Xr1000 Firmware (Netgear) - vulnerabilities (CVEs)

30 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2026-09-08. Vendor: Netgear.

CVEs of Xr1000 Firmware

CVE-2026-9215 - CVSS 6.7 (medium), 2026-09-08: A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router…
CVE-2026-11736 - CVSS 4.9 (medium), 2026-08-11: A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router…
CVE-2026-11735 - CVSS 4.9 (medium), 2026-08-11: A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the…
CVE-2026-11739 - CVSS 6.4 (medium), 2026-08-11: A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify…
CVE-2026-9210 - CVSS 4.9 (medium), 2026-06-09: Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make…
CVE-2026-9213 - CVSS 8.1 (high), 2026-06-09: A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with traffic between the router and the…
CVE-2026-0418 - CVSS 4.5 (medium), 2026-06-09: Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
CVE-2026-0417 - CVSS 4.5 (medium), 2026-06-09: Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with…
CVE-2026-0410 - CVSS 4.5 (medium), 2026-06-09: Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and…
CVE-2024-35517 - CVSS 8.4 (high), 2024-10-11: Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usb_remote_smb_conf.cgi via the share_name parameter.
CVE-2021-34982 - CVSS 8.8 (high), 2024-05-07: NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…
CVE-2021-34983 - CVSS 6.5 (medium), 2024-05-07: NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability. This vulnerability allows network-adjacent…
CVE-2021-45654 - CVSS 9.6 (critical), 2021-12-26: NETGEAR XR1000 devices before 1.0.0.58 are affected by disclosure of sensitive information.
CVE-2021-45643 - CVSS 8.2 (high), 2021-12-26: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, and…
CVE-2021-45616 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 3.2.18.2, LAX20 before 1.1.6.28, MK62…
CVE-2021-45622 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20…
CVE-2021-45614 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7000v2 before 1.0.0.74, LAX20 before 1.1.6.28, MK62…
CVE-2021-45621 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 3.2.18.2, EAX20…
CVE-2021-45613 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, D7000v2…
CVE-2021-45620 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20…
CVE-2021-45612 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20…
CVE-2021-45604 - CVSS 4.5 (medium), 2021-12-26: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects CBR750 before 3.2.18.2, D6220 before 1.0.0.68,…
CVE-2021-45549 - CVSS 8.4 (high), 2021-12-26: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects LAX20 before 1.1.6.28, MK62 before 1.1.6.122, MR60 before…
CVE-2021-45514 - CVSS 9.6 (critical), 2021-12-26: NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.
CVE-2021-45519 - CVSS 6.5 (medium), 2021-12-26: NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.
CVE-2021-45513 - CVSS 9.6 (critical), 2021-12-26: NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.
CVE-2021-45518 - CVSS 6.5 (medium), 2021-12-26: NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.
CVE-2021-45510 - CVSS 8.8 (high), 2021-12-26: NETGEAR XR1000 devices before 1.0.0.58 are affected by authentication bypass.
CVE-2021-45517 - CVSS 6.5 (medium), 2021-12-26: NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.
CVE-2021-45522 - CVSS 8.8 (high), 2021-12-26: NETGEAR XR1000 devices before 1.0.0.58 are affected by a hardcoded password.