Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior
Críticas / altas1288▼ 199 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
142 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 14% | — | Netgear R7000 Firmware | 26/4/2021 | 17/6/2026 | NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without authentication. The vulnerability exists within the handling of an HTTP request. An attacker can leverage this to execute code as root. The problem is that a user-provided length value is trusted… | |
| Modificada | Alta (8.8) | 0.74% | — | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear D7000 FirmwareNetgear D8500 Firmware+31 | 29/3/2021 | 17/6/2026 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the upnpd service, which listens on UDP port 1900 by… | |
| Modificada | Alta (8.1) | 0.42% | — | Netgear Rbk852 FirmwareNetgear Rbk853 FirmwareNetgear Rbr854 FirmwareNetgear Rbr850 Firmware+12 | 23/3/2021 | 17/6/2026 | Certain NETGEAR devices are affected by password reset by an unauthenticated attacker. This affects RBK852 before 3.2.10.11, RBK853 before 3.2.10.11, RBR854 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11, CBR40 before 2.5.0.10, R7000 before 1.0.11.116, R6900P before 1.3.2.126, R7900 before… | |
| Modificada | Alta (8.8) | 1.1% | — | Netgear R6700 FirmwareNetgear R6400 FirmwareNetgear R7000 FirmwareNetgear R6900p Firmware+76 | 23/3/2021 | 17/6/2026 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6700v3 before 1.0.4.98, R6400v2 before 1.0.4.98, R7000 before 1.0.11.106, R6900P before 1.3.2.124, R7000P before 1.3.2.124, R7900 before 1.0.4.26, R7850 before 1.0.5.60, R8000 before 1.0.4.58, RS400 before 1.5.0.48, R6400… | |
| Modificada | Crítica (9.4) | 1.6% | — | Netgear Ac2100 FirmwareNetgear Ac2400 FirmwareNetgear Ac2600 FirmwareNetgear Cbk40 Firmware+123 | 30/12/2020 | 17/6/2026 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D6000 before 1.0.0.80, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D7800… | |
| Modificada | Alta (7.8) | 0.82% | — | Netgear R6400v2 FirmwareNetgear R6700v3 FirmwareNetgear R6900p FirmwareNetgear R7000 Firmware+26 | 30/12/2020 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700v3 before 1.0.4.84, R6900P before 1.3.2.124, R7000 before 1.0.11.100, R7000P before 1.3.2.124, R7800 before 1.0.2.74, R7850 before 1.0.5.60, R7900 before 1.0.4.26, R7960P before… | |
| Modificada | Crítica (9.8) | 1.3% | — | Netgear Cbr40 FirmwareNetgear D6220 FirmwareNetgear D6400 FirmwareNetgear D7000v2 Firmware+65 | 30/12/2020 | 17/6/2026 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, DC112A before 1.0.0.48, DGN2200v4 before 1.0.0.114, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62,… | |
| Modificada | Crítica (9.8) | 1.2% | — | Netgear Ac2100 FirmwareNetgear Ac2400 FirmwareNetgear Ac2600 FirmwareNetgear Cbk40 Firmware+73 | 30/12/2020 | 17/6/2026 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D7800 before 1.0.1.58, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX7500 before 1.0.0.68, MK62… | |
| Modificada | Alta (8) | 0.49% | — | Netgear D3600 FirmwareNetgear D6000 FirmwareNetgear D6200 FirmwareNetgear D7000 Firmware+22 | 30/12/2020 | 17/6/2026 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.36, D7000 before 1.0.1.70, EX6200v2 before 1.0.1.78, EX7000 before 1.0.1.78, EX8000 before 1.0.1.186, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020… | |
| Modificada | Media (6.5) | 2.0% | — | Netgear Nighthawk R7000 Firmware | 2/11/2020 | 17/6/2026 | The SIP ALG implementation on NETGEAR Nighthawk R7000 1.0.9.64_10.2.64 devices allows remote attackers to communicate with arbitrary TCP and UDP services on a victim's intranet machine, if the victim visits an attacker-controlled web site with a modern browser, aka NAT Slipstreaming. This occurs because the ALG takes… | |
| Modificada | Alta (8.8) | 0.57% | — | Netgear R6400 FirmwareNetgear R6700 FirmwareNetgear R6900 FirmwareNetgear R6900p Firmware+7 | 5/5/2020 | 17/6/2026 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R6900P before 1.0.0.56, R7100LG before 1.0.0.32, R7300 before 1.0.0.54,… | |
| Modificada | Media (6.5) | 1.1% | — | Netgear D8500 FirmwareNetgear Dgn2200 FirmwareNetgear R6300 FirmwareNetgear R6400 Firmware+12 | 29/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by password recovery and file access. This affects D8500 1.0.3.27 and earlier, DGN2200v4 1.0.0.82 and earlier, R6300v2 1.0.4.06 and earlier, R6400 1.0.1.20 and earlier, R6400v2 1.0.2.18 and earlier, R6700 1.0.1.22 and earlier, R6900 1.0.1.20 and earlier, R7000 1.0.7.10 and earlier,… | |
| Modificada | Media (6.8) | 0.85% | — | Netgear D7800 FirmwareNetgear D7000 FirmwareNetgear D8500 FirmwareNetgear R6700 Firmware+10 | 28/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, R6700 before 1.0.1.30, R6700v2 before 1.2.0.16, R6800 before 1.2.0.16, R6900 before 1.0.1.30, R6900P before 1.2.0.22, R6900v2 before 1.2.0.16, R7000… | |
| Modificada | Alta (7.5) | 1.1% | — | Netgear Ac1450 FirmwareNetgear C6300 FirmwareNetgear D1500 FirmwareNetgear D3600 Firmware+39 | 28/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 before 2017-01-06, D1500 before 2017-01-06, D3600 before 2017-01-06, D6000 before 2017-01-06, D6100 before 2017-01-06, D6200 before 2017-01-06, D6200B before 2017-01-06, D6300B before… | |
| Modificada | Media (6.8) | 0.85% | — | Netgear D7800 FirmwareNetgear R6700 FirmwareNetgear R6900 FirmwareNetgear R7000 Firmware+5 | 27/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.28, R6700 before 1.0.1.44, R6900 before 1.0.1.44, R7000 before 1.0.9.28, R7500v2 before 1.0.3.24, R7800 before 1.0.2.38, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50. | |
| Modificada | Alta (7.2) | 1.4% | — | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear D7000 FirmwareNetgear D8500 Firmware+29 | 27/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.38, D6400 before 1.0.0.74, D7000v2 before 1.0.0.74, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.102, DGN2200Bv4 before 1.0.0.102, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, EX6000 before 1.0.0.30,… | |
| Modificada | Alta (8.8) | 0.63% | — | Netgear D8500 FirmwareNetgear Ex3700 FirmwareNetgear Ex3800 FirmwareNetgear Ex6000 Firmware+26 | 27/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D8500 before 1.0.3.42, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, EX6000 before 1.0.0.30, EX6100 before 1.0.2.24, EX6120 before 1.0.0.40, EX6130 before 1.0.0.22, EX6150 before 1.0.0.42, EX6200 before… | |
| Modificada | Media (5.4) | 0.47% | — | Netgear D1500 FirmwareNetgear D500 FirmwareNetgear D6100 FirmwareNetgear D6220 Firmware+54 | 24/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.57, D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.94, DGN2200Bv4… | |
| Modificada | Media (5.4) | 0.47% | — | Netgear D1500 FirmwareNetgear D500 FirmwareNetgear D6100 FirmwareNetgear D6220 Firmware+54 | 24/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.57, D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.94, DGN2200Bv4… | |
| Modificada | Media (6.8) | 0.85% | — | Netgear D7800 FirmwareNetgear R6400 FirmwareNetgear R6700 FirmwareNetgear R6900 Firmware+8 | 24/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, R6400v2 before 1.0.2.34, R6700 before 1.0.1.30, R6900 before 1.0.1.30, R6900P before 1.0.0.62, R7000 before 1.0.9.12, R7000P before 1.0.0.62, R7500v2 before 1.0.3.26, R7800 before 1.0.2.42, R9000… | |
| Modificada | Media (6.5) | 0.49% | — | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear D8500 FirmwareNetgear R6250 Firmware+14 | 24/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.32, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.16, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R7000… | |
| Modificada | Media (6.1) | 0.65% | — | Netgear D6400 FirmwareNetgear D7000 FirmwareNetgear D8500 FirmwareNetgear Ex6200 Firmware+19 | 24/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects D6400 before 1.0.0.60, D7000 before 1.0.1.50, D8500 before 1.0.3.29, EX6200 before 1.0.3.84, EX7000 before 1.0.0.60, R6250 before 1.0.4.16, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before… | |
| Modificada | Alta (8.8) | 0.52% | — | Netgear D7800 FirmwareNetgear R6400 FirmwareNetgear R7500 FirmwareNetgear R7800 Firmware+8 | 24/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.28, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R6900P before 1.3.0.8, R7000 before 1.0.9.14, R7000P before 1.3.0.8, R7500v2 before 1.0.3.20, R7800… | |
| Modificada | Crítica (9.8) | 3.4% | — | Netgear D6400 FirmwareNetgear Ex6200 FirmwareNetgear Ex7000 FirmwareNetgear R6250 Firmware+12 | 23/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6400 before 1.0.0.78, EX6200 before 1.0.3.86, EX7000 before 1.0.0.64, R6250 before 1.0.4.8, R6300v2 before 1.0.4.6, R6400 before 1.0.1.12, R6700 before 1.0.1.16, R7000 before 1.0.7.10, R7100LG before 1.0.0.42,… | |
| Modificada | Alta (7.5) | 1.2% | — | Netgear D1500 FirmwareNetgear D500 FirmwareNetgear D6100 FirmwareNetgear D6200 Firmware+45 | 23/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.58, D6200 before 1.1.00.30, D6220 before 1.0.0.46, D6400 before 1.0.0.82, D7000 before 1.0.1.68, D7000v2 before 1.0.0.51, D7800 before 1.0.1.42, D8500 before… |