE-2022-44199 - CVSS 9.8 (critical), 2022-11-22: Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_server_ip.
CVE-2022-44194 - CVSS 9.8 (critical), 2022-11-22: Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameters apmode_dns1_pri and apmode_dns1_sec.
CVE-2022-44193 - CVSS 9.8 (critical), 2022-11-22: Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameters: starthour, startminute , endhour, and endminute.
CVE-2022-44191 - CVSS 9.8 (critical), 2022-11-22: Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameters KEY1 and KEY2.
CVE-2022-44196 - CVSS 9.8 (critical), 2022-11-22: Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_push1.
CVE-2022-44186 - CVSS 9.8 (critical), 2022-11-22: Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_pri.
CVE-2022-44190 - CVSS 9.8 (critical), 2022-11-22: Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter enable_band_steering.
CVE-2022-44188 - CVSS 9.8 (critical), 2022-11-22: Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter enable_band_steering.
CVE-2022-44187 - CVSS 9.8 (critical), 2022-11-22: Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via wan_dns1_pri.
CVE-2021-45670 - CVSS 6.5 (medium), 2021-12-26: Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX6120 before 1.0.0.64,…
CVE-2021-45679 - CVSS 8.4 (high), 2021-12-26: Certain NETGEAR devices are affected by privilege escalation. This affects R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140, and…
CVE-2021-45673 - CVSS 5.4 (medium), 2021-12-26: Certain NETGEAR devices are affected by stored XSS. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before 1.0.4.62, RAX200 before…
CVE-2021-45650 - CVSS 9.1 (critical), 2021-12-26: Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before…
CVE-2021-45649 - CVSS 7.9 (high), 2021-12-26: Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6400v2 before 1.0.4.84, R6700v3 before 1.0.4.84, R7000 before…
CVE-2021-45639 - CVSS 6.1 (medium), 2021-12-26: Certain NETGEAR devices are affected by reflected XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.32, EAX80 before 1.0.1.62, EX6120 before…
CVE-2021-45638 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.68, D6400 before…
CVE-2021-45647 - CVSS 7.5 (high), 2021-12-26: Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EAX80 before 1.0.1.62, EX7000 before 1.0.1.104, R6120 before…
CVE-2021-45607 - CVSS 8.8 (high), 2021-12-26: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400v2 before 1.0.4.118, R6700v3 before…
CVE-2021-45612 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20…
CVE-2021-45620 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20…
CVE-2021-45624 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, R7000…
CVE-2021-45610 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.66, D6400 before 1.0.0.100, D7000v2…
CVE-2021-45617 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, EAX20 before 1.0.0.48, EAX80…
CVE-2021-45622 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20…
CVE-2021-45609 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D8500 before 1.0.3.58, R6250 before 1.0.4.48, R7000…
CVE-2021-45616 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 3.2.18.2, LAX20 before 1.1.6.28, MK62…
CVE-2021-45621 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 3.2.18.2, EAX20…
CVE-2021-45625 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects XR300 before 1.0.3.68, R7000P before 1.3.3.140, and…
CVE-2021-45606 - CVSS 8.8 (high), 2021-12-26: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126,…
CVE-2021-45605 - CVSS 8.8 (high), 2021-12-26: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 before 1.0.1.68, R7000 before 1.0.11.116,…
CVE-2021-45604 - CVSS 4.5 (medium), 2021-12-26: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects CBR750 before 3.2.18.2, D6220 before 1.0.0.68,…
CVE-2021-45549 - CVSS 8.4 (high), 2021-12-26: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects LAX20 before 1.1.6.28, MK62 before 1.1.6.122, MR60 before…
CVE-2021-45554 - CVSS 8.4 (high), 2021-12-26: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.74, R6400v2 before 1.0.4.118, R6700v3…
CVE-2021-45553 - CVSS 8.8 (high), 2021-12-26: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7000 before 1.0.11.126, R6900P before 1.3.2.126, and R7000P…
CVE-2021-45550 - CVSS 6.8 (medium), 2021-12-26: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.78, D6100 before…
CVE-2021-45527 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.102, D7000v2 before…
CVE-2021-45526 - CVSS 8.8 (high), 2021-12-26: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX6000 before 1.0.0.38, EX6120 before 1.0.0.48, EX6130 before…
CVE-2021-45530 - CVSS 8.8 (high), 2021-12-26: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7000 before 1.0.11.126, R7960P before 1.4.2.84, R8000 before…
CVE-2021-45525 - CVSS 8.8 (high), 2021-12-26: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX7000 before 1.0.1.80, R6400 before 1.0.1.50, R6400v2 before…
CVE-2021-45529 - CVSS 7.3 (high), 2021-12-26: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects CBR40 before 2.3.5.12, D7000v2 before 1.0.0.66, D8500 before…
CVE-2021-45516 - CVSS 6.9 (medium), 2021-12-26: Certain NETGEAR devices are affected by denial of service. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126, R6900P before 1.3.3.140, R7000P before…
CVE-2021-45512 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, EX3700 before 1.0.0.84, EX3800 before…
CVE-2021-45499 - CVSS 8.8 (high), 2021-12-26: Certain NETGEAR devices are affected by authentication bypass. This affects R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7900P before 1.4.2.84, R7960P…
CVE-2021-45500 - CVSS 9.6 (critical), 2021-12-26: Certain NETGEAR devices are affected by authentication bypass. This affects R7000P before 1.3.3.140 and R8000 before 1.0.4.68.
CVE-2021-34991 - CVSS 8.8 (high), 2021-11-15: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers.…
CVE-2021-40847 - CVSS 8.1 (high), 2021-09-21: The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code execution as root via a…
CVE-2021-38539 - CVSS 8.8 (high), 2021-08-11: Certain NETGEAR devices are affected by privilege escalation. This affects D8500 before 1.0.3.44, R6400v2 before 1.0.2.66, R6700 before 1.0.2.6, R6700v3…
CVE-2021-38534 - CVSS 4.8 (medium), 2021-08-11: Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6100 before 1.0.0.60, D6200 before 1.1.00.36,…
CVE-2021-38528 - CVSS 9.8 (critical), 2021-08-11: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D8500 before 1.0.3.58, R6900P before 1.3.2.132, R7000P…
CVE-2021-38525 - CVSS 7.2 (high), 2021-08-11: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76,…
CVE-2021-38520 - CVSS 7.2 (high), 2021-08-11: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.52, R6400v2 before 1.0.4.84, R6700v3…
CVE-2021-38516 - CVSS 10 (critical), 2021-08-11: Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D7000v2…
CVE-2021-38514 - CVSS 2.7 (low), 2021-08-11: Certain NETGEAR devices are affected by authentication bypass. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6100 before 1.0.0.63, D6200 before…