Known vulnerabilities in CBR40

Vendor: NETGEAR
Software: CBR40
Software CPE: cpe:2.3:h:netgear:cbr40:*:*:*:*:*:*:*:*
Website: https://www.netgear.com
Total vulnerabilities: 11
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting CBR40 CBR40 is affected by 11 known vulnerabilities: 1 high, 2 medium, 8 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73746 - Memory corruption
 CWE-119 Low
No
No
 2.5.0.24 16.03.2023 SB2023031608
#VU73744 - Command injection
 CWE-77 High
No
No
 2.5.0.28 16.03.2023 SB2023031607
#VU70577 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
 CWE-78 Low
No
No
 2.5.0.24 02.01.2023 SB2023010224
#VU64832 - Command injection
 CWE-77 Low
No
No
 2.5.0.24 30.06.2022 SB2022063021
#VU64829 - Improper Authentication
 CWE-287 Medium
No
No
 2.5.0.28 30.06.2022 SB2022063019
#VU64822 - Command injection
 CWE-77 Low
No
No
 2.5.0.24 30.06.2022 SB2022063016
#VU62046 - Improper input validation
 CWE-20 Low
No
No
 2.3.5.12 11.04.2022 SB2022041107
#VU62045 - Improper input validation
 CWE-20 Low
No
No
 2.3.5.12 11.04.2022 SB2022041106
#VU61590 - Improper Authentication
CVE-2022-27646		 CWE-287 Low
Available
No
 2.5.0.28 24.03.2022 SB2022032410
#VU61589 - Improper Authentication
CVE-2022-27644		 CWE-287 Low
No
No
 2.5.0.28 24.03.2022 SB2022032410
#VU61584 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2011-5325		 CWE-22 Medium
No
No
 2.5.0.28 24.03.2022 SB20170807113
SB2022032408
SB2021102722
and 4 more