📦 R6400v2 Firmware

by Netgear

🔍 What is R6400v2 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-36187

CRITICAL CVSS 9.8 Sep 1, 2023

A buffer overflow vulnerability in NETGEAR R6400v2 routers allows remote unauthenticated attackers to execute arbitrary code by sending a specially crafted URL to the httpd service. This affects all R...

CVE-2021-45650

CRITICAL CVSS 9.1 Dec 26, 2021

This vulnerability in certain NETGEAR routers allows unauthorized disclosure of sensitive information. Attackers can potentially access confidential data stored on affected devices. Users with specifi...

CVE-2021-45617

CRITICAL CVSS 9.8 Dec 26, 2021

This vulnerability allows unauthenticated attackers to execute arbitrary commands on affected NETGEAR devices via command injection. It affects multiple NETGEAR routers, extenders, and WiFi systems ru...

CVE-2021-45621

CRITICAL CVSS 9.6 Dec 26, 2021

CVE-2021-45621 is a critical command injection vulnerability affecting multiple NETGEAR routers, extenders, and WiFi systems. Unauthenticated attackers can execute arbitrary commands on affected devic...

CVE-2021-45527

CRITICAL CVSS 9.6 Dec 26, 2021

This CVE describes a post-authentication buffer overflow vulnerability in multiple NETGEAR routers, extenders, and WiFi systems. An authenticated attacker could exploit this to execute arbitrary code ...

CVE-2020-35795

CRITICAL CVSS 9.8 Dec 30, 2020

This CVE describes a critical buffer overflow vulnerability in multiple NETGEAR routers, range extenders, and Orbi WiFi systems. An unauthenticated attacker can exploit this remotely to execute arbitr...

CVE-2020-35800

CRITICAL CVSS 9.4 Dec 30, 2020

CVE-2020-35800 is a security misconfiguration vulnerability affecting numerous NETGEAR routers, range extenders, and Orbi WiFi systems. It allows attackers to bypass authentication and access administ...

CVE-2024-52022

HIGH CVSS 8.0 Nov 5, 2024

This CVE describes a command injection vulnerability in specific Netgear router models via the wlg_adv.cgi component's apmode_gateway parameter. Attackers can execute arbitrary operating system comman...

CVE-2024-51021

HIGH CVSS 8.0 Nov 5, 2024

This CVE describes a command injection vulnerability in specific Netgear router models that allows attackers to execute arbitrary operating system commands via the wan_gateway parameter. Attackers can...

CVE-2024-51010

HIGH CVSS 8.0 Nov 5, 2024

This CVE describes a command injection vulnerability in specific Netgear router models that allows attackers to execute arbitrary operating system commands through the ap_mode.cgi component. Attackers...

CVE-2021-34982

HIGH CVSS 8.8 May 7, 2024

This is a critical stack-based buffer overflow vulnerability in NETGEAR routers' httpd service that allows network-adjacent attackers to execute arbitrary code as root without authentication. It affec...

CVE-2021-45649

HIGH CVSS 7.9 Dec 26, 2021

This vulnerability in certain NETGEAR routers allows unauthorized disclosure of sensitive information. Attackers can potentially access confidential data stored on affected devices. Users of specific ...

CVE-2021-34991

HIGH CVSS 8.8 Nov 15, 2021

This is a critical buffer overflow vulnerability in NETGEAR R6400v2 routers that allows network-adjacent attackers to execute arbitrary code as root without authentication. The flaw exists in the UPnP...

CVE-2021-40847

HIGH CVSS 8.1 Sep 21, 2021

This vulnerability allows remote attackers to execute arbitrary code as root on affected NETGEAR routers via a man-in-the-middle attack. The Circle update daemon downloads unsigned updates over HTTP, ...

CVE-2024-52024

MEDIUM CVSS 5.7 Nov 5, 2024

This vulnerability allows attackers to cause a Denial of Service (DoS) on affected Netgear routers by sending a specially crafted POST request that triggers a stack overflow in the pppoe_localip param...

CVE-2024-52026

MEDIUM CVSS 5.7 Nov 5, 2024

This vulnerability allows attackers to cause a Denial of Service (DoS) on affected Netgear routers by sending a specially crafted POST request that triggers a stack overflow in the pppoe_localip param...

CVE-2024-52013

MEDIUM CVSS 5.7 Nov 5, 2024

This vulnerability is a stack overflow in Netgear routers' pptp_user_ip parameter at wiz_pptp.cgi. Attackers can exploit it via crafted POST requests to cause Denial of Service (DoS), potentially cras...

CVE-2024-52015

MEDIUM CVSS 5.7 Nov 5, 2024

This vulnerability is a stack overflow in specific Netgear router models via the pptp_user_ip parameter in the bsw_pptp.cgi script. Attackers can exploit it by sending a crafted POST request to cause ...

CVE-2024-51003

MEDIUM CVSS 5.7 Nov 5, 2024

Multiple Netgear router models contain stack overflow vulnerabilities in the ap_mode.cgi component via DNS parameters. Attackers can exploit these vulnerabilities by sending crafted POST requests to c...

CVE-2024-50997

MEDIUM CVSS 5.7 Nov 5, 2024

This vulnerability allows attackers to cause a Denial of Service (DoS) on affected Netgear routers by sending a specially crafted POST request to the pptp.cgi endpoint. The stack overflow in the pptp_...