Vulnerabilidades em NETGEAR

211 resultados
Análise Vexday

Com 126 CVEs catalogadas, a superfície de ataque dos dispositivos NETGEAR concentra atenção em CWE-121 (Stack-based Buffer Overflow) como tipo de falha mais recorrente, o que é característico de equipamentos embarcados com restrições de desenvolvimento seguro. A taxa de exploração ativa está abaixo da média geral do catálogo CISA KEV, com zero entradas confirmadas, mas o escore EPSS de 0,8734 associado a CVE-2020-10924 indica alta probabilidade estimada de exploração para essa vulnerabilidade específica, exigindo atenção mesmo na ausência de confirmação formal no KEV. Os 17 registros surgidos nos últimos 90 dias sinalizam ritmo contínuo de descobertas, e a presença de 5 CVEs críticas somada a 2 com PoC pública representa risco concreto para ambientes que mantêm firmware desatualizado. Organizações com equipamentos NETGEAR em produção devem priorizar a verificação do status de CVE-2020-10924 e acompanhar de perto o fluxo recente de novas divulgações.

CVE-2024-1430MEDIUMNetgear R7000 Web Management Interface currentsetting.htm information disclosureEPSS 0.6%CVE-2025-4980MEDIUMNetgear DGND3700 mini_http currentsetting.htm information disclosureEPSS 0.6%CVE-2025-4977MEDIUMNetgear DGND3700 BRS_top.html information disclosureEPSS 0.6%CVE-2020-27873MEDIUMThis vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62_1EPSS 0.6%CVE-2022-38458MEDIUMA cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafEPSS 0.6%CVE-2023-2386LOWNetgear SRX5308 Web Management Interface cross site scriptingEPSS 0.6%CVE-2023-2387LOWNetgear SRX5308 Web Management Interface cross site scriptingEPSS 0.6%CVE-2023-2388LOWNetgear SRX5308 Web Management Interface cross site scriptingEPSS 0.6%CVE-2023-2381LOWNetgear SRX5308 Web Management Interface cross site scriptingEPSS 0.6%CVE-2026-11734LOWDevice administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.EPSS 0.6%CVE-2023-24498HIGHNetgear ProSAFE 24 Port 10/100 FS726TP - CWE-522: Insufficiently Protected Credentials.EPSS 0.6%CVE-2021-34982HIGHNETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-4117MEDIUMNetgear JWNR2000v2 sub_41A914 buffer overflowEPSS 0.6%CVE-2023-51634HIGHNETGEAR RAX30 Improper Certificate Validation Remote Code Execution VulnerabilityEPSS 0.6%CVE-2023-27357MEDIUMNETGEAR RAX30 GetInfo Missing Authentication Information Disclosure VulnerabilityEPSS 0.6%CVE-2024-5245HIGHNETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation VulnerabilityEPSS 0.6%CVE-2024-4235LOWNetgear DG834Gv5 Web Management Interface cleartext storageEPSS 0.6%CVE-2021-34947HIGHNETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-49694HIGHNETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL ServerEPSS 0.5%CVE-2024-1431MEDIUMNetgear R7000 Web Management Interface debuginfo.htm information disclosureEPSS 0.5%