📦 Rbr40 Firmware

by Netgear

🔍 What is Rbr40 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2021-45626

CRITICAL CVSS 9.6 Dec 26, 2021

This vulnerability allows unauthenticated attackers to execute arbitrary commands on affected NETGEAR WiFi systems. It affects multiple NETGEAR Orbi mesh WiFi router models before specific firmware ve...

CVE-2021-45619

CRITICAL CVSS 9.6 Dec 26, 2021

This CVE allows unauthenticated remote attackers to execute arbitrary commands on affected NETGEAR devices via command injection. It impacts numerous routers, extenders, and WiFi systems from NETGEAR,...

CVE-2021-38530

CRITICAL CVSS 9.6 Aug 11, 2021

This vulnerability allows unauthenticated attackers to execute arbitrary commands on affected NETGEAR Orbi WiFi systems. It affects multiple RBK, RBR, and RBS models running outdated firmware. Attacke...

CVE-2021-38516

CRITICAL CVSS 10.0 Aug 11, 2021

This CVE describes a missing function-level access control vulnerability in numerous NETGEAR routers, gateways, and WiFi systems. It allows attackers to bypass authentication and access administrative...

CVE-2020-35795

CRITICAL CVSS 9.8 Dec 30, 2020

This CVE describes a critical buffer overflow vulnerability in multiple NETGEAR routers, range extenders, and Orbi WiFi systems. An unauthenticated attacker can exploit this remotely to execute arbitr...

CVE-2020-35800

CRITICAL CVSS 9.4 Dec 30, 2020

CVE-2020-35800 is a security misconfiguration vulnerability affecting numerous NETGEAR routers, range extenders, and Orbi WiFi systems. It allows attackers to bypass authentication and access administ...

CVE-2021-34947

HIGH CVSS 8.8 May 7, 2024

This is a critical remote code execution vulnerability in NETGEAR R7800 routers that allows network-adjacent attackers to execute arbitrary code as root without authentication. The vulnerability exist...

CVE-2022-27644

HIGH CVSS 8.8 Mar 29, 2023

CVE-2022-27644 is a certificate validation vulnerability in NETGEAR R6700v3 routers that allows network-adjacent attackers to intercept HTTPS downloads. This can lead to arbitrary code execution as ro...

CVE-2022-27646

HIGH CVSS 8.8 Mar 29, 2023

This vulnerability allows network-adjacent attackers to bypass authentication and execute arbitrary code with root privileges on NETGEAR R6700v3 routers by exploiting a stack-based buffer overflow in ...

CVE-2021-45660

HIGH CVSS 7.1 Dec 26, 2021

This CVE describes a server-side injection vulnerability in certain NETGEAR Orbi WiFi systems. It allows attackers to inject malicious code that could compromise the device's web interface or underlyi...

CVE-2021-45656

HIGH CVSS 7.1 Dec 26, 2021

This CVE describes a server-side injection vulnerability in multiple NETGEAR router and WiFi system models, allowing attackers to execute arbitrary code or commands on affected devices. It impacts use...

CVE-2021-45642

HIGH CVSS 7.5 Dec 26, 2021

This CVE affects multiple NETGEAR routers, extenders, and WiFi systems due to incorrect security configuration settings. The vulnerability could allow attackers to bypass security controls or gain una...

CVE-2021-45593

HIGH CVSS 8.4 Dec 26, 2021

This vulnerability allows authenticated users to execute arbitrary commands on affected NETGEAR WiFi systems through command injection. It affects multiple NETGEAR Orbi router and satellite models run...

CVE-2021-45595

HIGH CVSS 7.6 Dec 26, 2021

This vulnerability allows authenticated users to execute arbitrary commands on affected NETGEAR WiFi systems through command injection. It affects multiple NETGEAR Orbi and Nighthawk mesh WiFi systems...

CVE-2021-38527

HIGH CVSS 8.1 Aug 11, 2021

This vulnerability allows unauthenticated attackers to execute arbitrary commands on affected NETGEAR devices via command injection. It affects multiple NETGEAR routers, extenders, and WiFi systems ru...

CVE-2021-27251

HIGH CVSS 8.8 Apr 14, 2021

This vulnerability allows network-adjacent attackers to execute arbitrary code with root privileges on NETGEAR Nighthawk R7800 routers by exploiting insecure firmware update protocols. No authenticati...

CVE-2021-27253

HIGH CVSS 8.8 Apr 14, 2021

This vulnerability allows network-adjacent attackers to bypass authentication and execute arbitrary code with root privileges on NETGEAR Nighthawk R7800 routers. The flaw exists in the handling of the...

CVE-2021-27255

HIGH CVSS 8.8 Mar 5, 2021

This vulnerability allows unauthenticated remote attackers to execute arbitrary code with root privileges on NETGEAR R7800 routers. The flaw exists in the refresh_status.aspx endpoint which doesn't re...