R7850 Firmware vulnerabilities

6 known vulnerabilities in R7850 Firmware from NETGEAR. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  R6700v3: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-27647Mar 29, 2023NETGEAREPSS 1.48%

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can

• 8.8 High severity

  R6700v3: Stack-based Buffer Overflow

  CVE-2022-27646Mar 29, 2023NETGEAREPSS 1.43%

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can

• 8.8 High severity

  R6700v3: Incorrect Comparison

  CVE-2022-27645Mar 29, 2023NETGEAREPSS 1.28%

  This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within readycloud_control.cgi. The issue

• 8.8 High severity

  R6700v3: Improper Certificate Validation

  CVE-2022-27644Mar 29, 2023NETGEAR

  This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw e

• 8.8 High severity

  R6700v3: Buffer Copy without Checking Size of Input

  CVE-2022-27643Mar 29, 2023NETGEAREPSS 25.4%

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of

• 8.8 High severity

  R6700v3: Incorrect Authorization

  CVE-2022-27642Mar 29, 2023NETGEAR

  This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd servic