Netgear Xr500 Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Version

1.1.0.78_1.0.1	2

Remediation

Official Fix	108
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	4

Exploitability

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	112

Access Vector

Not Defined	0
Physical	0
Local	4
Adjacent	44
Network	64

Authentication

Not Defined	0
High	56
Low	32
None	24

User Interaction

Not Defined	0
Required	28
None	84

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	26
≤4	2
≤5	34
≤6	8
≤7	18
≤8	12
≤9	6
≤10	6

CVSSv3 Temp

≤1	0
≤2	0
≤3	26
≤4	6
≤5	30
≤6	20
≤7	8
≤8	10
≤9	8
≤10	4

VulDB

≤1	0
≤2	0
≤3	48
≤4	10
≤5	6
≤6	22
≤7	12
≤8	2
≤9	8
≤10	4

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	4
≤6	26
≤7	14
≤8	4
≤9	12
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	0
≤7	4
≤8	4
≤9	4
≤10	2

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	0
<5k	52
<10k	6
<25k	42
<50k	10
<100k	2
≥100k	0

Exploit Today

<1k	92
<2k	2
<5k	8
<10k	8
<25k	2
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Versions (1): 1.1.0.78_1.0.1

Link to Product Website: https://www.netgear.com/

Software Type: Wireless LAN Software

Published	Base	Temp	Vulnerability	0day	Today	Exp	Rem	CTI	CVE
01/14/2022	8.8	8.8	Netgear XR500 Environment Variable setupwizard.cgi stack-based overflow	$25k-$100k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2021-34980
12/26/2021	6.7	6.5	Netgear XR700 injection	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45658
12/26/2021	6.6	6.5	Netgear RBK50 Configuration Privilege Escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45642
12/26/2021	4.6	4.5	Netgear XR500 Configuration unknown vulnerability	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45641
12/26/2021	3.9	3.8	Netgear XR500 Configuration Privilege Escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45640
12/26/2021	7.3	7.1	Netgear R7800/R9000/XR500 command injection	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2021-45623
12/26/2021	9.2	9.0	Netgear RBK50 command injection	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2021-45618
12/26/2021	6.2	6.0	Netgear XR700 command injection	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45602
12/26/2021	6.7	6.5	Netgear XR500 command injection	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45550
12/26/2021	6.8	6.6	Netgear RBS40 command injection	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45548
12/26/2021	4.7	4.6	Netgear XR700 UPnP Request information disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45603
08/11/2021	4.3	4.1	Netgear XR500 cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-38538
08/11/2021	2.4	2.3	Netgear XR500 cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.07	CVE-2021-38534
08/11/2021	6.3	6.0	Netgear XR500 command injection	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-38527
08/11/2021	6.8	6.5	Netgear XR500 stack-based overflow	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-38525
08/11/2021	9.8	9.4	Netgear XR500 access control	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00	CVE-2021-38516
08/11/2021	4.3	4.1	Netgear XR500 improper authentication	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-38514
03/24/2021	7.4	7.0	Netgear XR450/XR500/WNR2000v5 command injection	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-29069
03/24/2021	8.8	8.4	Netgear XR300 buffer overflow	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-29068
12/30/2020	2.4	2.4	Netgear D7800/R7500v2/R7800/R8900/R9000/XR500/XR700/RAX120 cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-35839
12/30/2020	2.4	2.4	Netgear D7800/R7500v2/R7800/R8900/R9000/RAX120/XR500/XR700 cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-35838
12/30/2020	2.4	2.4	Netgear D7800/R7500v2/R7800/R8900/R9000/RAX120/XR500/XR700 cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-35837
12/30/2020	2.4	2.4	Netgear D7800/R7500v2/R7800/R8900/R9000/XR500/XR700/RAX120 cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-35836
12/30/2020	2.4	2.4	Netgear D7800/R7500v2/R7800/R8900/R9000/RAX120/XR500/XR700 cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-35835
12/30/2020	2.4	2.4	Netgear D7800/R7500v2/R7800/R8900/R9000/RAX120/XR500/XR700 cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-35834

86 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 86 results.

more entries by Netgear

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!