Known vulnerabilities in R8500

Known vulnerabilities in R8500

Vendor: NETGEAR

Software: R8500

Software CPE: cpe:2.3:h:netgear:r8500:*:*:*:*:*:*:*:*

Website: https://www.netgear.com

Total vulnerabilities: 14

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU77785 - Stack-based buffer overflow	CWE-121	Low	No	No	1.0.2.160	29.06.2023	SB2023062912
#VU76456 - Memory corruption CVE-2023-31070	CWE-119	Low	Available	No	-	24.05.2023	SB2023052407
#VU70091 - Command injection	CWE-77	Low	No	No	1.0.2.160	09.12.2022	SB2022120915
#VU62047 - Exposure of sensitive information to an unauthorized actor	CWE-200	Low	No	No	1.0.2.144	11.04.2022	SB2022041108
#VU62043 - Security Features	CWE-254	Medium	No	No	1.0.2.154	11.04.2022	SB2022041104
#VU61592 - Improper Authentication CVE-2022-27643	CWE-287	Low	No	No	1.0.2.158	24.03.2022	SB2022032410
#VU61591 - Exposure of sensitive information to an unauthorized actor CVE-2022-27645	CWE-200	Low	No	No	1.0.2.158	24.03.2022	SB2022032410
#VU61588 - Exposure of sensitive information to an unauthorized actor CVE-2022-27647	CWE-200	Low	No	No	1.0.2.158	24.03.2022	SB2022032410
#VU61586 - Exposure of sensitive information to an unauthorized actor CVE-2022-27642	CWE-200	Low	No	No	1.0.2.158	24.03.2022	SB2022032410
#VU50953 - Stack-based buffer overflow CVE-2021-27239	CWE-121	Medium	No	No	1.0.2.144	25.02.2021	SB2021022529
#VU10438 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')	CWE-78	Low	No	No	-	09.02.2018	SB2018020907
#VU10436 - Permissions, Privileges, and Access Controls	CWE-264	Low	No	No	-	09.02.2018	SB2018020907
#VU10434 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')	CWE-78	Low	No	No	-	09.02.2018	SB2018020907
#VU10433 - Exposure of sensitive information to an unauthorized actor	CWE-200	Low	No	No	-	09.02.2018	SB2018020907