Known vulnerabilities in R6900P

Vendor: NETGEAR
Software: R6900P
Software CPE: cpe:2.3:h:netgear:r6900p:*:*:*:*:*:*:*:*
Total vulnerabilities: 22
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting R6900P R6900P is affected by 22 known vulnerabilities: 2 high, 4 medium, 16 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73697 - Stack-based buffer overflow
CWE-121 Low
No
No
1.3.3.148 15.03.2023 SB2023031507
#VU70578 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-78 Low
No
No
1.3.3.152 02.01.2023 SB2023010225
#VU70563 - Improper input validation
CWE-20 Medium
No
No
1.3.3.148 02.01.2023 SB2023010208
#VU70560 - Memory corruption
CWE-119 Low
No
No
1.3.3.152 02.01.2023 SB2023010205
#VU70117 - Memory corruption
CWE-119 Low
No
No
1.3.3.152 12.12.2022 SB2022121211
#VU70091 - Command injection
CWE-77 Low
No
No
1.3.3.152 09.12.2022 SB2022120915
#VU64857 - Command injection
CWE-77 Low
No
No
1.3.3.148 01.07.2022 SB2022070113
#VU64836 - Memory corruption
CWE-119 Low
No
No
1.3.3.148 30.06.2022 SB2022063024
#VU64835 - Improper input validation
CWE-20 Low
No
No
1.3.3.148 30.06.2022 SB2022063023
#VU64814 - Stack-based buffer overflow
CWE-121 High
No
No
1.3.3.148 30.06.2022 SB2022063006
#VU64813 - Stack-based buffer overflow
CWE-121 Medium
No
No
1.3.3.148 30.06.2022 SB2022063008
#VU62046 - Improper input validation
CWE-20 Low
No
No
1.3.2.126 11.04.2022 SB2022041107
#VU61592 - Improper Authentication
CVE-2022-27643
CWE-287 Low
No
No
1.3.3.148 24.03.2022 SB2022032410
#VU61590 - Improper Authentication
CVE-2022-27646
CWE-287 Low
Available
No
1.3.3.148 24.03.2022 SB2022032410
#VU61589 - Improper Authentication
CVE-2022-27644
CWE-287 Low
No
No
1.3.3.148 24.03.2022 SB2022032410
#VU61588 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27647
CWE-200 Low
No
No
1.3.3.148 24.03.2022 SB2022032410
#VU61586 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27642
CWE-200 Low
No
No
1.3.3.148 24.03.2022 SB2022032410
#VU61584 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2011-5325
CWE-22 Medium
No
No
1.3.3.148 24.03.2022 SB20170807113
SB2022032408
SB2021102722
and 4 more
#VU56818 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40847
CWE-94 High
No
No
3.3.142_HOTFIX 22.09.2021 SB2021092208
#VU50953 - Stack-based buffer overflow
CVE-2021-27239
CWE-121 Medium
No
No
1.3.2.132 25.02.2021 SB2021022529


Showing elements 1 - 20 out of 22