Known vulnerabilities in XR300

Vendor: NETGEAR
Software: XR300
Software CPE: cpe:2.3:h:netgear:xr300:*:*:*:*:*:*:*:*
Website: https://www.netgear.com
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting XR300 XR300 is affected by 9 known vulnerabilities: 2 high, 3 medium, 4 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70564 - Command injection
 CWE-77 Low
No
No
 1.0.3.50 02.01.2023 SB2023010209
#VU70092 - Stack-based buffer overflow
 CWE-121 Low
No
No
 1.0.3.50 09.12.2022 SB2022120916
#VU69031 - Stack-based buffer overflow
 CWE-121 Medium
No
No
 1.0.3.78 07.11.2022 SB2022110732
#VU67145 - Improper Authentication
 CWE-287 Medium
No
No
 1.0.3.72 09.09.2022 SB2022090911
#VU64814 - Stack-based buffer overflow
 CWE-121 High
No
No
 1.0.3.68 30.06.2022 SB2022063006
#VU62047 - Exposure of sensitive information to an unauthorized actor
 CWE-200 Low
No
No
 1.0.3.50 11.04.2022 SB2022041108
#VU61592 - Improper Authentication
CVE-2022-27643		 CWE-287 Low
No
No
 1.2.0.72 24.03.2022 SB2022032410
#VU50953 - Stack-based buffer overflow
CVE-2021-27239		 CWE-121 Medium
No
No
 1.0.3.56 25.02.2021 SB2021022529
#VU34072 - Stack-based buffer overflow
CVE-2020-15636		 CWE-121 High
No
No
 1.0.4.98 05.08.2020 SB2020080514