📦 Ex6120 Firmware

by Netgear

🔍 What is Ex6120 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2021-45621

CRITICAL CVSS 9.6 Dec 26, 2021

CVE-2021-45621 is a critical command injection vulnerability affecting multiple NETGEAR routers, extenders, and WiFi systems. Unauthenticated attackers can execute arbitrary commands on affected devic...

CVE-2021-32122

CRITICAL CVSS 9.8 Aug 11, 2021

This CVE describes a Cross-Site Request Forgery (CSRF) vulnerability in certain NETGEAR WiFi extenders. Attackers can trick authenticated users into performing unauthorized actions on their devices. A...

CVE-2020-35800

CRITICAL CVSS 9.4 Dec 30, 2020

CVE-2020-35800 is a security misconfiguration vulnerability affecting numerous NETGEAR routers, range extenders, and Orbi WiFi systems. It allows attackers to bypass authentication and access administ...

CVE-2025-4140

HIGH CVSS 8.8 Apr 30, 2025

A critical buffer overflow vulnerability in Netgear EX6120 WiFi extender firmware allows remote attackers to execute arbitrary code or crash the device by manipulating the 'host' argument in the sub_3...

CVE-2025-4139

HIGH CVSS 8.8 Apr 30, 2025

A critical buffer overflow vulnerability in Netgear EX6120's fwAcosCgiInbound function allows remote attackers to execute arbitrary code by manipulating the 'host' argument. This affects Netgear EX612...

CVE-2024-35518

HIGH CVSS 8.4 Oct 14, 2024

This vulnerability allows remote attackers to execute arbitrary commands on Netgear EX6120 WiFi extenders by injecting malicious commands into the wan_dns1_pri parameter of the genie_fix2.cgi script. ...

CVE-2021-34982

HIGH CVSS 8.8 May 7, 2024

This is a critical stack-based buffer overflow vulnerability in NETGEAR routers' httpd service that allows network-adjacent attackers to execute arbitrary code as root without authentication. It affec...

CVE-2021-45526

HIGH CVSS 7.3 Dec 26, 2021

This vulnerability allows an authenticated attacker to trigger a buffer overflow on affected NETGEAR routers and extenders. Successful exploitation could lead to arbitrary code execution or device com...

CVE-2021-45533

HIGH CVSS 8.4 Dec 26, 2021

This vulnerability allows authenticated users to execute arbitrary commands on affected NETGEAR devices through command injection. It affects multiple NETGEAR WiFi extenders and Orbi systems running v...

CVE-2021-45512

HIGH CVSS 8.6 Dec 26, 2021

This vulnerability affects multiple NETGEAR routers and extenders that use weak cryptography implementations, potentially allowing attackers to decrypt sensitive communications or bypass authenticatio...

CVE-2021-34991

HIGH CVSS 8.8 Nov 15, 2021

This is a critical buffer overflow vulnerability in NETGEAR R6400v2 routers that allows network-adjacent attackers to execute arbitrary code as root without authentication. The flaw exists in the UPnP...