Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior
Críticas / altas1458▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 1.1% | — | Netgear Ac1450 FirmwareNetgear C6300 FirmwareNetgear D1500 FirmwareNetgear D3600 Firmware+39 | 28/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 before 2017-01-06, D1500 before 2017-01-06, D3600 before 2017-01-06, D6000 before 2017-01-06, D6100 before 2017-01-06, D6200 before 2017-01-06, D6200B before 2017-01-06, D6300B before… | |
| Modificada | Alta (8.8) | 0.46% | — | Netgear R6300 FirmwareNetgear Ac1450 FirmwareNetgear R7300 FirmwareNetgear R8500 Firmware | 20/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.0.36, AC1450 before 1.0.0.36, R7300 before 1.0.0.54, and R8500 before 1.0.2.94. | |
| Modificada | Alta (8.1) | 1.7% | — | Netgear Ac1450 FirmwareNetgear D8500 FirmwareNetgear Dc112a FirmwareNetgear Jndr3000 Firmware+29 | 9/10/2019 | 17/6/2026 | Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNU_accessPassword_recovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D, R4500, R6200,… | |
| Analizada | Alta (8.1) | 89% | ⚠ Explotación activa💥 Exploit | Netgear R6200 FirmwareNetgear R6300 FirmwareNetgear Vegn2610 FirmwareNetgear Ac1450 Firmware+9 | 17/1/2017 | 17/6/2026 | An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. They are prone to password disclosure via simple crafted requests to the web management server. The bug is exploitable remotely if the remote management option is set,… |