Vulnerabilities > Netgear > Wndr4500 Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2020-04-15 CVE-2019-20767 Out-of-bounds Write vulnerability in Netgear products
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.
network
low complexity
netgear CWE-787
7.2
2019-10-09 CVE-2019-17372 Improper Authentication vulnerability in Netgear products
Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi.
network
high complexity
netgear CWE-287
8.1
2018-07-24 CVE-2016-5638 Information Exposure vulnerability in Netgear Wndr4500 Firmware 1.0.1.401.0.6877
There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.40_1.0.6877.
network
low complexity
netgear CWE-200
7.5
2017-01-17 CVE-2017-5521 Unspecified vulnerability in Netgear products
An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices.
network
high complexity
netgear
8.1