NN
Product
NETGEAR Nighthawk WiFi6 Router
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 1Low 0
Watch
Add NETGEAR Nighthawk WiFi6 Router to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-27853 | 9.8 | Mar 10 | NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary code on the device Affected: prior to V1.0.10.94 |
| CVE-2023-27852 | 9.8 | Mar 10 | NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms that could allow an attacker to execute arbitrary code on the… Affected: prior to V1.0.10.94 |
| CVE-2023-1205 | 8.8 | Mar 10 | NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF protections Affected: prior to V1.0.10.94 |
| CVE-2023-27851 | 8.8 | Mar 10 | NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users with upload permissions to execute arbitrary code on the… Affected: prior to V1.0.10.94 |
| CVE-2022-47209 | 8.8 | Dec 16 | A support user exists on the device and appears to be a backdoor for Technical Support staff Affected: NETGEAR Nighthawk WiFi6 Router prior to V1.0.9.90 |
| CVE-2022-47208 | 8.8 | Dec 16 | The “puhttpsniff” service, which runs by default, is susceptible to command injection due to improperly sanitized user input Affected: NETGEAR Nighthawk WiFi6 Router prior to V1.0.9.90 |
| CVE-2023-27850 | 6.8 | Mar 10 | NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that allows users with access to this feature to access arbitrary files on the device Affected: prior to V1.0.10.94 |
Showing 7