R6400V2 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2021-09-21	CVE-2021-40847	Cleartext Transmission of Sensitive Information vulnerability in Netgear products The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code execution as root via a MitM attack. network netgear CWE-319 critical	9.3
2020-12-30	CVE-2020-35800	Unspecified vulnerability in Netgear products Certain NETGEAR devices are affected by incorrect configuration of security settings. network low complexity netgear critical	9.7
2020-12-30	CVE-2020-35798	Command Injection vulnerability in Netgear products Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. local low complexity netgear CWE-77	7.2
2020-12-30	CVE-2020-35796	Classic Buffer Overflow vulnerability in Netgear products Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. network low complexity netgear CWE-120 critical	10.0
2020-12-30	CVE-2020-35795	Classic Buffer Overflow vulnerability in Netgear products Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. network low complexity netgear CWE-120	7.5
2020-11-09	CVE-2020-28373	Out-of-bounds Write vulnerability in Netgear products upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overflow. low complexity netgear CWE-787	8.3
2020-10-09	CVE-2020-26918	Cross-site Scripting vulnerability in Netgear products Certain NETGEAR devices are affected by stored XSS. network netgear CWE-79	3.5
2020-10-09	CVE-2020-26917	Cross-site Scripting vulnerability in Netgear products Certain NETGEAR devices are affected by stored XSS. network netgear CWE-79	3.5