Vulnerabilidades em NETGEAR

200 resultados
Análise Vexday

Com 126 CVEs catalogadas, a superfície de ataque dos dispositivos NETGEAR concentra atenção em CWE-121 (Stack-based Buffer Overflow) como tipo de falha mais recorrente, o que é característico de equipamentos embarcados com restrições de desenvolvimento seguro. A taxa de exploração ativa está abaixo da média geral do catálogo CISA KEV, com zero entradas confirmadas, mas o escore EPSS de 0,8734 associado a CVE-2020-10924 indica alta probabilidade estimada de exploração para essa vulnerabilidade específica, exigindo atenção mesmo na ausência de confirmação formal no KEV. Os 17 registros surgidos nos últimos 90 dias sinalizam ritmo contínuo de descobertas, e a presença de 5 CVEs críticas somada a 2 com PoC pública representa risco concreto para ambientes que mantêm firmware desatualizado. Organizações com equipamentos NETGEAR em produção devem priorizar a verificação do status de CVE-2020-10924 e acompanhar de perto o fluxo recente de novas divulgações.

CVE-2020-10924HIGHThis vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 rEPSS 87.3%CVE-2020-10923MEDIUMThis vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 rEPSS 84.7%CVE-2023-38096CRITICALNETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass VulnerabilityEPSS 81.5%CVE-2021-27272HIGHThis vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System EPSS 73.8%CVE-2021-27275HIGHThis vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAREPSS 73.3%CVE-2021-27276HIGHThis vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System EPSS 72.5%CVE-2023-38095HIGHNETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution VulnerabilityEPSS 65.5%CVE-2021-27273HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System EPSS 65.0%CVE-2023-41182HIGHNETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution VulnerabilityEPSS 58.6%CVE-2023-38099HIGHNETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution VulnerabilityEPSS 56.8%CVE-2023-44450HIGHNETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution VulnerabilityEPSS 53.6%CVE-2023-50231HIGHNETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation VulnerabilityEPSS 53.3%CVE-2023-44449HIGHNETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation VulnerabilityEPSS 52.6%CVE-2024-5505HIGHNETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution VulnerabilityEPSS 47.0%CVE-2024-6646MEDIUMNetgear WN604 Web Interface downloadFile.php information disclosureEPSS 45.7%CVE-2024-5246HIGHNETGEAR ProSAFE Network Management System Tomcat Remote Code Execution VulnerabilityEPSS 31.3%CVE-2024-12847CRITICALNETGEAR DGN setup.cgi OS Command InjectionEPSS 29.9%CVE-2016-5649—Netgear DGN2200 and DGND3700 disclose the administrator passwordEPSS 27.2%CVE-2024-5247HIGHNETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution VulnerabilityEPSS 26.9%CVE-2022-27643HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9EPSS 25.1%