R6250 Firmware vulnerabilities

2 known vulnerabilities in R6250 Firmware from NETGEAR. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  R6250 Firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2023-33532Jun 6, 2023NETGEAREPSS 16.2%

  There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management privileges, they can inject commands into the post request parameters, thereby gaining shell privileges.

• 8.8 High severity

  NETGEAR Multiple Routers Remote Code Execution Exploited

  CVE-2016-6277Dec 14, 2016NETGEAREPSS 99.8%

  NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000