Netgear R7000 Vulnerabilità

Sequenza temporale

Versione

1.0.11.136_10.2.120	2
1.0.11.116_10.2.100	1
1.0.11.116	1
1.0.9.64	1
10.2.64	1

Contromisure

Official Fix	84
Temporary Fix	0
Workaround	2
Unavailable	0
Not Defined	7

Sfruttabilità

High	2
Functional	0
Proof-of-Concept	3
Unproven	0
Not Defined	88

Accesso al vettore

Not Defined	0
Physical	0
Local	11
Adjacent	53
Network	29

Autenticazione

Not Defined	0
High	26
Low	23
None	44

Interazione dell'utente

Not Defined	0
Required	11
None	82

CVSSv3 Base

≤1	0
≤2	0
≤3	2
≤4	2
≤5	13
≤6	18
≤7	23
≤8	15
≤9	6
≤10	14

CVSSv3 Temp

≤1	0
≤2	0
≤3	2
≤4	2
≤5	14
≤6	30
≤7	10
≤8	15
≤9	15
≤10	5

VulDB

≤1	0
≤2	0
≤3	7
≤4	4
≤5	16
≤6	25
≤7	15
≤8	7
≤9	14
≤10	5

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	6
≤7	17
≤8	3
≤9	10
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	2
≤5	7
≤6	5
≤7	8
≤8	4
≤9	8
≤10	12

Fornitore

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 giorni

<1k	0
<2k	1
<5k	6
<10k	17
<25k	51
<50k	16
<100k	2
≥100k	0

Exploiter aujourd'hui

<1k	59
<2k	7
<5k	13
<10k	12
<25k	2
<50k	0
<100k	0
≥100k	0

Affected Versions (51): 1.0.1, 1.0.1.1, 1.0.1.2, 1.0.1.3, 1.0.1.4, 1.0.1.5, 1.0.1.6, 1.0.1.7, 1.0.1.8, 1.0.1.9, 1.0.1.11, 1.0.1.12, 1.0.1.13, 1.0.1.14, 1.0.1.15, 1.0.1.16, 1.0.1.17, 1.0.1.18, 1.0.1.19, 1.0.1.21, 1.0.1.22, 1.0.1.23, 1.0.1.24, 1.0.1.25, 1.0.1.26, 1.0.1.27, 1.0.1.28, 1.0.1.29, 1.0.1.31, 1.0.1.32, 1.0.1.33, 1.0.1.34, 1.0.1.35, 1.0.1.36, 1.0.1.37, 1.0.1.38, 1.0.1.39, 1.0.1.41, 1.0.1.42, 1.0.1.43, 1.0.1.44, 1.0.1.45, 1.0.1.46, 1.0.1.47, 1.0.4.84_10.0.58, 1.0.9.64, 1.0.11.116, 1.0.11.116_10.2.1, 1.0.11.136_10.2.12, 10.2.64, V1.0.7.2_1.1.93

Link to Product Website: https://www.netgear.com/

Tipo di software: Wireless LAN Software

Data di pubblicazione	Base	Temp	Vulnerabilità	0day	Oggi	Sfr	Con	CTI	CVE
10/02/2024	5.0	4.9	Netgear R7000 Web Management Interface debuginfo.htm rivelazione di un 'informazione	$5k-$25k	$0-$5k	Proof-of-Concept	Workaround	0.04	CVE-2024-1431
10/02/2024	5.0	4.9	Netgear R7000 Web Management Interface currentsetting.htm rivelazione di un 'informazione	$5k-$25k	$0-$5k	Proof-of-Concept	Workaround	0.09	CVE-2024-1430
30/12/2022	7.9	7.8	Netgear RAX40 buffer overflow	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-48196
14/01/2022	7.5	7.5	Netgear R7000 SOAP Request autenticazione debole	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2021-34977
26/12/2021	2.8	2.7	Netgear R7000/R7900/R8000/RAX15/RAX20/RAX200/RAX75/RAX80 cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45674
26/12/2021	4.1	4.1	Netgear R7000/R7900/R8000/RAX200/R7000P/RAX80/R6900P/RAX75 cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45673
26/12/2021	4.4	4.4	Netgear RBK852 cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45670
26/12/2021	4.0	3.9	Netgear R7000 cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45664
26/12/2021	4.2	4.2	Netgear R7000 cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45663
26/12/2021	4.2	4.2	Netgear R7000 cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45662