Netgear Rax200 Firmware vulnerabilities

56 known vulnerabilities affecting netgear/rax200_firmware.

Total CVEs
56
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL16HIGH22MEDIUM18

Vulnerabilities

Page 2 of 3
CVE-2021-45617CRITICALCVSS 9.8fixed in 1.0.3.1062021-12-26
CVE-2021-45617 [CRITICAL] CWE-77 CVE-2021-45617: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affec Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX7500 before 1.0.0.72, R6400 before 1.0.1.68, R6900P before 1.3.2.132, R7000 before 1.0.11.116, R7000P before 1.3.2.132, R7900 before 1.0.4.38, R7960P before 1.4.1.66, R8000 bef
nvd
CVE-2021-45546HIGHCVSS 8.8fixed in 1.0.4.1202021-12-26
CVE-2021-45546 [HIGH] CWE-77 CVE-2021-45546: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R78 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7850 before 1.0.5.74, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.74, R8000P before 1.4.2.84, RAX200 before 1.0.4.120, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, RBK752 before 3.2.17.12, RBK852 before 3.2.17.12, RBR750 before 3.
nvd
CVE-2021-45606HIGHCVSS 8.8fixed in 1.0.4.1202021-12-26
CVE-2021-45606 [MEDIUM] CWE-787 CVE-2021-45606: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126, R7900 before 1.0.4.46, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.74, R8000P before 1.4.2.84, RAX200 before 1.0.4.120, RS400 before 1.5.1.80, R6400v2 before 1.0.4.118, R7
nvd
CVE-2021-45541HIGHCVSS 8.8fixed in 1.0.3.1062021-12-26
CVE-2021-45541 [HIGH] CWE-77 CVE-2021-45541: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R79 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7900 before 1.0.4.38, R7900P before 1.4.2.84, R8000 before 1.0.4.68, R8000P before 1.4.2.84, RAX200 before 1.0.3.106, MR60 before 1.0.6.110, RAX45 before 1.0.2.72, RAX80 before 1.0.3.106, MS60 before 1.0.6.110, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106
nvd
CVE-2021-45647HIGHCVSS 7.5fixed in 1.0.3.1062021-12-26
CVE-2021-45647 [MEDIUM] CWE-200 CVE-2021-45647: Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EAX80 befo Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EAX80 before 1.0.1.62, EX7000 before 1.0.1.104, R6120 before 1.0.0.76, R6220 before 1.1.0.110, R6230 before 1.1.0.110, R6260 before 1.1.0.78, R6850 before 1.1.0.78, R6350 before 1.1.0.78, R6330 before 1.1.0.78, R6800 before 1.2.0.76, R6900v2 before 1.2.0.76, R6
nvd
CVE-2021-45540HIGHCVSS 8.4fixed in 1.0.3.1062021-12-26
CVE-2021-45540 [HIGH] CWE-77 CVE-2021-45540: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R70 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7000 before 1.0.11.126, R7900 before 1.0.4.46, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.74, R8000P before 1.4.2.84, RAX200 before 1.0.3.106, MR60 before 1.0.6.110, RAX45 before 1.0.2.66, RAX80 before 1.0.3.106, MS60 before 1.0.6.1
nvd
CVE-2021-45607HIGHCVSS 8.8fixed in 1.0.5.1262021-12-26
CVE-2021-45607 [MEDIUM] CWE-787 CVE-2021-45607: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140, RAX200 before 1.0.5.126, RAX75 before 1.0.5.126, and RAX80 before 1.0.5.126.
nvd
CVE-2021-45544HIGHCVSS 8.8fixed in 1.0.4.1202021-12-26
CVE-2021-45544 [HIGH] CWE-77 CVE-2021-45544: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R78 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7850 before 1.0.5.74, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.74, R8000P before 1.4.2.84, RAX200 before 1.0.4.120, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 befor
nvd
CVE-2021-45530HIGHCVSS 8.8fixed in 1.0.4.1202021-12-26
CVE-2021-45530 [MEDIUM] CWE-120 CVE-2021-45530: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R70 Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7000 before 1.0.11.126, R7960P before 1.4.2.84, R8000 before 1.0.4.74, RAX200 before 1.0.4.120, R8000P before 1.4.2.84, RAX20 before 1.0.2.82, RAX45 before 1.0.2.82, RAX80 before 1.0.4.120, R7900P before 1.4.2.84, RAX15 before 1.0.2.82, RAX50 before 1.0
nvd
CVE-2021-45547HIGHCVSS 8.8fixed in 1.0.4.1202021-12-26
CVE-2021-45547 [HIGH] CWE-77 CVE-2021-45547: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R78 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7850 before 1.0.5.74, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.74, R8000P before 1.4.2.84, RAX200 before 1.0.4.120, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, RBK752 before 3.2.17.12, RBK852 before 3.2.17.12, RBR750 before 3.
nvd
CVE-2021-45670MEDIUMCVSS 4.8fixed in 1.0.3.1062021-12-26
CVE-2021-45670 [MEDIUM] CWE-79 CVE-2021-45670: Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7000 before 1.0.11.116, R7900 before 1.0.4.38, R8000 before 1.0.4.68, RAX200 before 1.0.3.106, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, EX370
nvd
CVE-2021-45604MEDIUMCVSS 4.5fixed in 1.0.4.1202021-12-26
CVE-2021-45604 [MEDIUM] CWE-787 CVE-2021-45604: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects CBR750 before 3.2.18.2, D6220 before 1.0.0.68, D6400 before 1.0.0.102, D8500 before 1.0.3.60, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, R6300v2 before 1.0.4.50, R6400 before 1.0.1.68, R6400v2
nvd
CVE-2021-45549MEDIUMCVSS 6.8fixed in 1.0.4.1202021-12-26
CVE-2021-45549 [HIGH] CWE-77 CVE-2021-45549: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects LAX Certain NETGEAR devices are affected by command injection by an authenticated user. This affects LAX20 before 1.1.6.28, MK62 before 1.1.6.122, MR60 before 1.1.6.122, MS60 before 1.1.6.122, R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R6900P before 1.3.3.140, R7000 before 1.0.11.116, R7000P before 1.3.3.140, R7850 before 1.0.5.68, R7900 before 1.
nvd
CVE-2021-45639MEDIUMCVSS 6.1fixed in 1.0.2.1022021-12-26
CVE-2021-45639 [MEDIUM] CWE-79 CVE-2021-45639: Certain NETGEAR devices are affected by reflected XSS. This affects CBR40 before 2.5.0.10, EAX20 bef Certain NETGEAR devices are affected by reflected XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.32, EAX80 before 1.0.1.62, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7000 before 1.0.1.104, EX7500 before 1.0.0.72, R7000 before 1.0.11.110, R7900 before 1.0.4.30, R7960P before 1.4.1.66, R8000 before 1.0.4.62, RAX200 before 1.0.2.102
nvd
CVE-2021-45535MEDIUMCVSS 6.8fixed in 1.0.3.1062021-12-26
CVE-2021-45535 [HIGH] CWE-77 CVE-2021-45535: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RAX Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RAX200 before 1.0.3.106, RAX80 before 1.0.3.106, RAX75 before 1.0.3.106, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, and RBS850 before 3.2.16.6.
nvd
CVE-2021-45668MEDIUMCVSS 4.8fixed in 1.0.3.1062021-12-26
CVE-2021-45668 [MEDIUM] CWE-79 CVE-2021-45668: Certain NETGEAR devices are affected by stored XSS. This affects EAX20 before 1.0.0.48, EAX80 before Certain NETGEAR devices are affected by stored XSS. This affects EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7960P before 1.4.1.66, R7900P before 1.4.1.66, R8000P before 1.4.1.66, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX
nvd
CVE-2021-45674MEDIUMCVSS 4.8fixed in 1.0.3.1062021-12-26
CVE-2021-45674 [LOW] CWE-79 CVE-2021-45674: Certain NETGEAR devices are affected by stored XSS. This affects R7000 before 1.0.11.110, R7900 befo Certain NETGEAR devices are affected by stored XSS. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before 1.0.4.62, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX200 before 1.0.3.106, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106.
nvd
CVE-2021-45543MEDIUMCVSS 6.8fixed in 1.0.4.1202021-12-26
CVE-2021-45543 [HIGH] CWE-77 CVE-2021-45543: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R80 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R8000 before 1.0.4.74, RAX200 before 1.0.4.120, R8000P before 1.4.2.84, R7900P before 1.4.2.84, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, and RBK852 before 3.2.17.12.
nvd
CVE-2021-45545MEDIUMCVSS 6.8fixed in 1.0.4.1202021-12-26
CVE-2021-45545 [HIGH] CWE-77 CVE-2021-45545: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R78 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7850 before 1.0.5.74, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.74, R8000P before 1.4.2.84, RAX200 before 1.0.4.120, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 befor
nvd
CVE-2021-45673MEDIUMCVSS 5.4fixed in 1.0.3.1062021-12-26
CVE-2021-45673 [MEDIUM] CWE-79 CVE-2021-45673: Certain NETGEAR devices are affected by stored XSS. This affects R7000 before 1.0.11.110, R7900 befo Certain NETGEAR devices are affected by stored XSS. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before 1.0.4.62, RAX200 before 1.0.3.106, R7000P before 1.3.3.140, RAX80 before 1.0.3.106, R6900P before 1.3.3.140, and RAX75 before 1.0.3.106.
nvd