Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3020▼ 63 respecto a la semana anterior
Críticas / altas1413▲ 57 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 1.8% | — | Netgear R6200 FirmwareNetgear R6300 Firmware | 7/9/2022 | 9/7/2026 | NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, or ipv6_lan_length… | |
| Modificada | Alta (7.5) | 1.1% | — | Netgear Ac1450 FirmwareNetgear C6300 FirmwareNetgear D1500 FirmwareNetgear D3600 Firmware+39 | 28/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 before 2017-01-06, D1500 before 2017-01-06, D3600 before 2017-01-06, D6000 before 2017-01-06, D6100 before 2017-01-06, D6200 before 2017-01-06, D6200B before 2017-01-06, D6300B before… | |
| Modificada | Alta (7.5) | 0.98% | — | Netgear R6200 FirmwareNetgear R6250 FirmwareNetgear R6300 FirmwareNetgear R6700 Firmware+8 | 21/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6200v2 before 1.0.3.14, R6250 before 1.0.4.8, R6300v2 before 1.0.4.8, R6700 before 1.1.1.20, R7000 before 1.0.7.10, R7000P/R6900P before 1.0.0.56, R7100LG before 1.0.0.30, R7900 before 1.0.1.14, R8000 before 1.0.3.22,… | |
| Modificada | Alta (8.1) | 1.7% | — | Netgear Ac1450 FirmwareNetgear D8500 FirmwareNetgear Dc112a FirmwareNetgear Jndr3000 Firmware+29 | 9/10/2019 | 17/6/2026 | Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNU_accessPassword_recovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D, R4500, R6200,… | |
| Analizada | Alta (8.1) | 89% | ⚠ Explotación activa | Netgear R6200 FirmwareNetgear R6300 FirmwareNetgear Vegn2610 FirmwareNetgear Ac1450 Firmware+9 | 17/1/2017 | 17/6/2026 | An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. They are prone to password disclosure via simple crafted requests to the web management server. The bug is exploitable remotely if the remote management option is set,… |