Netgear Rbr850 Firmware vulnerabilities
151 known vulnerabilities affecting netgear/rbr850_firmware.
Total CVEs
151
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL31HIGH60MEDIUM60
Vulnerabilities
Page 2 of 8
CVE-2020-14440P3HIGHCVSS 8.8fixed in 3.2.15.252020-06-18
CVE-2020-14440 [HIGH] CWE-77 CVE-2020-14440: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affec
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25,
nvd
CVE-2020-26902P3HIGHCVSS 8.8fixed in 3.2.15.252020-10-09
CVE-2020-26902 [HIGH] CWE-77 CVE-2020-26902: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affec
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25.
nvd
CVE-2020-26928P3CRITICALCVSS 9.6fixed in 3.2.10.112020-10-09
CVE-2020-26928 [CRITICAL] CVE-2020-26928: Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, R
Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11.
nvd
CVE-2021-29066P3CRITICALCVSS 9.6fixed in 3.2.17.122021-03-23
CVE-2021-29066 [CRITICAL] CVE-2021-29066: Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.17.12,
Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.
nvd
CVE-2021-29067P3CRITICALCVSS 9.6fixed in 3.2.17.122021-03-23
CVE-2021-29067 [CRITICAL] CVE-2021-29067: Certain NETGEAR devices are affected by authentication bypass. This affects RBW30 before 2.6.2.2, RB
Certain NETGEAR devices are affected by authentication bypass. This affects RBW30 before 2.6.2.2, RBS40V before 2.6.2.4, RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753 before 3.2.17.12, RBK753S before 3.2.17.12, RBK754 before 3.2.17.12, RBR750 bef
nvd
CVE-2020-14439P3HIGHCVSS 8.8fixed in 3.2.15.252020-06-18
CVE-2020-14439 [HIGH] CWE-77 CVE-2020-14439: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affec
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25,
nvd
CVE-2020-14436P3HIGHCVSS 8.8fixed in 3.2.15.252020-06-18
CVE-2020-14436 [HIGH] CWE-77 CVE-2020-14436: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affec
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, RBS850 before 3.2.15.25, RBK842 before 3.2.15.25,
nvd
CVE-2020-14442P3HIGHCVSS 8.8fixed in 3.2.15.252020-06-18
CVE-2020-14442 [HIGH] CWE-77 CVE-2020-14442: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affec
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25,
nvd
CVE-2020-14437P3HIGHCVSS 8.8fixed in 3.2.15.252020-06-18
CVE-2020-14437 [HIGH] CWE-77 CVE-2020-14437: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affec
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25,
nvd
CVE-2020-14438P3HIGHCVSS 8.8fixed in 3.2.15.252020-06-18
CVE-2020-14438 [HIGH] CWE-77 CVE-2020-14438: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affec
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25,
nvd
CVE-2020-14441P3HIGHCVSS 8.8fixed in 3.2.15.252020-06-18
CVE-2020-14441 [HIGH] CWE-77 CVE-2020-14441: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affec
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25,
nvd
CVE-2020-26907P3HIGHCVSS 8.8fixed in 3.2.16.62020-10-09
CVE-2020-26907 [HIGH] CWE-77 CVE-2020-26907: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affec
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, and RBS850 before 3.2.16.6.
nvd
CVE-2021-45599P3HIGHCVSS 8.8fixed in 3.2.17.122021-12-26
CVE-2021-45599 [HIGH] CWE-77 CVE-2021-45599: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.
nvd
CVE-2021-45601P3HIGHCVSS 8.8fixed in 3.2.17.122021-12-26
CVE-2021-45601 [HIGH] CWE-77 CVE-2021-45601: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.
nvd
CVE-2021-45597P3HIGHCVSS 8.8fixed in 3.2.17.122021-12-26
CVE-2021-45597 [HIGH] CWE-77 CVE-2021-45597: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, and RBS850 before 3.2.17.12.
nvd
CVE-2021-45598P3HIGHCVSS 8.8fixed in 3.2.17.122021-12-26
CVE-2021-45598 [HIGH] CWE-77 CVE-2021-45598: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.
nvd
CVE-2021-45615P3HIGHCVSS 8.8fixed in 3.2.17.122021-12-26
CVE-2021-45615 [HIGH] CWE-77 CVE-2021-45615: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affec
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000P before 1.4.2.84, R8300 before 1.0.2.154, R8500 before 1.0.2.154, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 bef
nvd
CVE-2021-27239P3HIGHCVSS 8.8fixed in 3.2.17.122021-03-29
CVE-2021-27239 [HIGH] CWE-121 CVE-2021-27239: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installat
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the upnpd service, which listens on UDP port 1900 by default. A crafted MX header field in a
nvd
CVE-2020-35796P3CRITICALCVSS 9.8fixed in 3.2.16.62020-12-30
CVE-2020-35796 [CRITICAL] CWE-120 CVE-2020-35796: Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affec
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, DC112A before 1.0.0.48, DGN2200v4 before 1.0.0.114, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX3700 before 1.0.0.84, EX3800
nvd
CVE-2020-26926P3CRITICALCVSS 9.6fixed in 3.2.10.112020-10-09
CVE-2020-26926 [CRITICAL] CVE-2020-26926: Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, R
Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11.
nvd