Vulnerabilidades en NETGEAR

211 resultados
Análisis Vexday

Com 126 CVEs catalogadas, a superfície de ataque dos dispositivos NETGEAR concentra atenção em CWE-121 (Stack-based Buffer Overflow) como tipo de falha mais recorrente, o que é característico de equipamentos embarcados com restrições de desenvolvimento seguro. A taxa de exploração ativa está abaixo da média geral do catálogo CISA KEV, com zero entradas confirmadas, mas o escore EPSS de 0,8734 associado a CVE-2020-10924 indica alta probabilidade estimada de exploração para essa vulnerabilidade específica, exigindo atenção mesmo na ausência de confirmação formal no KEV. Os 17 registros surgidos nos últimos 90 dias sinalizam ritmo contínuo de descobertas, e a presença de 5 CVEs críticas somada a 2 com PoC pública representa risco concreto para ambientes que mantêm firmware desatualizado. Organizações com equipamentos NETGEAR em produção devem priorizar a verificação do status de CVE-2020-10924 e acompanhar de perto o fluxo recente de novas divulgações.

CVE-2023-49693CRITICALNETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire ProtocolEPSS 1.2%CVE-2025-6511HIGHNetgear EX6150 sub_410090 stack-based overflowEPSS 1.1%CVE-2021-34977HIGHThis vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116_10.2.100EPSS 1.1%CVE-2022-43654HIGHNETGEAR CAX30S SSO Command Injection Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-12945LOWImproper input validation in NETGEAR Nighthawk router R7000PEPSS 1.1%CVE-2025-4140HIGHNetgear EX6120 sub_30394 buffer overflowEPSS 1.1%CVE-2025-4142HIGHNetgear EX6200 sub_3C8EC buffer overflowEPSS 1.1%CVE-2025-4145HIGHNetgear EX6200 sub_3D0BC buffer overflowEPSS 1.1%CVE-2024-23690HIGHEOL Netgear FVS336v3 Telnet Configuration Backup Command InjectionEPSS 1.1%CVE-2021-27253HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. AlthougEPSS 1.1%CVE-2021-27252HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1EPSS 1.1%CVE-2025-4139HIGHNetgear EX6120 fwAcosCgiInbound buffer overflowEPSS 1.1%CVE-2025-4141HIGHNetgear EX6200 sub_3C03C buffer overflowEPSS 1.1%CVE-2025-4147HIGHNetgear EX6200 sub_47F7C buffer overflowEPSS 1.1%CVE-2026-11739MEDIUMCommand injection vulnerability in some NETGEAR Nighthawk devicesEPSS 1.1%CVE-2023-0850LOWNetgear WNDR3700v2 Web Interface denial of serviceEPSS 1.0%CVE-2025-4114HIGHNetgear JWNR2000v2 check_language_file buffer overflowEPSS 1.0%CVE-2025-5934HIGHNetgear EX3700 mtd sub_41619C stack-based overflowEPSS 1.0%CVE-2023-35721HIGHNETGEAR Multiple Routers curl_post Improper Certificate Validation Remote Code Execution VulnerabilityEPSS 1.0%CVE-2025-4120HIGHNetgear JWNR2000v2 sub_4238E8 buffer overflowEPSS 1.0%