Vulnerabilidades em NETGEAR

217 resultados
Análise Vexday

Com 126 CVEs catalogadas, a superfície de ataque dos dispositivos NETGEAR concentra atenção em CWE-121 (Stack-based Buffer Overflow) como tipo de falha mais recorrente, o que é característico de equipamentos embarcados com restrições de desenvolvimento seguro. A taxa de exploração ativa está abaixo da média geral do catálogo CISA KEV, com zero entradas confirmadas, mas o escore EPSS de 0,8734 associado a CVE-2020-10924 indica alta probabilidade estimada de exploração para essa vulnerabilidade específica, exigindo atenção mesmo na ausência de confirmação formal no KEV. Os 17 registros surgidos nos últimos 90 dias sinalizam ritmo contínuo de descobertas, e a presença de 5 CVEs críticas somada a 2 com PoC pública representa risco concreto para ambientes que mantêm firmware desatualizado. Organizações com equipamentos NETGEAR em produção devem priorizar a verificação do status de CVE-2020-10924 e acompanhar de perto o fluxo recente de novas divulgações.

CVE-2020-15635HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 EPSS 2.6%CVE-2018-11106—NETGEAR has released fixes for a pre-authentication command injection in request_handler.php security vulnerability on the following productEPSS 2.6%CVE-2026-11739MEDIUMCommand injection vulnerability in some NETGEAR Nighthawk devicesEPSS 2.5%CVE-2020-27867MEDIUMThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R62EPSS 2.3%CVE-2026-11814MEDIUMCommand injection vulnerability in certain NETGEAR Nighthawk and Orbi routersEPSS 2.2%CVE-2023-38097HIGHNETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution VulnerabilityEPSS 2.1%CVE-2023-38101HIGHNETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution VulnerabilityEPSS 2.1%CVE-2020-27861HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. AEPSS 2.1%CVE-2024-6814HIGHNETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution VulnerabilityEPSS 2.1%CVE-2022-38452HIGHA command execution vulnerability exists in the hidden telnet service functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-craftEPSS 2.1%CVE-2019-5055HIGHAn exploitable denial-of-service vulnerability exists in the Host Access Point Daemon (hostapd) on the NETGEAR N300 (WNR2000v5 with FirmwareEPSS 2.0%CVE-2020-10929HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 EPSS 2.0%CVE-2022-36429HIGHA command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite RBS750 4.6.8.5. A speciaEPSS 2.0%CVE-2025-4135MEDIUMNetgear WG302v2 ui_get_input_value command injectionEPSS 2.0%CVE-2024-6813HIGHNETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution VulnerabilityEPSS 1.8%CVE-2025-4148HIGHNetgear EX6200 sub_503FC buffer overflowEPSS 1.7%CVE-2025-4149HIGHNetgear EX6200 sub_54014 buffer overflowEPSS 1.7%CVE-2025-4150HIGHNetgear EX6200 sub_54340 buffer overflowEPSS 1.7%CVE-2021-34978HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 rouEPSS 1.6%CVE-2025-4146HIGHNetgear EX6200 sub_41940 buffer overflowEPSS 1.5%