NETGEAR RBK22

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:netgear:rbk22:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorNetgear (99700297-c207-56f4-abd0-97ab0c8bf3ab)
ProductRbk22 (74f27889-90d2-5219-a80b-303e33d3b8ad)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-35807 not_vulnerable 2026-06-08 05:25:02.066400 Details available
MEDIUM (6)
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, RAX120 before 1.0.0.78, RBK22 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and WN3000RPv2 before 1.0.0.78.
Published: 2020-12-29T23:37:04.000Z
Updated: 2024-08-04T17:09:15.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35806 not_vulnerable 2026-06-08 05:25:02.064754 Details available
MEDIUM (6)
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, RAX120 before 1.0.0.78, RBK22 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and WN3000RPv2 before 1.0.0.78.
Published: 2020-12-29T23:37:12.000Z
Updated: 2024-08-04T17:09:15.248Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27861 not_vulnerable 2026-06-08 05:23:53.375841 Details available
HIGH (8.8)
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UA_Parser utility. A crafted Host Name option in a DHCP request can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11076.
Published: 2021-02-11T23:35:36.000Z
Updated: 2024-08-04T16:25:43.503Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.