Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2817▼ 183 respecto a la semana anterior
Críticas / altas1372▲ 48 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior
48 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (7.5) | 0.64% | — | Netgear Cbk40 FirmwareNetgear Cbk43 FirmwareNetgear Cbr40 Firmware | 12/3/2024 | 17/6/2026 | An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required. | |
| Analizada | Media (5.4) | 0.43% | — | Netgear Cbk40 FirmwareNetgear Cbr40 FirmwareNetgear Cbk43 Firmware | 12/3/2024 | 17/6/2026 | An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required. | |
| Modificada | Crítica (9.8) | 1.1% | — | Netgear Cbr40 FirmwareNetgear Lax20 FirmwareNetgear Mk62 FirmwareNetgear Mr60 Firmware+11 | 1/9/2023 | 17/6/2026 | Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd. | |
| Modificada | Alta (8.8) | 1.4% | — | Netgear R6400 FirmwareNetgear R6700 FirmwareNetgear R6900p FirmwareNetgear R7000 Firmware+20 | 29/3/2023 | 17/6/2026 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the circled… | |
| Modificada | Alta (8.8) | 0.34% | — | Netgear R6400 FirmwareNetgear R6700 FirmwareNetgear R6900p FirmwareNetgear R7000 Firmware+20 | 29/3/2023 | 17/6/2026 | This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files via HTTPS. The issue… | |
| Modificada | Media (4.8) | 0.42% | — | Netgear Rax200 FirmwareNetgear Mr60 FirmwareNetgear Rax20 FirmwareNetgear Rax45 Firmware+18 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX80 before 1.0.1.62, EX7500 before 1.0.0.72, R7900 before 1.0.4.38, R8000 before 1.0.4.68, RAX200 before 1.0.4.120, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, MR60 before 1.0.6.110, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72,… | |
| Modificada | Media (4.8) | 0.42% | — | Netgear Rax200 FirmwareNetgear Mr60 FirmwareNetgear Rax20 FirmwareNetgear Rax45 Firmware+26 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7000 before 1.0.11.116, R7900 before 1.0.4.38, R8000 before 1.0.4.68, RAX200 before 1.0.3.106, RBS40V before… | |
| Modificada | Media (4.8) | 0.42% | — | Netgear Cbr40 FirmwareNetgear Eax20 FirmwareNetgear Eax80 FirmwareNetgear Ex6120 Firmware+24 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7960P before 1.4.1.66, RAX200 before 1.0.3.106, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, EX3700 before… | |
| Modificada | Media (4.8) | 0.42% | — | Netgear Eax80 FirmwareNetgear Ex3700 FirmwareNetgear Ex3800 FirmwareNetgear Ex6120 Firmware+11 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX80 before 1.0.1.64, EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, RBW30 before 2.6.1.4, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before… | |
| Modificada | Media (6.1) | 0.60% | — | Netgear Cbr40 FirmwareNetgear Eax20 FirmwareNetgear Eax80 FirmwareNetgear Ex6120 Firmware+29 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by reflected XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.32, EAX80 before 1.0.1.62, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7000 before 1.0.1.104, EX7500 before 1.0.0.72, R7000 before 1.0.11.110, R7900 before 1.0.4.30, R7960P before 1.4.1.66, R8000 before… | |
| Modificada | Alta (8.8) | 0.98% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Rbk752 FirmwareNetgear Rbr750 Firmware+4 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. | |
| Modificada | Crítica (9.8) | 1.7% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Rbk752 FirmwareNetgear Rbr750 Firmware+4 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. | |
| Modificada | Alta (8.8) | 0.82% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Rbk752 FirmwareNetgear Rbr750 Firmware+6 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 3.2.18.2, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBS40V before… | |
| Modificada | Crítica (9.8) | 2.4% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Eax20 FirmwareNetgear Eax80 Firmware+36 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, EX7500 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, R6400… | |
| Modificada | Crítica (9.8) | 2.0% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Eax20 FirmwareNetgear Eax80 Firmware+44 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 3.2.18.2, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, EX3700 before 1.0.0.94, EX3800 before 1.0.0.94, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7000 before 1.0.1.104,… | |
| Modificada | Crítica (9.8) | 2.0% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Eax20 FirmwareNetgear Eax80 Firmware+38 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, LAX20 before 1.1.6.28, MR60 before 1.0.6.116, MR80 before 1.1.2.20, MS60 before 1.0.6.116, MS80 before 1.1.2.20, MK62 before… | |
| Modificada | Crítica (9.8) | 2.1% | — | Netgear Cbr40 FirmwareNetgear Eax20 FirmwareNetgear Eax80 FirmwareNetgear Ex7500 Firmware+29 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX7500 before 1.0.0.72, R6400 before 1.0.1.68, R6900P before 1.3.2.132, R7000 before 1.0.11.116, R7000P before 1.3.2.132, R7900 before 1.0.4.38,… | |
| Modificada | Alta (8.8) | 1.00% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear R7900p FirmwareNetgear R7960p Firmware+9 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000P before 1.4.2.84, R8300 before 1.0.2.154, R8500 before 1.0.2.154, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12,… | |
| Modificada | Crítica (9.8) | 2.0% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear D7000v2 FirmwareNetgear Lax20 Firmware+22 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, D7000v2 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, MR80 before 1.1.2.20, MS80 before 1.1.2.20, RAX15… | |
| Modificada | Crítica (9.8) | 2.5% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Eax20 FirmwareNetgear Eax80 Firmware+35 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, EX7500 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, R6400v2… | |
| Modificada | Alta (8.8) | 1.5% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Rbk852 FirmwareNetgear Rbr850 Firmware+1 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. | |
| Modificada | Alta (8.8) | 1.5% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Rbr850 FirmwareNetgear Rbs850 Firmware+1 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. | |
| Modificada | Alta (8.8) | 1.5% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Rbr850 FirmwareNetgear Rbs850 Firmware+1 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. | |
| Modificada | Alta (8.8) | 1.5% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Rbr850 FirmwareNetgear Rbs850 Firmware+1 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, and RBS850 before 3.2.17.12. | |
| Modificada | Alta (7.2) | 0.46% | — | Netgear Cbr40 FirmwareNetgear D7000v2 FirmwareNetgear D8500 FirmwareNetgear R6400 Firmware+6 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects CBR40 before 2.3.5.12, D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, R6400 before 1.0.1.70, R7000 before 1.0.11.126, R6900P before 1.3.2.124, R7000P before 1.3.2.124, R7900 before 1.0.4.30, R8000 before 1.0.4.52, and… |