Vulnerabilities > Netgear > High

DATE CVE VULNERABILITY TITLE RISK
2020-10-09 CVE-2020-26902 Command Injection vulnerability in Netgear products
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
low complexity
netgear CWE-77
8.3
2020-10-09 CVE-2020-26898 Unspecified vulnerability in Netgear Rax40 Firmware 1.0.3.62/1.0.3.64
NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings.
low complexity
netgear
8.3
2020-08-20 CVE-2020-15635 Stack-based Buffer Overflow vulnerability in Netgear R6700 Firmware
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers with firmware 1.0.4.84_10.0.58.
low complexity
netgear CWE-121
8.3
2020-07-28 CVE-2020-15416 Stack-based Buffer Overflow vulnerability in Netgear R6700 Firmware 1.0.4.8410.0.58
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers.
low complexity
netgear CWE-121
8.3
2020-07-28 CVE-2020-10929 Integer Overflow or Wraparound vulnerability in Netgear R6700 Firmware 1.0.4.8410.0.58
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers.
low complexity
netgear CWE-190
8.3
2020-07-28 CVE-2020-10927 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Netgear R6700 Firmware 1.0.4.8410.0.58
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers.
low complexity
netgear CWE-327
8.3
2020-07-28 CVE-2020-10926 Download of Code Without Integrity Check vulnerability in Netgear R6700 Firmware 1.0.4.8410.0.58
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers.
low complexity
netgear CWE-494
8.3
2020-07-28 CVE-2020-10925 Improper Certificate Validation vulnerability in Netgear R6700 Firmware 1.0.4.8410.0.58
This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers.
low complexity
netgear CWE-295
8.3
2020-07-28 CVE-2020-10924 Stack-based Buffer Overflow vulnerability in Netgear R6700 Firmware 1.0.4.8410.0.58
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers.
low complexity
netgear CWE-121
8.3
2020-07-28 CVE-2020-10923 Authentication Bypass by Primary Weakness vulnerability in Netgear R6700 Firmware 1.0.4.8410.0.58
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers.
low complexity
netgear CWE-305
8.3