Vulnerabilities > Netgear > High

DATE CVE VULNERABILITY TITLE RISK
2021-12-26 CVE-2021-45653 Information Exposure vulnerability in Netgear Rbk352 Firmware, Rbr350 Firmware and Rbs350 Firmware
Certain NETGEAR devices are affected by disclosure of sensitive information.
network
low complexity
netgear CWE-200
7.5
2021-12-26 CVE-2021-45654 Information Exposure vulnerability in Netgear Xr1000 Firmware 1.0.0.44/1.0.0.50/1.0.0.52
NETGEAR XR1000 devices before 1.0.0.58 are affected by disclosure of sensitive information.
network
low complexity
netgear CWE-200
7.5
2021-12-26 CVE-2021-45656 Injection vulnerability in Netgear products
Certain NETGEAR devices are affected by server-side injection.
local
low complexity
netgear CWE-74
7.8
2021-12-26 CVE-2021-45657 Injection vulnerability in Netgear products
Certain NETGEAR devices are affected by server-side injection.
local
low complexity
netgear CWE-74
7.8
2021-12-26 CVE-2021-45659 Injection vulnerability in Netgear products
Certain NETGEAR devices are affected by server-side injection.
local
low complexity
netgear CWE-74
7.8
2021-12-26 CVE-2021-45660 Injection vulnerability in Netgear products
Certain NETGEAR devices are affected by server-side injection.
local
low complexity
netgear CWE-74
7.8
2021-12-26 CVE-2021-45661 Injection vulnerability in Netgear products
Certain NETGEAR devices are affected by server-side injection.
local
low complexity
netgear CWE-74
7.8
2021-12-26 CVE-2021-45679 Unspecified vulnerability in Netgear products
Certain NETGEAR devices are affected by privilege escalation.
network
low complexity
netgear
7.2
2021-12-09 CVE-2021-41449 Path Traversal vulnerability in Netgear Rax35 Firmware, Rax38 Firmware and Rax40 Firmware
A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files of the web application, via sending a specially crafted HTTP packet.
local
low complexity
netgear CWE-22
7.1
2021-11-15 CVE-2021-34991 Out-of-bounds Write vulnerability in Netgear products
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers.
low complexity
netgear CWE-787
8.8