High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-01-25	CVE-2021-34865	Incorrect Comparison vulnerability in Netgear products This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers. low complexity netgear CWE-697	8.8
2021-12-26	CVE-2021-45534	Command Injection vulnerability in Netgear products Certain NETGEAR devices are affected by command injection by an authenticated user. local low complexity netgear CWE-77	7.8
2021-12-26	CVE-2021-45551	Command Injection vulnerability in Netgear products Certain NETGEAR devices are affected by command injection by an authenticated user. network low complexity netgear CWE-77	8.8
2021-12-26	CVE-2021-45647	Information Exposure vulnerability in Netgear products Certain NETGEAR devices are affected by disclosure of sensitive information. network low complexity netgear CWE-200	7.5
2021-12-26	CVE-2021-45657	Injection vulnerability in Netgear products Certain NETGEAR devices are affected by server-side injection. local low complexity netgear CWE-74	7.8
2020-12-30	CVE-2020-35841	Cross-site Scripting vulnerability in Netgear products Certain NETGEAR devices are affected by stored XSS. network low complexity netgear CWE-79	7.6
2020-10-09	CVE-2020-26914	Command Injection vulnerability in Netgear products Certain NETGEAR devices are affected by command injection by an authenticated user. high complexity netgear CWE-77	7.1
2020-10-09	CVE-2020-26912	Cross-Site Request Forgery (CSRF) vulnerability in Netgear products Certain NETGEAR devices are affected by CSRF. network low complexity netgear CWE-352	8.8
2020-10-09	CVE-2020-26911	Unspecified vulnerability in Netgear products Certain NETGEAR devices are affected by lack of access control at the function level. low complexity netgear	8.8