R7960p Firmware vulnerabilities

9 known vulnerabilities in R7960p Firmware from NETGEAR. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  R6700v3: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-27647Mar 29, 2023NETGEAREPSS 1.48%

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can

• 8.8 High severity

  R6700v3: Stack-based Buffer Overflow

  CVE-2022-27646Mar 29, 2023NETGEAREPSS 1.43%

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can

• 8.8 High severity

  R6700v3: Incorrect Comparison

  CVE-2022-27645Mar 29, 2023NETGEAREPSS 1.28%

  This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within readycloud_control.cgi. The issue

• 8.8 High severity

  R6700v3: Improper Certificate Validation

  CVE-2022-27644Mar 29, 2023NETGEAR

  This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw e

• 8.8 High severity

  R6700v3: Buffer Copy without Checking Size of Input

  CVE-2022-27643Mar 29, 2023NETGEAREPSS 25.4%

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of

• 8.8 High severity

  R6700v3: Incorrect Authorization

  CVE-2022-27642Mar 29, 2023NETGEAR

  This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd servic

• 9.8 Critical severity

  Mr60 Firmware: Out-of-bounds Write

  CVE-2022-48322Feb 13, 2023NETGEAR

  NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability. This affects MR60 before 1.1.7.132, MS60 before 1.1.7.132, R6900P before 1.3.3.154, R7000P before 1.3.3.154, R7960P before 1.4.4.94, and R8000P before

• 7.8 High severity

  R7000p Firmware: Out-of-bounds Write

  CVE-2022-48176Jan 31, 2023NETGEAR

  Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authentication stack overflow.

• 9.8 Critical severity

  Rax40 Firmware: Buffer Copy without Checking Size of Input

  CVE-2022-48196Dec 30, 2022NETGEAR

  Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX40 before 1.0.2.60, RAX35 before 1.0.2.60, R6400v2 before 1.0.4.122, R6700v3 before 1.0.4.122, R6900P before 1.3.3.152, R7000P before 1.3.3.152, R7000 bef