High

DATE	CVE	VULNERABILITY TITLE	RISK
2020-12-30	CVE-2020-35841	Cross-site Scripting vulnerability in Netgear products Certain NETGEAR devices are affected by stored XSS. network low complexity netgear CWE-79	7.6
2020-12-30	CVE-2020-35787	Classic Buffer Overflow vulnerability in Netgear products Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. low complexity netgear CWE-120	8.0
2020-10-09	CVE-2020-26914	Command Injection vulnerability in Netgear products Certain NETGEAR devices are affected by command injection by an authenticated user. high complexity netgear CWE-77	7.1
2020-10-09	CVE-2020-26912	Cross-Site Request Forgery (CSRF) vulnerability in Netgear products Certain NETGEAR devices are affected by CSRF. network low complexity netgear CWE-352	8.8
2020-10-09	CVE-2020-26911	Unspecified vulnerability in Netgear products Certain NETGEAR devices are affected by lack of access control at the function level. low complexity netgear	8.8
2020-04-27	CVE-2018-21169	Unspecified vulnerability in Netgear products Certain NETGEAR devices are affected by incorrect configuration of security settings. low complexity netgear	8.8
2020-04-27	CVE-2018-21168	Information Exposure vulnerability in Netgear products Certain NETGEAR devices are affected by disclosure of sensitive information. network low complexity netgear CWE-200	7.5
2020-04-27	CVE-2018-21156	Classic Buffer Overflow vulnerability in Netgear products Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. network low complexity netgear CWE-120	7.2
2020-04-24	CVE-2017-18703	Cross-Site Request Forgery (CSRF) vulnerability in Netgear products Certain NETGEAR devices are affected by CSRF. network low complexity netgear CWE-352	8.8
2020-04-23	CVE-2018-21139	Information Exposure vulnerability in Netgear products Certain NETGEAR devices are affected by disclosure of sensitive information. network low complexity netgear CWE-200	7.5