ZeusQA
Start free

Known exploited vulnerabilities

NETGEAR vulnerabilities attackers have used

Every NETGEAR vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 8 NETGEAR vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2017-5521, added Sep 8, 2022. Multiple Devices has the most entries (2).

In KEV, all time
8
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

By product

Multiple Devices (2), DGN2200 Devices (1), JGS516PE Devices (1), Multiple Routers (1), Wireless Access Point (WAP) Devices (1), Wireless Router DGN2200 (1), WNR2000v5 Router (1).

Every NETGEAR entry in CISA KEV

  1. CVE-2017-5521

    Added · due

    NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability

    Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server.

  2. CVE-2017-6862

    Added · due

    NETGEAR Multiple Devices Buffer Overflow Vulnerability

    Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution.

  3. CVE-2017-6334

    Added · due

    NETGEAR DGN2200 Devices OS Command Injection Vulnerability

    dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands

  4. CVE-2016-1555

    Added · due

    NETGEAR Multiple WAP Devices Command Injection Vulnerability

    Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. Exploitation allows for arbitrary code execution.

  5. CVE-2016-10174

    Added · due

    NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability

    The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution.

  6. CVE-2017-6077

    Added · due

    NETGEAR DGN2200 Remote Code Execution Vulnerability

    NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.

  7. CVE-2016-6277

    Added · due

    NETGEAR Multiple Routers Remote Code Execution Vulnerability

    NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.

  8. CVE-2020-26919

    Added · due

    Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability

    Netgear JGS516PE devices contain a missing function level access control vulnerability.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works