Vulnerabilities in NETGEAR

211 results
Vexday analysis

Com 126 CVEs catalogadas, a superfície de ataque dos dispositivos NETGEAR concentra atenção em CWE-121 (Stack-based Buffer Overflow) como tipo de falha mais recorrente, o que é característico de equipamentos embarcados com restrições de desenvolvimento seguro. A taxa de exploração ativa está abaixo da média geral do catálogo CISA KEV, com zero entradas confirmadas, mas o escore EPSS de 0,8734 associado a CVE-2020-10924 indica alta probabilidade estimada de exploração para essa vulnerabilidade específica, exigindo atenção mesmo na ausência de confirmação formal no KEV. Os 17 registros surgidos nos últimos 90 dias sinalizam ritmo contínuo de descobertas, e a presença de 5 CVEs críticas somada a 2 com PoC pública representa risco concreto para ambientes que mantêm firmware desatualizado. Organizações com equipamentos NETGEAR em produção devem priorizar a verificação do status de CVE-2020-10924 e acompanhar de perto o fluxo recente de novas divulgações.

CVE-2023-2396MEDIUMNetgear SRX5308 Web Management Interface cross site scriptingEPSS 0.8%CVE-2023-27369HIGHNETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass VulnerabilityEPSS 0.8%CVE-2023-27368HIGHNETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass VulnerabilityEPSS 0.8%CVE-2023-44445HIGHNETGEAR CAX30 SSO Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2021-27239HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmwareEPSS 0.7%CVE-2021-27251HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. AuthentEPSS 0.7%CVE-2020-17409MEDIUMThis vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6EPSS 0.7%CVE-2025-25246HIGHNETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.EPSS 0.7%CVE-2023-2383LOWNetgear SRX5308 Web Management Interface cross site scriptingEPSS 0.7%CVE-2023-2390LOWNetgear SRX5308 Web Management Interface cross site scriptingEPSS 0.7%CVE-2023-2389LOWNetgear SRX5308 Web Management Interface cross site scriptingEPSS 0.7%CVE-2023-2393LOWNetgear SRX5308 Web Management Interface cross site scriptingEPSS 0.6%CVE-2023-2391LOWNetgear SRX5308 Web Management Interface cross site scriptingEPSS 0.6%CVE-2023-2394LOWNetgear SRX5308 Web Management Interface cross site scriptingEPSS 0.6%CVE-2023-2385LOWNetgear SRX5308 Web Management Interface cross site scriptingEPSS 0.6%CVE-2023-2384LOWNetgear SRX5308 Web Management Interface cross site scriptingEPSS 0.6%CVE-2023-2392LOWNetgear SRX5308 Web Management Interface cross site scriptingEPSS 0.6%CVE-2023-2382LOWNetgear SRX5308 Web Management Interface cross site scriptingEPSS 0.6%CVE-2023-34283MEDIUMNETGEAR RAX30 USB Share Link Following Information Disclosure VulnerabilityEPSS 0.6%CVE-2020-10928HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 EPSS 0.6%