Netgear Vulnérabilités

Chronologie

Taper

Produit

Netgear R7800209
Netgear R9000186
Netgear D7800145
Netgear RBR850144
Netgear RBS850143

Contre-mesures

Official Fix731
Temporary Fix0
Workaround28
Unavailable24
Not Defined240

Exploitabilité

High23
Functional2
Proof-of-Concept80
Unproven8
Not Defined910

Vecteur d'accès

Not Defined0
Physical5
Local30
Adjacent564
Network424

Authentification

Not Defined0
High257
Low290
None476

Interaction de l'utilisateur

Not Defined0
Required148
None875

C3BM Index

CVSSv3 Base

≤10
≤20
≤349
≤439
≤5138
≤6118
≤7248
≤8274
≤993
≤1064

CVSSv3 Temp

≤10
≤20
≤350
≤453
≤5144
≤6231
≤7159
≤8236
≤9128
≤1022

VulDB

≤10
≤21
≤3121
≤461
≤5126
≤6226
≤7268
≤887
≤9105
≤1028

NVD

≤10
≤20
≤31
≤41
≤544
≤663
≤7149
≤859
≤9152
≤1072

CNA

≤10
≤20
≤314
≤45
≤513
≤69
≤734
≤831
≤981
≤1050

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k3
<2k2
<5k143
<10k256
<25k559
<50k58
<100k2
≥100k0

Exploiter aujourd'hui

<1k659
<2k109
<5k97
<10k107
<25k51
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (449): 2CXNAS (1), AC1200 R6220 (1), AC2100 (22), AC2400 (23), AC2600 (22), AC3000 (3), Arlo (2), Arlo Q (2), Arlo Q Plus (2), BEFSR41 (1), CAX30 (1), CAX30S (1), CAX80 (1), CBK40 (4), CBK43 (2), CBR40 (42), CBR750 (30), C DSL Router (1), D500 (3), D1500 (3), D3600 (60), D6000 (64), D6100 (53), D6200 (40), D6220 (31), D6300B (5), D6400 (31), D7000 (52), D7000v1 (1), D7000v2 (34), D7800 (145), D8500 (46), DC112A (16), DG632 (3), DG834GT (1), DG834Gv5 (1), DGN1000 (1), DGN1000B (3), DGN2200 (9), DGN2200 N300 (4), DGN2200B (6), DGN2200Bv4 (6), DGN2200M (1), DGN2200v1 (4), DGN2200v4 (23), DGN3500 (1), DGND2200Bv4 (13), DGND3300v2 (1), DGND3700 (5), DGND4000 (1), DIR-100 (1), DM200 (26), EAX20 (14), EAX80 (18), EX2700 (26), EX3110 (1), EX3700 (30), EX3800 (30), EX3920 (2), EX6000 (19), EX6100 (17), EX6100v1 (1), EX6100v2 (18), EX6110 (1), EX6120 (31), EX6130 (31), EX6150 (8), EX6150v1 (11), EX6150v2 (20), EX6200 (21), EX6200v1 (1), EX6200v2 (19), EX6250 (8), EX6400 (19), EX6400v2 (8), EX6410 (8), EX6420 (7), EX6920 (2), EX7000 (34), EX7300 (19), EX7300v2 (8), EX7320 (8), EX7500 (19), EX7700 (7), EX8000 (16), FM114P (6), FS728TLP (2), FVG318 (1), FVS318 (4), FVS318Gv2 (1), FVS318N (1), FVS336Gv3 (1), GC108P (5), GC108PP (5), GS105Ev2 (3), GS105PE (3), GS108Ev3 (3), GS108PE (1), GS108PEv3 (2), GS108Tv2 (2), GS108Tv3 (5), GS110EMX (4), GS110TPP (5), GS110TPPv1 (1), GS110TPv2 (2), GS110TPv3 (6), GS110TUP (4), GS110TUPv1 (1), GS116Ev2 (20), GS308T (5), GS310TP (5), GS408EPP (3), GS516PE (1), GS710TUP (5), GS710TUPv1 (1), GS716TP (5), GS716TPP (5), GS716Tv2 (1), GS716Tv3 (1), GS724TPP (6), GS724TPPv1 (1), GS724TPv2 (7), GS724Tv3 (1), GS724Tv4 (1), GS728TP (1), GS728TPPv2 (8), GS728TPS (1), GS728TPv2 (8), GS750E (5), GS752TPP (7), GS752TPPv1 (1), GS752TPv2 (8), GS808E (4), GS810EMX (6), GS908E (3), GSS108E (3), GSS108EPP (3), GSS116E (2), Genie Installer (1), Insight Cloud (1), JGS516PE (21), JGS524Ev2 (6), JGS524PE (6), JNDR3000 (6), JNR1010 (3), JNR1010v2 (11), JNR3210 (3), JR6150 (36), JWNR2000v2 (2), JWNR2010v5 (8), LAX20 (9), LBR20 (7), LBR1020 (4), LG2200D (1), MBR1515 (1), MBR1516 (1), MK60 (1), MK62 (15), MK63 (1), MK83 (1), MR60 (26), MR80 (2), MR814 (1), MR1100 (3), MS60 (26), MS80 (2), MS510TXM (6), MS510TXUP (6), Ma521 Driver (1), Management System NMS300 (2), N150 WNR 1000v3 (1), N300 (4), N600 WNDR3400 (2), NMS300 (5), Netgear Router (1), Nighthawk (3), Nighthawk AC1900 (2), Nighthawk AC2100 (2), Nighthawk AC2400 (2), Nighthawk M1 (2), Nighthawk R6220 (1), Nighthawk R6700 (6), Nighthawk R7000 (1), Nighthawk R7800 (2), Nighthawk WiFi6 Router (5), Nighthawk X10-R900 (4), Orbi (1), Orbi 760 (1), Orbi RBR750 (1), Orbi Router RBR750 (3), Orbi Satellite RBS750 (1), PR2000 (25), ProSAFE Network Management System (19), ProSafe FS726TP (1), ProSafe FVS318N (1), ProSafe Plus Configuration Utility (1), ProSafe SSL VPN (1), ProSafe VPN Firewall (1), ProSafe WNAP210 (2), Prosafe Switch (2), R300 (1), R2000 (1), R4500 (1), R6020 (41), R6050 (36), R6080 (40), R6100 (53), R6120 (47), R6200 (2), R6200 V2 (1), R6200V2 (1), R6220 (57), R6230 (23), R6250 (42), R6260 (52), R6300 (1), R6300 V2 (1), R6300v2 (40), R6330 (10), R6350 (12), R6400 (66), R6400v1 (1), R6400v2 (64), R6700 (62), R6700AX (3), R6700v1 (1), R6700v2 (57), R6700v3 (46), R6800 (57), R6850 (16), R6900 (47), R6900P (76), R6900v2 (55), R7000 (92), R7000P (92), R7100LG (45), R7200 (15), R7300 (8), R7300DST (30), R7350 (15), R7400 (15), R7450 (33), R7500 (46), R7500v2 (121), R7800 (209), R7850 (20), R7900 (69), R7900P (68), R7960P (35), R8000 (79), R8000P (71), R8300 (48), R8500 (51), R8900 (124), R9000 (186), R69002 (1), RAIDiator (2), RAX10 (3), RAX15 (29), RAX20 (30), RAX30 (19), RAX30 AX2400 (2), RAX35 (7), RAX35v2 (9), RAX38 (3), RAX40 (18), RAX40v2 (9), RAX43 (15), RAX45 (29), RAX50 (30), RAX70 (3), RAX75 (53), RAX78 (3), RAX80 (56), RAX120 (68), RAX120v1 (2), RAX120v2 (4), RAX200 (45), RBK12 (8), RBK13 (1), RBK14 (1), RBK15 (1), RBK20 (76), RBK22 (2), RBK23 (1), RBK40 (81), RBK50 (123), RBK50V (1), RBK352 (7), RBK752 (121), RBK753 (22), RBK753S (22), RBK754 (7), RBK842 (20), RBK852 (141), RBK853 (30), RBK854 (15), RBR10 (8), RBR20 (82), RBR40 (70), RBR50 (87), RBR350 (7), RBR750 (124), RBR752 (4), RBR753 (4), RBR753S (4), RBR754 (4), RBR840 (21), RBR850 (144), RBR852 (1), RBRE960 (1), RBS10 (8), RBS20 (80), RBS40 (78), RBS40V (18), RBS40V-200 (2), RBS50 (103), RBS50Y (19), RBS350 (7), RBS750 (123), RBS840 (21), RBS850 (143), RBSE960 (1), RBW30 (23), RM-356 (1), RN42400 (1), RP114 (5), RS400 (22), RT-338 (1), RT311 (2), RT314 (1), RV340 (1), RV340W (1), RV345 (1), RV345P (1), ReadyNAS (3), ReadyNAS RAIDiator (1), ReadyNAS Surveillance (7), Router (1), SRC60 (1), SRK60 (7), SRK60B03 (1), SRK60B04 (1), SRK60B05 (1), SRK60B06 (1), SRR60 (11), SRS60 (11), SRX5308 (19), SSL312 (2), SXK30 (1), SXR30 (1), SXS30 (1), VPN Router (1), W104 (2), WAC104 (3), WAC120 (5), WAC505 (21), WAC510 (26), WAC720 (2), WAC730 (2), WAC740 (1), WC7500 (5), WC7520 (2), WC7600 (3), WC7600v1 (2), WC7600v2 (5), WC9500 (4), WG302v2 (1), WG311v1 (1), WG602 (2), WGR614 (4), WGR614v10 (1), WGT624 (2), WN604 (6), WN802Tv2 (2), WN2000RPT (1), WN2000RPTv3 (22), WN2500RPv2 (18), WN3000RPv (1), WN3000RPv2 (23), WN3000RPv3 (32), WN3100RP (1), WN3100RPv2 (25), WN3500RP (1), WN3500RPv1 (1), WNAP210 (2), WNAP210v2 (4), WNAP320 (8), WND930 (5), WNDAP350 (7), WNDAP360 (7), WNDAP620 (4), WNDAP660 (4), WNDR3300 (1), WNDR3400 (1), WNDR3400v2 (1), WNDR3400v3 (26), WNDR3700v2 (3), WNDR3700v3 (1), WNDR3700v4 (75), WNDR3700v5 (5), WNDR4000 (1), WNDR4300 (63), WNDR4300v1 (12), WNDR4300v2 (88), WNDR4500 (2), WNDR4500v2 (5), WNDR4500v3 (88), WNDR4700 (7), WNDR Router (1), WNR612v2 (1), WNR614 (1), WNR834Bv2 (1), WNR1000 (2), WNR1000V4 (4), WNR1000v3 (4), WNR1000v4 (8), WNR2000 (2), WNR2000v1 (1), WNR2000v2 (3), WNR2000v3 (3), WNR2000v4 (4), WNR2000v5 (79), WNR2000v5 (R2000) (1), WNR2010v5 (3), WNR2020 (35), WNR2050 (9), WNR3500 (1), WNR3500L (5), WNR3500Lv2 (26), WNR3500U (3), WPN824EXT (2), WPN824v3 (1), Wg111v2 Driver (1), Wndap330 (1), XAVN2001v2 (2), XR300 (22), XR300 (1), XR450 (15), XR500 (111), XR700 (66), XR1000 (19), XS512EM (5), XS708Ev2 (2), XS716E (2), XS724EM (5), XWN5001 (3), affects R6260 (1), and XR300 (1)

Link to Vendor Website: https://www.netgear.com/

PubliéBaseTempVulnérabilitéProdExpConCTIEPSSCVE
15/03/20246.36.1Netgear DGND4000 setup.cgi Privilege EscalationWireless LAN SoftwareNot DefinedNot Defined0.020.00043CVE-2023-50677
12/03/20245.35.1Netgear CBR40/CBK40/CBK43 currentsetting.htm divulgation de l'informationInconnueNot DefinedNot Defined0.000.00043CVE-2024-28340
12/03/20244.34.2Netgear CBR40/CBK40/CBK43 debuginfo.htm divulgation de l'informationInconnueNot DefinedNot Defined0.040.00043CVE-2024-28339
07/03/20247.27.2Netgear RAX30 HTTP Request getblockschedule buffer overflowWireless LAN SoftwareNot DefinedNot Defined0.100.00047CVE-2023-48725
10/02/20245.04.9Netgear R7000 Web Management Interface debuginfo.htm divulgation de l'informationWireless LAN SoftwareProof-of-ConceptWorkaround0.030.00052CVE-2024-1431
10/02/20245.04.9Netgear R7000 Web Management Interface currentsetting.htm divulgation de l'informationWireless LAN SoftwareProof-of-ConceptWorkaround0.030.00052CVE-2024-1430
21/12/20233.53.4Netgear ProSAFE Network Management System saveNodeLabel cross site scriptingInconnueNot DefinedOfficial Fix0.020.00000CVE-2023-50231
15/12/20237.67.5Netgear WNR2000v4 HTTP for SOAP Authentication elévation de privilègesWireless LAN SoftwareNot DefinedNot Defined0.020.00174CVE-2023-50089
08/12/20237.67.5Netgear Orbi RBR750 httpd buffer overflowInconnueNot DefinedOfficial Fix0.000.00087CVE-2023-49007
30/11/20237.87.6Netgear ProSAFE Network Management System Tomcat Server elévation de privilègesInconnueNot DefinedOfficial Fix0.020.00043CVE-2023-49694
30/11/20239.89.6Netgear ProSAFE Network Management System Java Debug Wire Protocol authentification faibleInconnueNot DefinedOfficial Fix0.020.00214CVE-2023-49693
21/11/20235.55.3Netgear ProSAFE Network Management System clearAlertByIds sql injectionInconnueNot DefinedNot Defined0.050.00000CVE-2023-44449
21/11/20236.36.1Netgear ProSAFE Network Management System getNodesByTopologyMapSearch sql injectionInconnueNot DefinedNot Defined0.000.00000CVE-2023-44450
15/11/20238.88.4Netgear CAX30 SSO buffer overflowInconnueNot DefinedOfficial Fix0.040.00000CVE-2023-44445
01/09/20238.58.4Netgear R6400v2 httpd buffer overflowWireless LAN SoftwareNot DefinedOfficial Fix0.000.00209CVE-2023-36187
31/08/20238.88.4Netgear Orbi 760 SOAP API authentification faibleInconnueNot DefinedOfficial Fix0.000.00000CVE-2023-41183
31/08/20237.26.9Netgear ProSAFE Network Management System ZipUtils directory traversalInconnueNot DefinedOfficial Fix0.050.00000CVE-2023-41182
23/08/20238.88.4Netgear RAX30 UPnP elévation de privilègesWireless LAN SoftwareNot DefinedOfficial Fix0.040.00000CVE-2023-40479
23/08/20238.88.4Netgear RAX30 DHCP Server elévation de privilègesWireless LAN SoftwareNot DefinedOfficial Fix0.060.00000CVE-2023-40480
23/08/20238.07.6Netgear RAX30 Telnet CLI buffer overflowWireless LAN SoftwareNot DefinedOfficial Fix0.010.00000CVE-2023-40478
08/08/20237.17.0Netgear EX6200 acosNvramConfig_set buffer overflowInconnueNot DefinedNot Defined0.000.00050CVE-2023-38926
08/08/20237.17.0Netgear DC112A/EX6200/R6300v2 password.cgi buffer overflowWireless LAN SoftwareNot DefinedNot Defined0.000.00050CVE-2023-38925
08/08/20236.05.9Netgear DGN3500 setup.cgi buffer overflowWireless LAN SoftwareNot DefinedNot Defined0.020.00044CVE-2023-38924
08/08/20237.17.0Netgear DG834Gv5 bsw_ssid.cgi buffer overflowWireless LAN SoftwareNot DefinedNot Defined0.000.00050CVE-2023-38591
08/08/20237.17.0Netgear R6900P ia_ap_setting.cgi buffer overflowWireless LAN SoftwareNot DefinedNot Defined0.000.00050CVE-2023-38412
08/08/20237.17.0Netgear XR300 genie_ap_wifi_change.cgi buffer overflowWireless LAN SoftwareNot DefinedNot Defined0.000.00050CVE-2023-36499
08/08/20238.07.9Netgear R7100LG usb_remote_invite.cgi elévation de privilègesWireless LAN SoftwareNot DefinedNot Defined0.080.00109CVE-2023-38928
08/08/20237.17.0Netgear JWNR2000v2/XWN5001/XAVN2001v2 check_auth buffer overflowWireless LAN SoftwareNot DefinedNot Defined0.000.00050CVE-2023-39550
08/08/20237.17.0Netgear WG302v2 upgrade_handler elévation de privilègesWireless LAN SoftwareNot DefinedOfficial Fix0.000.00048CVE-2023-38921
08/08/20237.17.1Netgear JWNR2000v2/XWN5001/XAVN2001v2 update_auth buffer overflowWireless LAN SoftwareNot DefinedNot Defined0.050.00050CVE-2023-38922
14/07/20236.36.0Netgear ProSAFE Network Management System createUser elévation de privilègesInconnueNot DefinedOfficial Fix0.000.00000CVE-2023-38102
14/07/20236.36.0Netgear ProSAFE Network Management System clearAlertByIds sql injectionInconnueNot DefinedOfficial Fix0.040.00000CVE-2023-38100
14/07/20237.37.0Netgear ProSAFE Network Management System MyHandlerInterceptor authentification faibleInconnueNot DefinedOfficial Fix0.030.00000CVE-2023-38096
14/07/20238.88.4Netgear ProSAFE Network Management System SettingConfigController Privilege EscalationInconnueNot DefinedOfficial Fix0.000.00000CVE-2023-38101
14/07/20236.36.0Netgear ProSAFE Network Management System getNodesByTopologyMapSearch sql injectionInconnueNot DefinedOfficial Fix0.040.00000CVE-2023-38099
14/07/20239.89.4Netgear ProSAFE Network Management System UpLoadServlet elévation de privilègesInconnueNot DefinedOfficial Fix0.020.00000CVE-2023-38098
14/07/20238.88.4Netgear ProSAFE Network Management System BkreProcessThread Privilege EscalationInconnueNot DefinedOfficial Fix0.050.00000CVE-2023-38097
14/07/20238.88.4Netgear ProSAFE Network Management System MFileUploadController elévation de privilègesInconnueNot DefinedOfficial Fix0.100.00000CVE-2023-38095
01/07/20238.17.7Netgear RAX50 Certificate Validation curl_post authentification faibleWireless LAN SoftwareNot DefinedOfficial Fix0.000.00000CVE-2023-35721
01/07/20238.88.4Netgear RAX30 UPnP elévation de privilègesWireless LAN SoftwareNot DefinedOfficial Fix0.040.00000CVE-2023-35722
21/06/20238.07.9Netgear R6250 buffer overflowWireless LAN SoftwareNot DefinedNot Defined0.030.00087CVE-2023-34563
09/06/20238.88.4Netgear RAX30 cmsCli_authenticate buffer overflowWireless LAN SoftwareNot DefinedOfficial Fix0.000.00000CVE-2023-34285
09/06/20236.36.0Netgear RAX30 authentification faibleWireless LAN SoftwareNot DefinedOfficial Fix0.000.00000CVE-2023-34284
09/06/20232.42.3Netgear RAX30 USB Share elévation de privilègesWireless LAN SoftwareNot DefinedOfficial Fix0.000.00000CVE-2023-34283
06/06/20237.17.0Netgear D6220/D8500/R6700/R6900 Web Management elévation de privilègesWireless LAN SoftwareNot DefinedNot Defined0.040.00048CVE-2023-33533
06/06/20237.07.0Netgear R6250 Web Management elévation de privilègesWireless LAN SoftwareNot DefinedNot Defined0.020.00110CVE-2023-33532
02/05/20238.88.4Netgear RAX30 libcms_cli elévation de privilègesWireless LAN SoftwareNot DefinedOfficial Fix0.040.00000CVE-2023-27367
02/05/20238.88.4Netgear RAX30 soap_serverd buffer overflowWireless LAN SoftwareNot DefinedOfficial Fix0.030.00000CVE-2023-27368
02/05/20238.88.4Netgear RAX30 soap_serverd buffer overflowWireless LAN SoftwareNot DefinedOfficial Fix0.080.00000CVE-2023-27369
02/05/20234.34.1Netgear RAX30 GetInfo divulgation de l'informationWireless LAN SoftwareNot DefinedOfficial Fix0.040.00000CVE-2023-27357

973 plus d'entrées ne sont pas affichées

Interested in the pricing of exploits?

See the underground prices here!