Known vulnerabilities in R6400v2

Vendor: NETGEAR
Software: R6400v2
Software CPE: cpe:2.3:h:netgear:r6400v2:*:*:*:*:*:*:*:*
Website: https://www.netgear.com
Total vulnerabilities: 41
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting R6400v2 R6400v2 is affected by 41 known vulnerabilities: 3 high, 8 medium, 30 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73748 - Command injection
 CWE-77 Medium
No
No
 1.0.4.118 16.03.2023 SB2023031619
#VU73746 - Memory corruption
 CWE-119 Low
No
No
 1.0.4.118 16.03.2023 SB2023031608
#VU73701 - Exposure of sensitive information to an unauthorized actor
 CWE-200 Low
No
No
 1.0.4.128 15.03.2023 SB2023031510
#VU73697 - Stack-based buffer overflow
 CWE-121 Low
No
No
 1.0.4.106 15.03.2023 SB2023031507
#VU73696 - Stack-based buffer overflow
 CWE-121 Low
No
No
 1.0.4.118 15.03.2023 SB2023031506
#VU70574 - Command injection
 CWE-77 Low
No
No
 1.0.4.118 02.01.2023 SB2023010221
#VU70572 - Memory corruption
 CWE-119 Low
No
No
 1.0.4.122 02.01.2023 SB2023010219
#VU70563 - Improper input validation
 CWE-20 Medium
No
No
 1.0.4.122 02.01.2023 SB2023010208
#VU70560 - Memory corruption
 CWE-119 Low
No
No
 1.0.4.122 02.01.2023 SB2023010205
#VU70091 - Command injection
 CWE-77 Low
No
No
 1.0.4.128 09.12.2022 SB2022120915
#VU70090 - Memory corruption
 CWE-119 Low
No
No
 1.0.4.118 09.12.2022 SB2022120914
#VU70064 - Command injection
 CWE-77 Medium
No
No
 1.0.4.128 08.12.2022 SB2022120842
#VU70034 - Command injection
 CWE-77 Low
No
No
 1.0.4.122 07.12.2022 SB2022120719
#VU65117 - Improper Authentication
 CWE-287 Medium
No
No
 1.0.4.122 11.07.2022 SB2022071131
#VU64835 - Improper input validation
 CWE-20 Low
No
No
 1.0.4.122 30.06.2022 SB2022063023
#VU64832 - Command injection
 CWE-77 Low
No
No
 1.0.4.122 30.06.2022 SB2022063021
#VU64827 - Command injection
 CWE-77 Low
No
No
 1.0.4.122 30.06.2022 SB2022063018
#VU64824 - Command injection
 CWE-77 Low
No
No
 1.0.4.118 30.06.2022 SB2022063017
#VU64822 - Command injection
 CWE-77 Low
No
No
 1.0.4.118 30.06.2022 SB2022063016
#VU64819 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 1.0.4.126 30.06.2022 SB2022063014


Showing elements 1 - 20 out of 41