Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2989▼ 87 respecto a la semana anterior
Críticas / altas1458▲ 97 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
55 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.8) | 0.51% | — | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear D7000 FirmwareNetgear D8500 Firmware+20 | 16/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000v2 before 1.0.0.53, D8500 before 1.0.3.44, DGN2200v4 before 1.0.0.110, DGND2200Bv4 before 1.0.0.109, R6250 before 1.0.4.34, R6300v2 before 1.0.4.32, R6400 before 1.0.1.46,… | |
| Modificada | Media (6.7) | 0.38% | — | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear D7000 FirmwareNetgear D8500 Firmware+30 | 16/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.44, D6400 before 1.0.0.78, D7000v2 before 1.0.0.51, D8500 before 1.0.3.42, DGN2200v4 before 1.0.0.110, DGND2200Bv4 before 1.0.0.110, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70,… | |
| Modificada | Media (6.7) | 0.32% | — | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear D7000 FirmwareNetgear D8500 Firmware+30 | 16/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.44, D6400 before 1.0.0.78, D7000v2 before 1.0.0.51, D8500 before 1.0.3.42, DGN2200v4 before 1.0.0.110, DGND2200Bv4 before 1.0.0.109, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70,… | |
| Modificada | Alta (8.1) | 1.7% | — | Netgear Ac1450 FirmwareNetgear D8500 FirmwareNetgear Dc112a FirmwareNetgear Jndr3000 Firmware+29 | 9/10/2019 | 17/6/2026 | Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNU_accessPassword_recovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D, R4500, R6200,… | |
| Analizada | Alta (8.1) | 89% | ⚠ Explotación activa💥 Exploit | Netgear R6200 FirmwareNetgear R6300 FirmwareNetgear Vegn2610 FirmwareNetgear Ac1450 Firmware+9 | 17/1/2017 | 17/6/2026 | An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. They are prone to password disclosure via simple crafted requests to the web management server. The bug is exploitable remotely if the remote management option is set,… |