Netgear R7000P vulnerabilities
5 known vulnerabilities affecting netgear/r7000p.
Total CVEs
5
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2MEDIUM3
Vulnerabilities
Page 1 of 1
CVE-2025-12945P3HIGHCVSS 7.2≤ 1.3.3.1542025-12-09
CVE-2025-12945 [HIGH] CWE-20 CVE-2025-12945: An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers
An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router software and functionality impacting its integrity. There is no additional impact to confidenti
nvd
CVE-2024-12988P3HIGHCVSS 7.5v1.3.3.1542024-12-27
CVE-2024-12988 [HIGH] CWE-119 CVE-2024-12988: A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Af
A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of the component HTTP Header Handler. The manipulation of the argument Host leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be use
nvd
CVE-2026-0417P4MEDIUMCVSS 4.5fixed in V1.3.3.1522026-06-09
CVE-2026-0417 [MEDIUM] CWE-20 CVE-2026-0417: Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated admin
Insufficient input validation vulnerability in the listed NETGEAR devices allows
authenticated administrators connected to the local network to tamper with
the router's integrity.
nvd
CVE-2026-9210P4MEDIUMCVSS 4.5fixed in V1.3.3.1522026-06-09
CVE-2026-9210 [MEDIUM] CWE-20 CVE-2026-9210: Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated admini
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
nvd
CVE-2026-9218P4MEDIUMCVSS 4.5fixed in V1.3.3.1522026-10-13
CVE-2026-9218 [MEDIUM] CWE-20 CVE-2026-9218: Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR model
Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has the router’s administrator credentials to run unauthorized commands on the router. This vulnerability could impact the integrity of the affected router. There is no impact on con
nvd