Rax80 Firmware vulnerabilities

6 known vulnerabilities in Rax80 Firmware from NETGEAR. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  r6400v2: Buffer Copy without Checking Size of Input

  CVE-2023-36187Sep 1, 2023NETGEAREPSS 1.13%

  Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd.

• 8.0 High severity

  R6700v3: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-27647Mar 29, 2023NETGEAREPSS 1.48%

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can

• 8.8 High severity

  R6700v3: Stack-based Buffer Overflow

  CVE-2022-27646Mar 29, 2023NETGEAREPSS 1.43%

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can

• 8.8 High severity

  R6700v3: Improper Certificate Validation

  CVE-2022-27644Mar 29, 2023NETGEAR

  This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw e

• 8.8 High severity

  R6700v3: Buffer Copy without Checking Size of Input

  CVE-2022-27643Mar 29, 2023NETGEAREPSS 25.4%

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of

• 8.8 High severity

  R6700v3: Incorrect Authorization

  CVE-2022-27642Mar 29, 2023NETGEAR

  This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd servic