R8000 Firmware vulnerabilities

7 known vulnerabilities in R8000 Firmware from NETGEAR. 7 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  R6700v3: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-27647Mar 29, 2023NETGEAREPSS 1.48%

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can

• 8.8 High severity

  R6700v3: Stack-based Buffer Overflow

  CVE-2022-27646Mar 29, 2023NETGEAREPSS 1.43%

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can

• 8.8 High severity

  R6700v3: Incorrect Comparison

  CVE-2022-27645Mar 29, 2023NETGEAREPSS 1.28%

  This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within readycloud_control.cgi. The issue

• 8.8 High severity

  R6700v3: Improper Certificate Validation

  CVE-2022-27644Mar 29, 2023NETGEAR

  This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw e

• 8.8 High severity

  R6700v3: Buffer Copy without Checking Size of Input

  CVE-2022-27643Mar 29, 2023NETGEAREPSS 25.4%

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of

• 8.8 High severity

  R6700v3: Incorrect Authorization

  CVE-2022-27642Mar 29, 2023NETGEAR

  This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd servic

• 8.8 High severity

  NETGEAR Multiple Routers Remote Code Execution Exploited

  CVE-2016-6277Dec 14, 2016NETGEAREPSS 99.8%

  NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000