Approved changes feed: RSS · Atom

cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorNetgear (99700297-c207-56f4-abd0-97ab0c8bf3ab)
ProductRax20 Firmware (18f6183d-ccef-51f8-a5ff-9187b6f1f059)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-27647 vulnerable 2026-06-08 05:42:42.731135 Details available
HIGH (8)
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the name or email field provided to libreadycloud.so. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15874.
Published: 2023-03-29T00:00:00.000Z
Updated: 2025-02-18T17:41:07.125Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27645 vulnerable 2026-06-08 05:42:42.723254 Details available
HIGH (8.8)
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within readycloud_control.cgi. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15762.
Published: 2023-03-29T00:00:00.000Z
Updated: 2025-02-18T17:47:52.653Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27642 vulnerable 2026-06-08 05:42:42.650266 Details available
MEDIUM (6.3)
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-15854.
Published: 2023-03-29T00:00:00.000Z
Updated: 2025-02-18T17:49:51.215Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45676 vulnerable 2026-06-08 05:36:49.292662 Details available
MEDIUM (4.3)
Certain NETGEAR devices are affected by stored XSS. This affects RAX200 before 1.0.5.126, RAX20 before 1.0.2.82, RAX80 before 1.0.5.126, RAX15 before 1.0.2.82, and RAX75 before 1.0.5.126.
Published: 2021-12-26T00:23:49.000Z
Updated: 2024-08-04T04:47:01.977Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45674 vulnerable 2026-06-08 05:36:49.202669 Details available
LOW (3.2)
Certain NETGEAR devices are affected by stored XSS. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before 1.0.4.62, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX200 before 1.0.3.106, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106.
Published: 2021-12-26T00:24:15.000Z
Updated: 2024-08-04T04:47:01.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45671 vulnerable 2026-06-08 05:36:49.196765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45670 vulnerable 2026-06-08 05:36:49.194094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45669 vulnerable 2026-06-08 05:36:49.192251 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45668 vulnerable 2026-06-08 05:36:49.190690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45667 vulnerable 2026-06-08 05:36:49.188453 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45647 vulnerable 2026-06-08 05:36:49.158135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45639 vulnerable 2026-06-08 05:36:49.058898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45622 vulnerable 2026-06-08 05:36:49.002893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45621 vulnerable 2026-06-08 05:36:48.994521 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45620 vulnerable 2026-06-08 05:36:48.970055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45617 vulnerable 2026-06-08 05:36:48.925239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45616 vulnerable 2026-06-08 05:36:48.918468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45614 vulnerable 2026-06-08 05:36:48.913164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45613 vulnerable 2026-06-08 05:36:48.898849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45612 vulnerable 2026-06-08 05:36:48.888602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45610 vulnerable 2026-06-08 05:36:48.867887 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45604 vulnerable 2026-06-08 05:36:48.831854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45549 vulnerable 2026-06-08 05:36:48.590448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45539 vulnerable 2026-06-08 05:36:48.504345 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45530 vulnerable 2026-06-08 05:36:48.464764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38524 vulnerable 2026-06-08 05:33:47.705166 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34991 vulnerable 2026-06-08 05:32:17.353649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34983 vulnerable 2026-06-08 05:32:17.336573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34982 vulnerable 2026-06-08 05:32:17.300654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29073 vulnerable 2026-06-08 05:31:25.784331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29068 vulnerable 2026-06-08 05:31:25.672346 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35800 vulnerable 2026-06-08 05:25:02.017800 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35798 vulnerable 2026-06-08 05:25:01.933825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35796 vulnerable 2026-06-08 05:25:01.913018 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35795 vulnerable 2026-06-08 05:25:01.834955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.