📦 R8900 Firmware

This CVE allows unauthenticated remote attackers to execute arbitrary commands on affected NETGEAR devices via command injection. It impacts numerous routers, extenders, and WiFi systems from NETGEAR,...

This CVE describes a missing function-level access control vulnerability in numerous NETGEAR routers, gateways, and WiFi systems. It allows attackers to bypass authentication and access administrative...

This CVE describes a critical buffer overflow vulnerability in multiple NETGEAR routers, range extenders, and Orbi WiFi systems. An unauthenticated attacker can exploit this remotely to execute arbitr...

CVE-2020-35800 is a security misconfiguration vulnerability affecting numerous NETGEAR routers, range extenders, and Orbi WiFi systems. It allows attackers to bypass authentication and access administ...

This is a critical remote code execution vulnerability in NETGEAR R7800 routers that allows network-adjacent attackers to execute arbitrary code as root without authentication. The vulnerability exist...

This CVE describes a firmware modification vulnerability in multiple Netgear router models where firmware integrity checks use a fixed checksum. Attackers can perform man-in-the-middle attacks to modi...

This CVE describes a server-side injection vulnerability affecting multiple NETGEAR routers, extenders, and WiFi systems. Attackers can inject malicious code that executes on affected devices, potenti...

This CVE affects multiple NETGEAR routers, extenders, and WiFi systems due to incorrect security configuration settings. The vulnerability could allow attackers to bypass security controls or gain una...

This vulnerability allows network-adjacent attackers to execute arbitrary code with root privileges on NETGEAR Nighthawk R7800 routers by exploiting insecure firmware update protocols. No authenticati...

This vulnerability allows network-adjacent attackers to bypass authentication and execute arbitrary code with root privileges on NETGEAR Nighthawk R7800 routers. The flaw exists in the handling of the...

This vulnerability allows unauthenticated remote attackers to execute arbitrary code with root privileges on NETGEAR R7800 routers. The flaw exists in the refresh_status.aspx endpoint which doesn't re...