Product:

Xr1000_firmware

(Netgear)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 19
Date Id Summary Products Score Patch Annotated
2024-10-11 CVE-2024-35517 Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usb_remote_smb_conf.cgi via the share_name parameter. Xr1000_firmware 7.2
2021-12-26 CVE-2021-45510 NETGEAR XR1000 devices before 1.0.0.58 are affected by authentication bypass. Xr1000_firmware 8.8
2021-12-26 CVE-2021-45614 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7000v2 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, RAX15 before 1.0.3.96, RAX20 before 1.0.3.96, RAX200 before 1.0.4.120, RAX45 before 1.0.3.96, RAX50 before 1.0.3.96, RAX43 before 1.0.3.96, RAX40v2 before 1.0.3.96, RAX35v2 before 1.0.3.96, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, RBK752 before 3.2.17.12, RBR750 before... D7000v2_firmware, Lax20_firmware, Mk62_firmware, Mr60_firmware, Ms60_firmware, Rax15_firmware, Rax200_firmware, Rax20_firmware, Rax35v2_firmware, Rax40v2_firmware, Rax43_firmware, Rax45_firmware, Rax50_firmware, Rax75_firmware, Rax80_firmware, Rbk752_firmware, Rbk852_firmware, Rbr750_firmware, Rbr850_firmware, Rbs750_firmware, Rbs850_firmware, Xr1000_firmware 9.8
2021-12-26 CVE-2021-45621 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 3.2.18.2, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, EX3700 before 1.0.0.94, EX3800 before 1.0.0.94, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7000 before 1.0.1.104, EX7500 before 1.0.0.74, LAX20 before 1.1.6.28, MR60 before 1.0.6.116, MS60 before 1.0.6.116, R6300v2 before 1.0.4.52, R6400 before 1.0.1.70, R6400v2 before 1.0.4.106, R6700v3... Cbr40_firmware, Cbr750_firmware, Eax20_firmware, Eax80_firmware, Ex3700_firmware, Ex3800_firmware, Ex6120_firmware, Ex6130_firmware, Ex7000_firmware, Ex7500_firmware, Lax20_firmware, Mr60_firmware, Ms60_firmware, R6300v2_firmware, R6400_firmware, R6400v2_firmware, R6700v3_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7100lg_firmware, R7850_firmware, R7900_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, R8300_firmware, R8500_firmware, Rax15_firmware, Rax200_firmware, Rax20_firmware, Rax35v2_firmware, Rax40v2_firmware, Rax43_firmware, Rax45_firmware, Rax50_firmware, Rax75_firmware, Rax80_firmware, Rbk752_firmware, Rbk852_firmware, Rbr750_firmware, Rbr850_firmware, Rbs750_firmware, Rbs850_firmware, Rs400_firmware, Xr1000_firmware, Xr300_firmware 9.8
2021-12-26 CVE-2021-45622 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, EX7500 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, R6400 before 1.0.1.70, R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R6900P before 1.3.3.140, R7000 before 1.0.11.116, R7000P before 1.3.3.140, R7850 before 1.0.5.68, R7900 before... Cbr40_firmware, Cbr750_firmware, Eax20_firmware, Eax80_firmware, Ex7500_firmware, Lax20_firmware, Mk62_firmware, Mr60_firmware, Ms60_firmware, R6400_firmware, R6400v2_firmware, R6700v3_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7850_firmware, R7900_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, Rax15_firmware, Rax200_firmware, Rax20_firmware, Rax35v2_firmware, Rax40v2_firmware, Rax43_firmware, Rax45_firmware, Rax50_firmware, Rax75_firmware, Rax80_firmware, Rbk752_firmware, Rbk852_firmware, Rbr750_firmware, Rbr850_firmware, Rbs750_firmware, Rbs850_firmware, Rs400_firmware, Xr1000_firmware, Xr300_firmware 9.8
2021-12-26 CVE-2021-45612 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, EX7500 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140, R7850 before 1.0.5.74, R7900 before 1.0.4.46, R7900P... Cbr40_firmware, Cbr750_firmware, Eax20_firmware, Eax80_firmware, Ex7500_firmware, Lax20_firmware, Mk62_firmware, Mr60_firmware, Ms60_firmware, R6400v2_firmware, R6700v3_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7850_firmware, R7900_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, Rax15_firmware, Rax200_firmware, Rax20_firmware, Rax35v2_firmware, Rax40v2_firmware, Rax43_firmware, Rax45_firmware, Rax50_firmware, Rax75_firmware, Rax80_firmware, Rbk752_firmware, Rbk852_firmware, Rbr750_firmware, Rbr850_firmware, Rbs750_firmware, Rbs850_firmware, Rs400_firmware, Xr1000_firmware, Xr300_firmware 9.8
2021-12-26 CVE-2021-45613 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, D7000v2 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, MR80 before 1.1.2.20, MS80 before 1.1.2.20, RAX15 before 1.0.3.96, RAX20 before 1.0.3.96, RAX200 before 1.0.4.120, RAX45 before 1.0.3.96, RAX50 before 1.0.3.96, RAX43 before 1.0.3.96, RAX40v2 before 1.0.3.96, RAX35v2 before... Cbr40_firmware, Cbr750_firmware, D7000v2_firmware, Lax20_firmware, Mk62_firmware, Mr60_firmware, Mr80_firmware, Ms60_firmware, Ms80_firmware, Rax15_firmware, Rax200_firmware, Rax20_firmware, Rax35v2_firmware, Rax40v2_firmware, Rax43_firmware, Rax45_firmware, Rax50_firmware, Rax75_firmware, Rax80_firmware, Rbk752_firmware, Rbk852_firmware, Rbr750_firmware, Rbr850_firmware, Rbs750_firmware, Rbs850_firmware, Xr1000_firmware 9.8
2021-12-26 CVE-2021-45616 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 3.2.18.2, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140, R7850 before 1.0.5.68, R7900 before 1.0.4.46, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.68, R8000P before 1.4.2.84, RAX15 before 1.0.3.96, RAX20 before 1.0.3.96, RAX200 before... Cbr750_firmware, Lax20_firmware, Mk62_firmware, Mr60_firmware, Ms60_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7850_firmware, R7900_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, Rax15_firmware, Rax200_firmware, Rax20_firmware, Rax35v2_firmware, Rax40v2_firmware, Rax43_firmware, Rax45_firmware, Rax50_firmware, Rax75_firmware, Rax80_firmware, Rbk752_firmware, Rbk852_firmware, Rbr750_firmware, Rbr850_firmware, Rbs750_firmware, Rbs850_firmware, Rs400_firmware, Xr1000_firmware 9.8
2021-12-26 CVE-2021-45620 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, LAX20 before 1.1.6.28, MR60 before 1.0.6.116, MR80 before 1.1.2.20, MS60 before 1.0.6.116, MS80 before 1.1.2.20, MK62 before 1.0.6.116, MK83 before 1.1.2.20, R6400 before 1.0.1.70, R6400v2 before 1.0.4.106, R6700v3 before 1.0.4.106, R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before... Cbr40_firmware, Cbr750_firmware, Eax20_firmware, Eax80_firmware, Lax20_firmware, Mk62_firmware, Mk83_firmware, Mr60_firmware, Mr80_firmware, Ms60_firmware, Ms80_firmware, R6400_firmware, R6400v2_firmware, R6700v3_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7850_firmware, R7900_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, Rax15_firmware, Rax200_firmware, Rax20_firmware, Rax35v2_firmware, Rax40v2_firmware, Rax43_firmware, Rax45_firmware, Rax50_firmware, Rax75_firmware, Rax80_firmware, Rbk752_firmware, Rbk852_firmware, Rbr750_firmware, Rbr850_firmware, Rbs750_firmware, Rbs850_firmware, Rs400_firmware, Xr1000_firmware, Xr300_firmware 9.8
2021-12-26 CVE-2021-45604 Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects CBR750 before 3.2.18.2, D6220 before 1.0.0.68, D6400 before 1.0.0.102, D8500 before 1.0.3.60, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, R6300v2 before 1.0.4.50, R6400 before 1.0.1.68, R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R6900P before 1.3.3.140, R7000 before 1.0.11.116, R7000P before 1.3.3.140, R7850 before 1.0.5.68,... Cbr750_firmware, D6220_firmware, D6400_firmware, D8500_firmware, Lax20_firmware, Mk62_firmware, Mr60_firmware, Ms60_firmware, R6300_firmware, R6400_firmware, R6700_firmware, R6900p_firmware, R7000_firmware, R7000p_firmware, R7850_firmware, R7900_firmware, R7900p_firmware, R7960p_firmware, R8000_firmware, R8000p_firmware, Rax15_firmware, Rax200_firmware, Rax20_firmware, Rax35_firmware, Rax40_firmware, Rax43_firmware, Rax45_firmware, Rax50_firmware, Rax75_firmware, Rax80_firmware, Rbk752_firmware, Rbk852_firmware, Rbr750_firmware, Rbr850_firmware, Rbs750_firmware, Rbs850_firmware, Rs400_firmware, Xr1000_firmware 4.5