Approved changes feed: RSS · Atom

cpe:2.3:o:netgear:rax15_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorNetgear (99700297-c207-56f4-abd0-97ab0c8bf3ab)
ProductRax15 Firmware (104e4989-959d-54d7-9806-1960a045d139)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-27647 vulnerable 2026-06-08 05:42:42.731022 Details available
HIGH (8)
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the name or email field provided to libreadycloud.so. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15874.
Published: 2023-03-29T00:00:00.000Z
Updated: 2025-02-18T17:41:07.125Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27645 vulnerable 2026-06-08 05:42:42.723081 Details available
HIGH (8.8)
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within readycloud_control.cgi. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15762.
Published: 2023-03-29T00:00:00.000Z
Updated: 2025-02-18T17:47:52.653Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27642 vulnerable 2026-06-08 05:42:42.648502 Details available
MEDIUM (6.3)
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-15854.
Published: 2023-03-29T00:00:00.000Z
Updated: 2025-02-18T17:49:51.215Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45676 vulnerable 2026-06-08 05:36:49.292811 Details available
MEDIUM (4.3)
Certain NETGEAR devices are affected by stored XSS. This affects RAX200 before 1.0.5.126, RAX20 before 1.0.2.82, RAX80 before 1.0.5.126, RAX15 before 1.0.2.82, and RAX75 before 1.0.5.126.
Published: 2021-12-26T00:23:49.000Z
Updated: 2024-08-04T04:47:01.977Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45674 vulnerable 2026-06-08 05:36:49.202478 Details available
LOW (3.2)
Certain NETGEAR devices are affected by stored XSS. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before 1.0.4.62, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX200 before 1.0.3.106, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106.
Published: 2021-12-26T00:24:15.000Z
Updated: 2024-08-04T04:47:01.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45671 vulnerable 2026-06-08 05:36:49.197095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45670 vulnerable 2026-06-08 05:36:49.194354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45669 vulnerable 2026-06-08 05:36:49.192392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45668 vulnerable 2026-06-08 05:36:49.190954 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45667 vulnerable 2026-06-08 05:36:49.188744 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45647 vulnerable 2026-06-08 05:36:49.157994 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45639 vulnerable 2026-06-08 05:36:49.059581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45622 vulnerable 2026-06-08 05:36:49.002689 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45621 vulnerable 2026-06-08 05:36:48.994483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45620 vulnerable 2026-06-08 05:36:48.970021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45617 vulnerable 2026-06-08 05:36:48.925646 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45616 vulnerable 2026-06-08 05:36:48.918432 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45614 vulnerable 2026-06-08 05:36:48.912942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45613 vulnerable 2026-06-08 05:36:48.898737 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45612 vulnerable 2026-06-08 05:36:48.888568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45610 vulnerable 2026-06-08 05:36:48.868168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45604 vulnerable 2026-06-08 05:36:48.831818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45549 vulnerable 2026-06-08 05:36:48.590415 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45539 vulnerable 2026-06-08 05:36:48.504688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45530 vulnerable 2026-06-08 05:36:48.467828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38524 vulnerable 2026-06-08 05:33:47.703575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34991 vulnerable 2026-06-08 05:32:17.353493 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34983 vulnerable 2026-06-08 05:32:17.336540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34982 vulnerable 2026-06-08 05:32:17.299350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29073 vulnerable 2026-06-08 05:31:25.783194 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29068 vulnerable 2026-06-08 05:31:25.670991 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35800 vulnerable 2026-06-08 05:25:02.017764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35798 vulnerable 2026-06-08 05:25:01.933683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35796 vulnerable 2026-06-08 05:25:01.912886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35795 vulnerable 2026-06-08 05:25:01.826614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.