Product:

Rbr50_firmware

(Netgear)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 103
Date Id Summary Products Score Patch Annotated
2021-04-14 CVE-2021-27253 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the rc_service parameter provided to apply_bind.cgi. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can... Br200_firmware, Br500_firmware, D7800_firmware, Ex6100v2_firmware, Ex6150_firmware, Ex6250_firmware, Ex6400_firmware, Ex6400v2_firmware, Ex6410_firmware, Ex6420_firmware, Ex7300_firmware, Ex7300v2_firmware, Ex7320_firmware, Ex7700_firmware, Ex8000_firmware, Lbr20_firmware, R7800_firmware, R8900_firmware, R9000_firmware, Rbk12_firmware, Rbk13_firmware, Rbk14_firmware, Rbk15_firmware, Rbk20_firmware, Rbk23_firmware, Rbk40_firmware, Rbk43_firmware, Rbk43s_firmware, Rbk44_firmware, Rbk50_firmware, Rbk53_firmware, Rbr10_firmware, Rbr20_firmware, Rbr40_firmware, Rbr50_firmware, Rbs10_firmware, Rbs20_firmware, Rbs40_firmware, Rbs50_firmware, Rbs50y_firmware, Xr450_firmware, Xr500_firmware, Xr700_firmware 8.8
2021-08-11 CVE-2021-38514 Certain NETGEAR devices are affected by authentication bypass. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6100 before 1.0.0.63, D6200 before 1.1.00.34, D6220 before 1.0.0.48, D6400 before 1.0.0.86, D7000 before 1.0.1.70, D7000v2 before 1.0.0.52, D7800 before 1.0.1.56, D8500 before 1.0.3.44, DC112A before 1.0.0.42, DGN2200v4 before 1.0.0.108, DGND2200Bv4 before 1.0.0.108, EX2700 before 1.0.1.48, EX3700 before 1.0.0.76, EX3800 before 1.0.0.76, EX6000 before 1.0.0.38, EX6100... D3600_firmware, D6000_firmware, D6100_firmware, D6200_firmware, D6220_firmware, D6400_firmware, D7000_firmware, D7800_firmware, D8500_firmware, Dc112a_firmware, Dgn2200_firmware, Dgnd2200b_firmware, Ex2700_firmware, Ex3700_firmware, Ex3800_firmware, Ex6000_firmware, Ex6100_firmware, Ex6120_firmware, Ex6130_firmware, Ex6150_firmware, Ex6200_firmware, Ex6400_firmware, Ex7000_firmware, Ex7300_firmware, Ex8000_firmware, Jr6150_firmware, Pr2000_firmware, R6020_firmware, R6050_firmware, R6080_firmware, R6120_firmware, R6220_firmware, R6250_firmware, R6300_firmware, R6400_firmware, R6700_firmware, R6800_firmware, R6900_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7100lg_firmware, R7300dst_firmware, R7500_firmware, R7800_firmware, R7900_firmware, R7900p_firmware, R8000_firmware, R8000p_firmware, R8300_firmware, R8500_firmware, R9000_firmware, Rbk40_firmware, Rbk50_firmware, Rbk50v_firmware, Rbr40_firmware, Rbr50_firmware, Rbs40_firmware, Rbs40v_firmware, Rbs50_firmware, Rbw30_firmware, Wn2000rpt_firmware, Wn2500rp_firmware, Wn3000rp_firmware, Wn3100rp_firmware, Wndr3400_firmware, Wndr3700_firmware, Wndr4300_firmware, Wndr4500_firmware, Wnr2000_firmware, Wnr2020_firmware, Wnr2050_firmware, Wnr3500l_firmware, Xr500_firmware 2.7
2021-08-11 CVE-2021-38516 Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D7000v2 before 1.0.0.52, D7800 before 1.0.1.44, D8500 before 1.0.3.43, DC112A before 1.0.0.40, DGN2200v4 before 1.0.0.108, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50 before 2.3.0.32, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK40 before 2.3.0.28, RBR40 before 2.3.0.28, RBS40 before 2.3.0.28, R6020 before... Ac2100_firmware, Ac2400_firmware, Ac2600_firmware, D6220_firmware, D6400_firmware, D7000_firmware, D7800_firmware, D8500_firmware, Dc112a_firmware, Dgn2200_firmware, R6020_firmware, R6080_firmware, R6120_firmware, R6220_firmware, R6230_firmware, R6250_firmware, R6260_firmware, R6350_firmware, R6400_firmware, R6700_firmware, R6800_firmware, R6850_firmware, R6900_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7100lg_firmware, R7200_firmware, R7350_firmware, R7400_firmware, R7450_firmware, R7500_firmware, R7800_firmware, R7900_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, R8900_firmware, R9000_firmware, Rax120_firmware, Rbk20_firmware, Rbk40_firmware, Rbk50_firmware, Rbk752_firmware, Rbk852_firmware, Rbr20_firmware, Rbr40_firmware, Rbr50_firmware, Rbr750_firmware, Rbr850_firmware, Rbs20_firmware, Rbs40_firmware, Rbs50_firmware, Rbs750_firmware, Rbs850_firmware, Wnr3500l_firmware, Xr450_firmware, Xr500_firmware 9.8
2021-08-11 CVE-2021-38527 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.14, EX6100v2 before 1.0.1.98, EX6150v2 before 1.0.1.98, EX6250 before 1.0.0.132, EX6400 before 1.0.2.158, EX6400v2 before 1.0.0.132, EX6410 before 1.0.0.132, EX6420 before 1.0.0.132, EX7300 before 1.0.2.158, EX7300v2 before 1.0.0.132, EX7320 before 1.0.0.132, EX7700 before 1.0.0.216, EX8000 before 1.0.1.232, R7800 before 1.0.2.78, RBK12 before 2.6.1.44, RBR10 before... Cbr40_firmware, Ex6100_firmware, Ex6150_firmware, Ex6250_firmware, Ex6400_firmware, Ex6410_firmware, Ex6420_firmware, Ex7300_firmware, Ex7320_firmware, Ex7700_firmware, Ex8000_firmware, R7800_firmware, Rbk12_firmware, Rbk20_firmware, Rbk40_firmware, Rbk50_firmware, Rbk752_firmware, Rbk852_firmware, Rbr10_firmware, Rbr20_firmware, Rbr40_firmware, Rbr50_firmware, Rbr750_firmware, Rbr850_firmware, Rbs10_firmware, Rbs20_firmware, Rbs40_firmware, Rbs40v_firmware, Rbs50_firmware, Rbs50y_firmware, Rbs750_firmware, Rbs850_firmware, Rbw30_firmware, Xr500_firmware 9.8
2021-08-11 CVE-2021-38530 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.16, RBS40 before 2.5.1.16, RBK20 before 2.5.1.16, RBR20 before 2.5.1.16, RBS20 before 2.5.1.16, RBK50 before 2.5.1.16, RBR50 before 2.5.1.16, RBS50 before 2.5.1.16, and RBS50Y before 2.6.1.40. Rbk20_firmware, Rbk40_firmware, Rbk50_firmware, Rbr20_firmware, Rbr40_firmware, Rbr50_firmware, Rbs20_firmware, Rbs40_firmware, Rbs50_firmware, Rbs50y_firmware 9.8
2021-08-11 CVE-2021-38538 Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 before 1.0.4.26, R9000 before 1.0.4.26, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and XR500 before 2.3.2.56. D7800_firmware, R7800_firmware, R8900_firmware, R9000_firmware, Rax120_firmware, Rbk20_firmware, Rbk40_firmware, Rbk50_firmware, Rbr20_firmware, Rbr40_firmware, Rbr50_firmware, Rbs20_firmware, Rbs40_firmware, Rbs50_firmware, Xr500_firmware 6.1
2021-12-26 CVE-2021-45593 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBR20 before 2.7.3.22, RBR40 before 2.7.3.22, RBR50 before 2.7.2.102, RBS20 before 2.7.3.22, RBS40 before 2.7.3.22, RBR50 before 2.7.2.102, RBK20 before 2.7.3.22, RBK40 before 2.7.3.22, and RBK50 before 2.7.2.102. Rbk20_firmware, Rbk40_firmware, Rbk50_firmware, Rbr20_firmware, Rbr40_firmware, Rbr50_firmware, Rbs20_firmware, Rbs40_firmware 6.8
2021-12-26 CVE-2021-45594 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBS50Y before 2.7.3.22, RBR20 before 2.7.3.22, RBR40 before 2.7.3.22, RBR50 before 2.7.3.22, RBS20 before 2.7.3.22, RBS40 before 2.7.3.22, RBS50 before 2.7.3.22, RBK20 before 2.7.3.22, RBK40 before 2.7.3.22, and RBK50 before 2.7.3.22. Rbk20_firmware, Rbk40_firmware, Rbk50_firmware, Rbr20_firmware, Rbr40_firmware, Rbr50_firmware, Rbs20_firmware, Rbs40_firmware, Rbs50_firmware, Rbs50y_firmware 6.8
2021-12-26 CVE-2021-45595 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects LBR20 before 2.6.3.50, RBS50Y before 2.7.3.22, RBR10 before 2.7.3.22, RBR20 before 2.7.3.22, RBR40 before 2.7.3.22, RBR50 before 2.7.3.22, RBS10 before 2.7.3.22, RBS20 before 2.7.3.22, RBS40 before 2.7.3.22, RBS50 before 2.7.3.22, RBK12 before 2.7.3.22, RBK20 before 2.7.3.22, RBK40 before 2.7.3.22, and RBK50 before 2.7.3.22. Lbr20_firmware, Rbk12_firmware, Rbk20_firmware, Rbk40_firmware, Rbk50_firmware, Rbr10_firmware, Rbr20_firmware, Rbr40_firmware, Rbr50_firmware, Rbs10_firmware, Rbs20_firmware, Rbs40_firmware, Rbs50_firmware, Rbs50y_firmware 8.8
2021-12-26 CVE-2021-45618 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7800 before 1.0.1.64, EX6200v2 before 1.0.1.86, EX6250 before 1.0.0.134, EX7700 before 1.0.0.216, EX8000 before 1.0.1.232, LBR20 before 2.6.3.50, R7800 before 1.0.2.80, R8900 before 1.0.5.26, R9000 before 1.0.5.26, RAX120 before 1.2.0.16, RBS50Y before 1.0.0.56, WNR2000v5 before 1.0.0.76, XR450 before 2.3.2.114, XR500 before 2.3.2.114, XR700 before 1.0.1.36, EX6150v2 before 1.0.1.98,... D7800_firmware, Ex6100v2_firmware, Ex6150v2_firmware, Ex6200v2_firmware, Ex6250_firmware, Ex6400_firmware, Ex6400v2_firmware, Ex6410_firmware, Ex6420_firmware, Ex7300_firmware, Ex7300v2_firmware, Ex7320_firmware, Ex7700_firmware, Ex8000_firmware, Lbr20_firmware, R7800_firmware, R8900_firmware, R9000_firmware, Rax120_firmware, Rbk12_firmware, Rbk20_firmware, Rbk40_firmware, Rbk50_firmware, Rbr10_firmware, Rbr20_firmware, Rbr40_firmware, Rbr50_firmware, Rbs10_firmware, Rbs20_firmware, Rbs40_firmware, Rbs50_firmware, Rbs50y_firmware, Wnr2000v5_firmware, Xr450_firmware, Xr500_firmware, Xr700_firmware 9.8