Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2860▼ 336 respecto a la semana anterior
Críticas / altas1383▼ 43 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)296▼ 214 respecto a la semana anterior
77 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (6.5) | 0.33% | — | Netgear Xr1000 FirmwareNetgear Xr300 FirmwareNetgear D6220 FirmwareNetgear D6400 Firmware+48 | 7/5/2024 | 17/6/2026 | NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability.… | |
| Analizada | Alta (8.8) | 0.58% | — | Netgear Dc112a FirmwareNetgear Ex3700 FirmwareNetgear Ex3800 FirmwareNetgear Ex6120 Firmware+48 | 7/5/2024 | 17/6/2026 | NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability. The specific flaw exists… | |
| Modificada | Crítica (9.8) | 1.5% | — | Netgear R7100lg Firmware | 7/8/2023 | 17/6/2026 | Netgear R7100LG 1.0.0.78 was discovered to contain a command injection vulnerability via the password parameter at usb_remote_invite.cgi. | |
| Modificada | Alta (8) | 1.5% | — | Netgear Cax80 FirmwareNetgear Lax20 FirmwareNetgear Mr60 FirmwareNetgear Mr80 Firmware+29 | 29/3/2023 | 17/6/2026 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling… | |
| Modificada | Alta (8.8) | 25% | — | Netgear R6400 FirmwareNetgear R6700 FirmwareNetgear R6900p FirmwareNetgear R7000 Firmware+23 | 29/3/2023 | 17/6/2026 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SOAP requests. When parsing the SOAPAction header, the… | |
| Modificada | Alta (8.8) | 0.88% | — | Netgear Cax80 FirmwareNetgear Lax20 FirmwareNetgear Mr60 FirmwareNetgear Mr80 Firmware+29 | 29/3/2023 | 17/6/2026 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service. The issue results from incorrect string matching logic… | |
| Modificada | Alta (8.8) | 0.69% | — | Netgear D3600 FirmwareNetgear D6000 FirmwareNetgear D6200 FirmwareNetgear D6220 Firmware+45 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before 1.1.00.34, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000 before 1.0.1.74, D7000v2 before 1.0.0.53, D7800 before 1.0.1.56, D8500 before 1.0.3.44, DC112A… | |
| Modificada | Alta (7.2) | 0.62% | — | Netgear D3600 FirmwareNetgear D6000 FirmwareNetgear D6200 FirmwareNetgear D6220 Firmware+47 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before 1.1.00.34, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000 before 1.0.1.74, D7000v2 before 1.0.0.53, D7800 before 1.0.1.56, D8500 before 1.0.3.44, DC112A… | |
| Modificada | Crítica (9.8) | 1.5% | — | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear D7000v2 FirmwareNetgear D8500 Firmware+10 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.102, D7000v2 before 1.0.0.74, D8500 before 1.0.3.60, DC112A before 1.0.0.56, R6300v2 before 1.0.4.50, R6400 before 1.0.1.68, R7000 before 1.0.11.116, R7100LG… | |
| Modificada | Crítica (9.8) | 1.7% | — | Netgear D7000v2 FirmwareNetgear D8500 FirmwareNetgear R7000 FirmwareNetgear R7100lg Firmware+7 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, R7000 before 1.0.11.110, R7100LG before 1.0.0.72, R7900 before 1.0.4.30, R8000 before 1.0.4.62, XR300 before 1.0.3.56, R7000P before 1.3.2.132, R8500 before 1.0.2.144,… | |
| Modificada | Crítica (9.8) | 2.0% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Eax20 FirmwareNetgear Eax80 Firmware+44 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 3.2.18.2, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, EX3700 before 1.0.0.94, EX3800 before 1.0.0.94, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7000 before 1.0.1.104,… | |
| Modificada | Crítica (9.8) | 1.4% | — | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear D7000v2 FirmwareNetgear D8500 Firmware+24 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.66, D6400 before 1.0.0.100, D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, DC112A before 1.0.0.52, DGN2200v4 before 1.0.0.118, EAX80 before 1.0.1.64, R6250 before 1.0.4.48, R7000 before… | |
| Modificada | Crítica (9.8) | 1.2% | — | Netgear D8500 FirmwareNetgear R6250 FirmwareNetgear R7000 FirmwareNetgear R7000p Firmware+6 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D8500 before 1.0.3.58, R6250 before 1.0.4.48, R7000 before 1.0.11.116, R7100LG before 1.0.0.64, R7900 before 1.0.4.38, R8300 before 1.0.2.144, R8500 before 1.0.2.144, XR300 before 1.0.3.68, R7000P before 1.3.2.132,… | |
| Modificada | Media (6.8) | 0.57% | — | Netgear D3600 FirmwareNetgear D6000 FirmwareNetgear D6100 FirmwareNetgear D6220 Firmware+24 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.78, D6100 before 1.0.0.63, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7800 before 1.0.1.56, D8500 before 1.0.3.44, DGN2200Bv4 before 1.0.0.109, DGN2200v4 before 1.0.0.110,… | |
| Modificada | Crítica (9.8) | 1.1% | — | Netgear Rbk752 FirmwareNetgear Rbr750 FirmwareNetgear Rbs750 FirmwareNetgear Rbk852 Firmware+32 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.102, D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, DC112A before 1.0.0.54, EX7000 before 1.0.1.94, EX7500 before 1.0.0.72, R6250 before 1.0.4.48, R6300v2 before 1.0.4.52, R6400… | |
| Modificada | Crítica (9.8) | 0.54% | — | Netgear D7000 FirmwareNetgear D8500 FirmwareNetgear Ex3700 FirmwareNetgear Ex3800 Firmware+17 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, EX3700 before 1.0.0.84, EX3800 before 1.0.0.84, EX6120 before 1.0.0.54, EX6130 before 1.0.0.36, EX7000 before 1.0.1.90, R6250 before 1.0.4.42, R6400v2 before 1.0.4.98, R6700v3 before 1.0.4.98, R6900P… | |
| Modificada | Alta (8.8) | 5.7% | — | Netgear Ex3700 FirmwareNetgear Ex3800 FirmwareNetgear Ex6120 FirmwareNetgear Ex6130 Firmware+40 | 15/11/2021 | 17/6/2026 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPnP service, which listens on TCP port 5000 by default. When parsing… | |
| Modificada | Alta (8.8) | 0.82% | — | Netgear D8500 FirmwareNetgear R6400 FirmwareNetgear R6700 FirmwareNetgear R6900 Firmware+8 | 11/8/2021 | 17/6/2026 | Certain NETGEAR devices are affected by privilege escalation. This affects D8500 before 1.0.3.44, R6400v2 before 1.0.2.66, R6700 before 1.0.2.6, R6700v3 before 1.0.2.66, R6900 before 1.0.2.4, R6900P before 1.3.2.126, R7000 before 1.0.9.42, R7000P before 1.3.2.126, R7100LG before 1.0.0.50, R7300DST before 1.0.0.70,… | |
| Modificada | Media (4.8) | 0.51% | — | Netgear D3600 FirmwareNetgear D6000 FirmwareNetgear D6100 FirmwareNetgear D6200 Firmware+39 | 11/8/2021 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6100 before 1.0.0.60, D6200 before 1.1.00.36, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000 before 1.0.1.70, D7000v2 before 1.0.0.53, D8500 before 1.0.3.44, DC112A before 1.0.0.42, DGN2200v4 before… | |
| Modificada | Crítica (9.8) | 2.0% | — | Netgear D8500 FirmwareNetgear R6900p FirmwareNetgear R7000p FirmwareNetgear R7100lg Firmware+2 | 11/8/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D8500 before 1.0.3.58, R6900P before 1.3.2.132, R7000P before 1.3.2.132, R7100LG before 1.0.0.64, WNDR3400v3 before 1.0.1.38, and XR300 before 1.0.3.56. | |
| Modificada | Alta (7.2) | 1.4% | — | Netgear R6250 FirmwareNetgear R6300 FirmwareNetgear R6400 FirmwareNetgear R6400v2 Firmware+10 | 11/8/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6250 before 1.0.4.36, R6300v2 before 1.0.4.36, R6400 before 1.0.1.50, R6400v2 before 1.0.2.66, R6700v3 before 1.0.2.66, R6700 before 1.0.2.8, R6900 before 1.0.2.8, R7000 before 1.0.9.88, R6900P before 1.3.2.132, R7100LG… | |
| Modificada | Crítica (9.8) | 1.3% | — | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear D7000 FirmwareNetgear D7800 Firmware+55 | 11/8/2021 | 17/6/2026 | Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D7000v2 before 1.0.0.52, D7800 before 1.0.1.44, D8500 before 1.0.3.43, DC112A before 1.0.0.40, DGN2200v4 before 1.0.0.108, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50… | |
| Modificada | Baja (2.7) | 0.77% | — | Netgear D3600 FirmwareNetgear D6000 FirmwareNetgear D6100 FirmwareNetgear D6200 Firmware+70 | 11/8/2021 | 17/6/2026 | Certain NETGEAR devices are affected by authentication bypass. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6100 before 1.0.0.63, D6200 before 1.1.00.34, D6220 before 1.0.0.48, D6400 before 1.0.0.86, D7000 before 1.0.1.70, D7000v2 before 1.0.0.52, D7800 before 1.0.1.56, D8500 before 1.0.3.44, DC112A… | |
| Modificada | Alta (8.8) | 0.74% | — | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear D7000 FirmwareNetgear D8500 Firmware+31 | 29/3/2021 | 17/6/2026 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the upnpd service, which listens on UDP port 1900 by… | |
| Modificada | Crítica (9.4) | 1.6% | — | Netgear Ac2100 FirmwareNetgear Ac2400 FirmwareNetgear Ac2600 FirmwareNetgear Cbk40 Firmware+123 | 30/12/2020 | 17/6/2026 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D6000 before 1.0.0.80, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D7800… |