Vendor
NETGEAR: actively exploited vulnerabilities
8 vulnerabilities in NETGEAR products are listed in CISA’s catalog of actively exploited vulnerabilities. Latest addition on September 8, 2022: CVE-2017-5521 (Multiple Devices).
- 8 exploited vulnerabilities in the catalog
- 0 added in the last 12 months
- 0 used by ransomware
- 7 products affected
Affected products
- Multiple Devices2
- DGN2200 Devices1
- JGS516PE Devices1
- Multiple Routers1
- Wireless Access Point (WAP) Devices1
- Wireless Router DGN22001
- WNR2000v5 Router1
All exploited vulnerabilities
CISA KEV catalog, newest first: each entry corresponds to observed exploitation.
2022 7 vulnerabilities
-
CVE-2017-5521NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
-
CVE-2017-6862NETGEAR Multiple Devices Buffer Overflow Vulnerability
-
CVE-2017-6334NETGEAR DGN2200 Devices OS Command Injection Vulnerability
-
CVE-2016-1555NETGEAR Multiple WAP Devices Command Injection Vulnerability
-
CVE-2016-10174NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
-
CVE-2017-6077NETGEAR DGN2200 Remote Code Execution Vulnerability
-
CVE-2016-6277NETGEAR Multiple Routers Remote Code Execution Vulnerability
2021 1 vulnerability
-
CVE-2020-26919Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability
What to do
If your estate includes any of these products, make sure the vendor’s patches are applied, starting with the most recent vulnerabilities and those used by ransomware, then look for signs of compromise: an exploited vulnerability has often been used before it was fixed.
Additions from all vendors are tracked on the Actively exploited vulnerabilities page, updated several times a day. Sources: CISA KEV catalog (US public domain) and CERT-FR.