Patchfirst
Patchfirst

Vendor

NETGEAR

8 of 22 NETGEAR CVEs in Patchfirst (36%) are in of vulnerabilities exploited in the wild.

CVEs
22
In CISA KEV
836%
Known ransomware use
0
Median days to KEV
1,842
from publication
Latest KEV listing
8 Sep 2022
Watch NETGEAR Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • Multiple Devices In KEV: 2 CVEs: 2
  • Multiple Routers In KEV: 1 CVEs: 3
  • DGN2200 Devices In KEV: 1 CVEs: 1
  • JGS516PE Devices In KEV: 1 CVEs: 1
  • Wireless Access Point (WAP) Devices In KEV: 1 CVEs: 1
  • Wireless Router DGN2200 In KEV: 1 CVEs: 1
  • WNR2000v5 Router In KEV: 1 CVEs: 1
  • ProSAFE Network Management System In KEV: 0 CVEs: 8
  • R6700 In KEV: 0 CVEs: 2
  • D6400 In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with NETGEAR CVEs
Open in ATT&CK Navigator

Counts are NETGEAR CVEs linked to the technique. Each link’s provenance is on the CVE page.

NETGEAR CVEs

22 CVEs, by priority
  1. CVE-2020-27866This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR…
    NETGEAR · Multiple RoutersPublic exploitHigh · 8.8
    8.7%Top 4.9%
    70.2priority
  2. CVE-2016-1555NETGEAR Multiple WAP Devices Command Injection Vulnerability
    NETGEAR · Wireless Access Point (WAP) DevicesKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    98.3%Top 0.08%
    69.8priority
  3. CVE-2016-10174NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
    NETGEAR · WNR2000v5 RouterKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    83.3%Top 0.32%
    69.8priority
  4. CVE-2020-26919Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability
    NETGEAR · JGS516PE DevicesKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1098Account Manipulation
    57.5%Top 0.92%
    69.7priority
  5. CVE-2017-6077NETGEAR DGN2200 Remote Code Execution Vulnerability
    NETGEAR · Wireless Router DGN2200KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    68.7%Top 0.66%
    69.7priority
  6. CVE-2024-12847NETGEAR DGN setup.cgi OS Command Injection
    NETGEAR · DGN1000Public exploitCritical · 9.8
    30.4%Top 1.8%
    69.2priority
  7. CVE-2016-6277NETGEAR Multiple Routers Remote Code Execution Vulnerability
    NETGEAR · Multiple RoutersKEVPublic exploitHigh · 8.8T1059Command and Scripting Interpreter
    99.8%Top 0.04%
    69.2priority
  8. CVE-2017-6334NETGEAR DGN2200 Devices OS Command Injection Vulnerability
    NETGEAR · DGN2200 DevicesKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    72.6%Top 0.56%
    69.0priority
  9. CVE-2025-7407Netgear D6400 diag.cgi os command injection
    Netgear · D6400Public exploitMedium · 6.3
    12.1%Top 3.9%
    68.6priority
  10. CVE-2017-5521NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
    NETGEAR · Multiple DevicesKEVPublic exploitHigh · 8.1T1190Exploit Public-Facing ApplicationT1552Unsecured Credentials
    89.4%Top 0.22%
    68.6priority
  11. CVE-2017-6862NETGEAR Multiple Devices Buffer Overflow Vulnerability
    NETGEAR · Multiple DevicesKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    45.7%Top 1.2%
    64.6priority
  12. CVE-2020-27867This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR…
    NETGEAR · Multiple RoutersMedium · 6.8
    2.2%Top 17%
    58.2priority
  13. CVE-2023-38096NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability
    NETGEAR · ProSAFE Network Management SystemPublic exploitCritical · 9.8
    82.0%Top 0.35%
    31.8priority
  14. CVE-2020-10924This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR…
    NETGEAR · R6700Public exploitHigh · 8.8
    87.3%Top 0.25%
    31.1priority
  15. CVE-2020-10923This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR…
    NETGEAR · R6700Public exploitMedium · 6.5
    84.7%Top 0.3%
    29.5priority
  16. CVE-2023-38099NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability
    NETGEAR · ProSAFE Network Management SystemHigh · 8.8
    56.8%Top 0.94%
    26.0priority
  17. CVE-2023-38095NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution…
    NETGEAR · ProSAFE Network Management SystemHigh · 8.8
    65.5%Top 0.74%
    26.0priority
  18. CVE-2021-27273This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE…
    NETGEAR · ProSAFE Network Management SystemHigh · 8.8
    66.0%Top 0.73%
    26.0priority
  19. CVE-2021-27275This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected…
    NETGEAR · ProSAFE Network Management SystemHigh · 8.3
    74.1%Top 0.52%
    25.7priority
  20. CVE-2023-41182NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability
    NETGEAR · ProSAFE Network Management SystemHigh · 7.2
    62.3%Top 0.82%
    24.9priority
  21. CVE-2021-27276This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE…
    NETGEAR · ProSAFE Network Management SystemHigh · 7.1
    73.2%Top 0.54%
    24.9priority
  22. CVE-2021-27272This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE…
    NETGEAR · ProSAFE Network Management SystemHigh · 7.1
    74.5%Top 0.5%
    24.9priority
↑ ↓ chooseEnter openEsc close