Vulnerabilidades em NETGEAR

217 resultados
Análise Vexday

Com 126 CVEs catalogadas, a superfície de ataque dos dispositivos NETGEAR concentra atenção em CWE-121 (Stack-based Buffer Overflow) como tipo de falha mais recorrente, o que é característico de equipamentos embarcados com restrições de desenvolvimento seguro. A taxa de exploração ativa está abaixo da média geral do catálogo CISA KEV, com zero entradas confirmadas, mas o escore EPSS de 0,8734 associado a CVE-2020-10924 indica alta probabilidade estimada de exploração para essa vulnerabilidade específica, exigindo atenção mesmo na ausência de confirmação formal no KEV. Os 17 registros surgidos nos últimos 90 dias sinalizam ritmo contínuo de descobertas, e a presença de 5 CVEs críticas somada a 2 com PoC pública representa risco concreto para ambientes que mantêm firmware desatualizado. Organizações com equipamentos NETGEAR em produção devem priorizar a verificação do status de CVE-2020-10924 e acompanhar de perto o fluxo recente de novas divulgações.

CVE-2021-27252HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1EPSS 1.2%CVE-2023-27356MEDIUMNETGEAR RAX30 logCtrl Command Injection Remote Code Execution VulnerabilityEPSS 1.2%CVE-2022-27641HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9EPSS 1.2%CVE-2025-4140HIGHNetgear EX6120 sub_30394 buffer overflowEPSS 1.2%CVE-2025-4142HIGHNetgear EX6200 sub_3C8EC buffer overflowEPSS 1.2%CVE-2020-10926HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 EPSS 1.2%CVE-2025-4145HIGHNetgear EX6200 sub_3D0BC buffer overflowEPSS 1.2%CVE-2021-34977HIGHThis vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116_10.2.100EPSS 1.2%CVE-2025-4147HIGHNetgear EX6200 sub_47F7C buffer overflowEPSS 1.2%CVE-2025-4141HIGHNetgear EX6200 sub_3C03C buffer overflowEPSS 1.2%CVE-2025-4139HIGHNetgear EX6120 fwAcosCgiInbound buffer overflowEPSS 1.2%CVE-2023-49693CRITICALNETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire ProtocolEPSS 1.2%CVE-2025-12945LOWImproper input validation in NETGEAR Nighthawk router R7000PEPSS 1.2%CVE-2022-43654HIGHNETGEAR CAX30S SSO Command Injection Remote Code Execution VulnerabilityEPSS 1.1%CVE-2024-23690HIGHEOL Netgear FVS336Gv2 and FVS336Gv3 Telnet Configuration Backup Command InjectionEPSS 1.1%CVE-2025-5934HIGHNetgear EX3700 mtd sub_41619C stack-based overflowEPSS 1.1%CVE-2025-4114HIGHNetgear JWNR2000v2 check_language_file buffer overflowEPSS 1.1%CVE-2026-0404MEDIUMInsufficient input validation in NETGEAR Orbi routersEPSS 1.1%CVE-2023-0850LOWNetgear WNDR3700v2 Web Interface denial of serviceEPSS 1.0%CVE-2025-5495MEDIUMNetgear WNR614 URL improper authenticationEPSS 1.0%