Vulnerabilities > Netgear > Wndr3400 Firmware > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-08-11 CVE-2021-38528 Command Injection vulnerability in Netgear products
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
network
low complexity
netgear CWE-77
critical
9.8
2020-04-23 CVE-2018-21162 OS Command Injection vulnerability in Netgear products
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
network
low complexity
netgear CWE-78
critical
9.8
2019-10-09 CVE-2019-17373 Unspecified vulnerability in Netgear products
Certain NETGEAR devices allow unauthenticated access to critical .cgi and .htm pages via a substring ending with .jpg, such as by appending ?x=1.jpg to a URL.
network
low complexity
netgear
critical
9.8