Vulnerabilities > Netgear > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-04-22 | CVE-2018-21125 | Improper Authentication vulnerability in Netgear Wac510 Firmware 1.3.0.10 NETGEAR WAC510 devices before 5.0.0.17 are affected by authentication bypass. | 8.8 |
| 2020-04-22 | CVE-2018-21124 | Improper Privilege Management vulnerability in Netgear Wac505 Firmware and Wac510 Firmware NETGEAR WAC510 devices before 5.0.0.17 are affected by privilege escalation. | 8.8 |
| 2020-04-22 | CVE-2018-21123 | Injection vulnerability in Netgear Wc7500 Firmware, Wc7520 Firmware and Wc7600 Firmware Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. | 8.8 |
| 2020-04-22 | CVE-2018-21121 | Improper Authentication vulnerability in Netgear products Certain NETGEAR devices are affected by authentication bypass. | 8.8 |
| 2020-04-22 | CVE-2018-21120 | Cross-Site Request Forgery (CSRF) vulnerability in Netgear products Certain NETGEAR devices are affected by CSRF. | 8.0 |
| 2020-04-22 | CVE-2018-21118 | Improper Authentication vulnerability in Netgear Xr500 Firmware 2.3.2.22 NETGEAR XR500 devices before 2.3.2.32 are affected by authentication bypass. | 8.8 |
| 2020-04-22 | CVE-2017-18768 | Cross-Site Request Forgery (CSRF) vulnerability in Netgear products Certain NETGEAR devices are affected by CSRF. | 8.8 |
| 2020-04-22 | CVE-2017-18764 | Injection vulnerability in Netgear products Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. | 8.8 |
| 2020-04-22 | CVE-2017-18762 | Injection vulnerability in Netgear products Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. | 8.8 |
| 2020-04-22 | CVE-2018-21117 | Unspecified vulnerability in Netgear Xr500 Firmware 2.3.2.22 NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler. low complexity netgear | 8.8 |