Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3001▼ 62 respecto a la semana anterior
Críticas / altas1373▲ 34 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)459▼ 50 respecto a la semana anterior
59 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (6.5) | 0.33% | — | Netgear Xr1000 FirmwareNetgear Xr300 FirmwareNetgear D6220 FirmwareNetgear D6400 Firmware+48 | 7/5/2024 | 17/6/2026 | NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability.… | |
| Analizada | Alta (8.8) | 0.58% | — | Netgear Dc112a FirmwareNetgear Ex3700 FirmwareNetgear Ex3800 FirmwareNetgear Ex6120 Firmware+48 | 7/5/2024 | 17/6/2026 | NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability. The specific flaw exists… | |
| Modificada | Alta (8.8) | 3.1% | — | Netgear D6220 FirmwareNetgear D8500 FirmwareNetgear R6700 FirmwareNetgear R6900 Firmware | 6/6/2023 | 17/6/2026 | Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are vulnerable to Command Injection. If an attacker gains web management privileges, they can inject commands into the post request parameters, gaining… | |
| Modificada | Alta (8.8) | 25% | — | Netgear R6400 FirmwareNetgear R6700 FirmwareNetgear R6900p FirmwareNetgear R7000 Firmware+23 | 29/3/2023 | 17/6/2026 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SOAP requests. When parsing the SOAPAction header, the… | |
| Modificada | Alta (8.8) | 0.69% | — | Netgear D3600 FirmwareNetgear D6000 FirmwareNetgear D6200 FirmwareNetgear D6220 Firmware+45 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before 1.1.00.34, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000 before 1.0.1.74, D7000v2 before 1.0.0.53, D7800 before 1.0.1.56, D8500 before 1.0.3.44, DC112A… | |
| Modificada | Alta (7.2) | 0.62% | — | Netgear D3600 FirmwareNetgear D6000 FirmwareNetgear D6200 FirmwareNetgear D6220 Firmware+47 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before 1.1.00.34, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000 before 1.0.1.74, D7000v2 before 1.0.0.53, D7800 before 1.0.1.56, D8500 before 1.0.3.44, DC112A… | |
| Modificada | Crítica (9.8) | 1.5% | — | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear D7000v2 FirmwareNetgear D8500 Firmware+10 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.102, D7000v2 before 1.0.0.74, D8500 before 1.0.3.60, DC112A before 1.0.0.56, R6300v2 before 1.0.4.50, R6400 before 1.0.1.68, R7000 before 1.0.11.116, R7100LG… | |
| Modificada | Crítica (9.8) | 1.4% | — | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear D7000v2 FirmwareNetgear D8500 Firmware+24 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.66, D6400 before 1.0.0.100, D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, DC112A before 1.0.0.52, DGN2200v4 before 1.0.0.118, EAX80 before 1.0.1.64, R6250 before 1.0.4.48, R7000 before… | |
| Modificada | Media (4.5) | 0.37% | — | Netgear Cbr750 FirmwareNetgear D6220 FirmwareNetgear D6400 FirmwareNetgear D8500 Firmware+34 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects CBR750 before 3.2.18.2, D6220 before 1.0.0.68, D6400 before 1.0.0.102, D8500 before 1.0.3.60, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, R6300v2 before 1.0.4.50,… | |
| Modificada | Media (6.8) | 0.57% | — | Netgear D3600 FirmwareNetgear D6000 FirmwareNetgear D6100 FirmwareNetgear D6220 Firmware+24 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.78, D6100 before 1.0.0.63, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7800 before 1.0.1.56, D8500 before 1.0.3.44, DGN2200Bv4 before 1.0.0.109, DGN2200v4 before 1.0.0.110,… | |
| Modificada | Alta (8.8) | 1.3% | — | Netgear D6220 Firmware | 26/12/2021 | 17/6/2026 | NETGEAR D6220 devices before 1.0.0.76 are affected by command injection by an authenticated user. | |
| Modificada | Crítica (9.8) | 1.1% | — | Netgear Rbk752 FirmwareNetgear Rbr750 FirmwareNetgear Rbs750 FirmwareNetgear Rbk852 Firmware+32 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.102, D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, DC112A before 1.0.0.54, EX7000 before 1.0.1.94, EX7500 before 1.0.0.72, R6250 before 1.0.4.48, R6300v2 before 1.0.4.52, R6400… | |
| Modificada | Alta (8.8) | 5.7% | — | Netgear Ex3700 FirmwareNetgear Ex3800 FirmwareNetgear Ex6120 FirmwareNetgear Ex6130 Firmware+40 | 15/11/2021 | 17/6/2026 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPnP service, which listens on TCP port 5000 by default. When parsing… | |
| Modificada | Media (4.8) | 0.51% | — | Netgear D3600 FirmwareNetgear D6000 FirmwareNetgear D6100 FirmwareNetgear D6200 Firmware+39 | 11/8/2021 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6100 before 1.0.0.60, D6200 before 1.1.00.36, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000 before 1.0.1.70, D7000v2 before 1.0.0.53, D8500 before 1.0.3.44, DC112A before 1.0.0.42, DGN2200v4 before… | |
| Modificada | Crítica (9.8) | 1.3% | — | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear D7000 FirmwareNetgear D7800 Firmware+55 | 11/8/2021 | 17/6/2026 | Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D7000v2 before 1.0.0.52, D7800 before 1.0.1.44, D8500 before 1.0.3.43, DC112A before 1.0.0.40, DGN2200v4 before 1.0.0.108, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50… | |
| Modificada | Baja (2.7) | 0.77% | — | Netgear D3600 FirmwareNetgear D6000 FirmwareNetgear D6100 FirmwareNetgear D6200 Firmware+70 | 11/8/2021 | 17/6/2026 | Certain NETGEAR devices are affected by authentication bypass. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6100 before 1.0.0.63, D6200 before 1.1.00.34, D6220 before 1.0.0.48, D6400 before 1.0.0.86, D7000 before 1.0.1.70, D7000v2 before 1.0.0.52, D7800 before 1.0.1.56, D8500 before 1.0.3.44, DC112A… | |
| Modificada | Alta (8.8) | 0.74% | — | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear D7000 FirmwareNetgear D8500 Firmware+31 | 29/3/2021 | 17/6/2026 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the upnpd service, which listens on UDP port 1900 by… | |
| Modificada | Crítica (9.4) | 1.6% | — | Netgear Ac2100 FirmwareNetgear Ac2400 FirmwareNetgear Ac2600 FirmwareNetgear Cbk40 Firmware+123 | 30/12/2020 | 17/6/2026 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D6000 before 1.0.0.80, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D7800… | |
| Modificada | Crítica (9.8) | 1.3% | — | Netgear Cbr40 FirmwareNetgear D6220 FirmwareNetgear D6400 FirmwareNetgear D7000v2 Firmware+65 | 30/12/2020 | 17/6/2026 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, DC112A before 1.0.0.48, DGN2200v4 before 1.0.0.114, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62,… | |
| Modificada | Alta (7.2) | 1.4% | — | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear D7000 FirmwareNetgear D8500 Firmware+29 | 27/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.38, D6400 before 1.0.0.74, D7000v2 before 1.0.0.74, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.102, DGN2200Bv4 before 1.0.0.102, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, EX6000 before 1.0.0.30,… | |
| Modificada | Media (5.4) | 0.47% | — | Netgear D1500 FirmwareNetgear D500 FirmwareNetgear D6100 FirmwareNetgear D6220 Firmware+54 | 24/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.57, D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.94, DGN2200Bv4… | |
| Modificada | Media (5.4) | 0.47% | — | Netgear D1500 FirmwareNetgear D500 FirmwareNetgear D6100 FirmwareNetgear D6220 Firmware+54 | 24/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.57, D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.94, DGN2200Bv4… | |
| Modificada | Media (6.5) | 0.49% | — | Netgear D6220 FirmwareNetgear D6400 FirmwareNetgear D8500 FirmwareNetgear R6250 Firmware+14 | 24/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.32, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.16, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R7000… | |
| Modificada | Alta (7.5) | 1.2% | — | Netgear D1500 FirmwareNetgear D500 FirmwareNetgear D6100 FirmwareNetgear D6200 Firmware+45 | 23/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.58, D6200 before 1.1.00.30, D6220 before 1.0.0.46, D6400 before 1.0.0.82, D7000 before 1.0.1.68, D7000v2 before 1.0.0.51, D7800 before 1.0.1.42, D8500 before… | |
| Modificada | Crítica (9.8) | 1.3% | — | Netgear R6700 FirmwareNetgear R7900 FirmwareNetgear R6900 FirmwareNetgear R7000p Firmware+26 | 23/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6700 before 1.0.1.48, R7900 before 1.0.2.16, R6900 before 1.0.1.48, R7000P before 1.3.1.44, R6900P before 1.3.1.44, R6250 before 1.0.4.30, R6300v2 before 1.0.4.32, R6400 before 1.0.1.44, R6400v2 before… |